CVE-2023-28324

This repository contains a functional exploit for CVE-2023-28324, which abuses a vulnerability in Ivanti EPM's AgentPortal.exe to execute arbitrary commands via .NET Remoting. The PoC demonstrates remote code execution by leveraging the IAgentPortal interface to send crafted requests.

This Metasploit module exploits an unauthenticated RCE vulnerability in Ivanti EPM Agent Portal by leveraging a .NET Remoting (MS-NRTP) interface to execute arbitrary commands as NT AUTHORITY\SYSTEM. The exploit constructs serialized .NET objects to invoke the 'Request' method, which spawns a command shell.