CVE-2020-7115

This exploit leverages an unauthenticated remote command execution vulnerability in Aruba ClearPass Policy Manager by uploading a malicious OpenSSL engine (shared library) via a POST request. The payload spawns a reverse shell using ncat.

This repository provides a functional exploit for CVE-2020-7115, which involves creating a malicious OpenSSL engine to achieve arbitrary command execution via argument injection. The PoC includes a build script and a C-based shared library that executes a command upon loading.