CVE-2023-28343

This exploit leverages an OS command injection vulnerability in Altenergy Power Control Software C1.2.5 via the timezone parameter in a POST request to execute arbitrary commands, resulting in a reverse shell.

This repository contains a functional exploit for CVE-2023-28343, which leverages command injection in the 'timezone' parameter of a PHP endpoint to achieve remote code execution (RCE). The exploit uses a reverse shell payload delivered via netcat, with optional automatic external IP detection for the listener.

The repository lacks actual exploit code and instead directs users to external platforms (GitHub issues, Telegram, WeChat) for further engagement. The README contains no technical details about the vulnerability, only a generic description and marketing language.

This repository contains a functional exploit for CVE-2023-28343, an OS command injection vulnerability in Altenergy Power Control Software. The exploit leverages insufficient input validation in the timezone parameter to achieve remote code execution.