CVE-2023-20887

This repository contains a working proof-of-concept exploit for CVE-2023-20887, a pre-authenticated remote code execution vulnerability in VMWare Aria Operations for Networks (vRealize Network Insight). The exploit leverages command injection via the Apache Thrift RPC interface to achieve root-level command execution.

This repository contains a functional exploit for CVE-2023-20887, a pre-authenticated RCE vulnerability in VMWare Aria Operations for Networks (vRealize Network Insight). The exploit leverages command injection via the Apache Thrift RPC interface to achieve remote code execution as root.

This exploit targets CVE-2023-20887, a pre-authenticated RCE vulnerability in VMWare vRealize Network Insight. It sends a crafted Thrift payload to trigger command injection, resulting in a reverse shell.

This Metasploit module exploits CVE-2023-20887, a pre-authenticated RCE vulnerability in VMWare Aria Operations for Networks (vRealize Network Insight) via Apache Thrift RPC interface command injection. It bypasses a reverse proxy to execute arbitrary commands as root.