CVE-2021-36394

This repository contains functional exploit code for CVE-2021-36394, a deserialization vulnerability in Moodle. The PoC demonstrates how to achieve RCE by crafting malicious serialized objects and triggering their deserialization via specific HTTP requests.

The repository contains a functional exploit for CVE-2021-36394, a pre-authentication RCE vulnerability in Moodle's Shibboleth authentication module. The exploit leverages deserialization to achieve remote code execution by crafting malicious input in the 'sifirst' parameter.