CVE-2021-26828

This repository contains a functional exploit for CVE-2021-26828, an authenticated arbitrary file upload vulnerability in ScadaBR. The exploit uploads a JSP webshell and triggers a reverse shell connection to an attacker-controlled host.

This repository contains a functional Python 3 exploit for CVE-2021-26828, targeting ScadaBR <1.1.0. It includes a JSP webshell upload mechanism via `view_edit.shtm` and supports reverse shell execution, enumeration, and cleanup features.

This repository contains a functional exploit for CVE-2021-26828, an authenticated arbitrary file upload vulnerability in ScadaBR. The exploit uploads a JSP webshell and triggers a reverse shell connection to an attacker-controlled host.