CVE-2023-1671

This PoC exploits CVE-2023-1671, a pre-auth RCE vulnerability in Sophos Web Appliance, by injecting a command via a base64-encoded payload in the 'user_encoded' parameter. It uses DNS exfiltration to confirm vulnerability.

This PoC demonstrates a pre-authentication remote code execution (RCE) vulnerability in Sophos Web Appliance by injecting a reverse shell command via the `user_encoded` parameter, which is base64-encoded and executed on the target system.

This repository contains a Python-based exploit for CVE-2023-1671, which leverages a command injection vulnerability in ClearSwift SECURE Email Gateway due to improper handling of user input in the `user_encoded` parameter. The exploit demonstrates both vulnerability testing (via DNS log ping) and arbitrary command execution.

This script exploits a pre-authentication command injection vulnerability in Sophos Web Appliance versions older than 4.3.10.4 (CVE-2023-1671). It uses DNS exfiltration via dnslog.cn to confirm successful command injection by pinging a generated subdomain.

This repository contains a functional exploit script for CVE-2023-1671, a pre-authentication command injection vulnerability in Sophos Web Appliance versions older than 4.3.10.4. The script automates the exploitation process by generating a DNS subdomain for callback verification and sending a crafted request to trigger the command injection.