CVE-2020-8816

This exploit leverages an authenticated command injection vulnerability in Pi-hole's DHCP settings page. It logs in, retrieves a CSRF token, and injects a reverse shell payload via the 'AddMAC' parameter.

This repository contains a functional Python exploit for CVE-2020-8816, a remote code execution vulnerability in Pi-hole versions >= 4.3.2. The exploit authenticates with the target, retrieves a session token, and injects a reverse shell payload via a command injection in the DHCP settings.

This repository contains a functional Python exploit for CVE-2020-8816, a remote code execution vulnerability in Pi-hole's admin web interface. The exploit leverages command injection via the DHCP settings page, requiring authentication and a specific PATH configuration for successful RCE.

This repository contains a functional Go-based exploit for CVE-2020-8816, a Remote Code Execution (RCE) vulnerability in Pi-hole versions <= 4.3.2. The exploit authenticates to the admin panel, extracts a CSRF token, and injects a reverse shell payload via command injection in the DHCP settings.

The repository claims to provide a PoC for CVE-2020-8816 but only includes a README with defensive notes and references an external PDF for the actual exploit. No functional exploit code is present.

This Metasploit module exploits a command execution vulnerability in Pi-Hole <= 4.3.2 by adding a DHCP static lease with a crafted MAC address containing an RCE payload. The exploit leverages the $PATH environment variable to bypass input capitalization constraints.