CVE-2023-1698

This is a functional PoC exploit for CVE-2023-1698, targeting WAGO PLCs via command injection in the `licenses.php` endpoint. It allows remote command execution by injecting shell commands into a JSON payload.

This repository contains a functional exploit for CVE-2023-1698, targeting WAGO devices with an unauthenticated RCE vulnerability. The exploit sends a crafted payload to a specific endpoint, allowing arbitrary command execution.

This is a Go-based exploit for CVE-2023-1698, targeting WAGO devices. It sends a crafted JSON payload to execute arbitrary commands via a vulnerable endpoint, with support for both single and bulk URL scanning.

This repository contains a Python-based PoC for CVE-2023-1698, a remote code execution vulnerability in WAGO systems. The exploit allows unauthenticated attackers to create users, modify configurations, and execute commands via file inclusion or direct command injection.

This PoC exploits CVE-2023-1698 by sending a crafted POST request to a vulnerable endpoint, injecting arbitrary commands via the 'package' parameter in JSON data. It checks for successful execution by verifying the presence of a 'license' key in the response.