CVE-2019-25024

The repository contains a functional Python exploit for CVE-2019-25024, an unauthenticated command injection vulnerability in OpenRepeater (ORP) versions 2.0.x. The exploit sends a crafted POST request to the vulnerable endpoint, injecting a command via the 'post_service' parameter.

This exploit demonstrates an OS command injection vulnerability in OpenRepeater before version 2.2. It sends a crafted POST request to the vulnerable endpoint, executing an arbitrary command (e.g., 'id') via the 'post_service' parameter.