CVE-2020-13945

This is a functional exploit for CVE-2020-13945, targeting Apache APISIX versions 1.2 to 1.5. It plants a backdoor via the Admin API and executes a reverse shell payload.

This repository contains a Go-based exploit for CVE-2021-45232, an unauthenticated API access vulnerability in Apache APISIX. The PoC checks for unauthenticated access to the admin API and demonstrates command execution via route manipulation.

This Metasploit module exploits CVE-2022-24112 in Apache APISIX by leveraging a default admin API token to achieve remote code execution via LUA script injection. It also bypasses IP restrictions using batch requests.