CVE-2022-31814

This exploit leverages a command injection vulnerability in pfBlockerNG via the Host header to upload a PHP shell, achieving unauthenticated remote code execution. The shell is then used to execute arbitrary commands on the target system.

This is a functional exploit for CVE-2022-31814, targeting pfBlockerNG <= 2.1.4_26. It achieves unauthenticated remote code execution by injecting malicious payloads via the Host header, uploading a PHP shell, and providing an interactive shell.

This repository contains a Python-based exploitation toolkit for CVE-2022-31814, a remote command injection vulnerability in pfSense pfBlockerNG <= 2.1.4_26. It includes modes for passive/active vulnerability checks, exploitation, and cleanup, with a focus on reliability and log wiping.

This is a functional exploit for CVE-2022-31814, targeting pfBlockerNG <= 2.1.4_26. It achieves unauthenticated remote code execution by uploading a shell via a crafted HTTP request and executing arbitrary commands.

This exploit leverages a command injection vulnerability in pfBlockerNG <= 2.1.4_26 via the Host header to achieve unauthenticated remote code execution (RCE). It uploads a PHP shell and provides an interactive command interface.

This Python script exploits CVE-2022-31814 in pfSense by uploading a PHP shell via a command injection vulnerability in pfBlockerNG, executing arbitrary commands, and then cleaning up the shell. It targets unauthenticated RCE by leveraging a malicious Host header.

This is a functional proof-of-concept exploit for CVE-2022-31814, targeting pfBlockerNG <= 2.1.4_26. It achieves unauthenticated remote code execution by uploading a shell via a command injection vulnerability in the Host header, then executing arbitrary commands.

This is a functional exploit for CVE-2022-31814, targeting pfBlockerNG <= 2.1.4_26. It achieves unauthenticated RCE by injecting a malicious Host header to upload a PHP shell, then interacts with it for command execution.

This is a functional exploit for CVE-2022-31814, targeting pfBlockerNG <= 2.1.4_26. It achieves unauthenticated remote code execution by injecting a malicious payload via the Host header, uploading a PHP shell, and providing an interactive shell.

The repository contains only a README.md file with a CVE identifier and no exploit code or technical details. It appears to be a placeholder or incomplete submission.

This Metasploit module exploits an unauthenticated RCE vulnerability in pfSense's pfBlockerNG plugin (CVE-2022-31814) by injecting a PHP webshell via a malformed Host header, allowing root command execution.