CVE-2022-2414

This is a functional proof-of-concept exploit for CVE-2022-2414, an XXE vulnerability in pki-core. It sends a crafted XML payload to retrieve the contents of /etc/passwd and generates a professional report if successful.

This is a functional PoC for CVE-2022-2414, demonstrating an XXE vulnerability in the target software. It sends a crafted XML payload to read sensitive files (e.g., /etc/passwd) from the server.

This PoC demonstrates an XXE (XML External Entity) vulnerability in FreeIPA's certificate enrollment endpoint, allowing arbitrary file read via a crafted XML payload. The exploit sends a malicious XML request to the target endpoint to retrieve the contents of /etc/passwd.

This PoC exploits an XXE (XML External Entity) vulnerability in the target software to read arbitrary files from the server. The payload is crafted to read /etc/passwd, demonstrating the vulnerability.

This repository contains a functional Python script that exploits an XXE vulnerability (CVE-2022-2414) to read sensitive files from a target server. The script sends a crafted XML payload to a specified endpoint and retrieves the response.