CVE-2021-36711

CRITICAL

OctoBot < 0.4.4 - Remote Code Execution via Tentacles Upload

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-36711. PoCs published by Samy Younsi.

AI-analyzed exploit summary This exploit targets CVE-2021-36711 in OctoBot WebInterface versions 0.4.0beta3 to 0.4.3, achieving RCE by injecting a malicious tentacle package. The exploit crafts a backdoor by modifying Python files to include a reverse shell, then uploads and installs the package on the target system.

Description

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

Exploits (1)

exploitdb WORKING POC

by Samy Younsi · pythonwebappsmultiple

https://www.exploit-db.com/exploits/50979

View Code ZIP pw:eip

This exploit targets CVE-2021-36711 in OctoBot WebInterface versions 0.4.0beta3 to 0.4.3, achieving RCE by injecting a malicious tentacle package. The exploit crafts a backdoor by modifying Python files to include a reverse shell, then uploads and installs the package on the target system.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: OctoBot WebInterface 0.4.0beta3 - 0.4.3

No auth needed

Prerequisites: Network access to the target OctoBot instance · Target must be running a vulnerable version of OctoBot WebInterface

MITRE ATT&CK