CVE-2022-26318

This is a Python-based exploit for CVE-2022-26318, targeting WatchGuard XTM or FireWare OS. It leverages a buffer overflow in the agent.login method to achieve remote code execution (RCE) via a reverse shell.

This is a functional exploit for CVE-2022-26318, a buffer overflow vulnerability in WatchGuard XTM and FireWare OS. The PoC sends a maliciously crafted gzipped payload to trigger remote code execution via a reverse shell.

This exploit targets CVE-2022-26318, a buffer overflow vulnerability in WatchGuard XTM/FireWare OS. It constructs a gzipped HTTP POST request with a malicious payload to achieve remote code execution via a reverse shell.

This PoC exploits CVE-2022-26318, a buffer overflow vulnerability in WatchGuard XTM/FireWare OS, to achieve remote code execution via a crafted HTTP POST request with gzipped payload. The exploit sends a reverse shell to a specified listener.

This Metasploit module exploits a buffer overflow in WatchGuard Firebox and XTM appliances via the `/agent/login` endpoint, leading to unauthenticated remote code execution as the `nobody` user. It uses a crafted XML-RPC payload with ROP chains and shellcode to spawn a reverse Python shell.