CVE-2021-23758

This repository contains a functional proof-of-concept exploit for CVE-2021-23758, a deserialization vulnerability in Ajax.NET Professional. The exploit leverages a crafted HTTP POST request with a malicious payload to achieve remote code execution (RCE) via the `System.Windows.Data.ObjectDataProvider` type.

This Metasploit module exploits an insecure deserialization vulnerability in AjaxPro to achieve remote code execution. It constructs malicious JSON data that triggers arbitrary command execution via the `ObjectDataProvider` and `Process` classes.