CVE-2020-11060

This exploit targets CVE-2020-11060, a remote code execution vulnerability in GLPI versions 0.8.5 to 9.4.5. The script uses a crafted payload to achieve RCE via GZIP decompression manipulation.

This exploit leverages a deserialization vulnerability in GLPI's backup functionality to achieve remote code execution by manipulating WiFi network entries and triggering a malicious backup dump. It requires authentication and iteratively attempts to create a webshell.

This PoC exploits CVE-2020-11060, a remote code execution vulnerability in GLPI. The script sends a malicious payload to the target system, leveraging a command injection flaw in the application.