CVE-2021-40903

This exploit demonstrates an authentication bypass in Antminer Monitor 0.5.0 by leveraging a static secret key in the Flask settings file. The PoC provides a method to generate a valid session cookie using the known secret key, granting admin access.

This PoC demonstrates an authentication bypass in Antminer Monitor 0.5.0 by exploiting a static secret key in the Flask settings file. The exploit uses the 'flask-unsign' tool to generate a valid admin session cookie, allowing unauthorized access.