CVE-2023-28771

This repository contains a functional Python-based PoC for CVE-2023-28771, leveraging Scapy to craft malicious IKEv2 packets with command injection payloads. It supports both direct command execution and reverse shell establishment via crafted Notify payloads.

The repository contains only a React + TypeScript + Vite template with no exploit code or technical details related to CVE-2023-28771. It lacks any functional PoC, scanner, or writeup content.

This repository contains a functional Python-based PoC exploit for CVE-2023-28771, leveraging Scapy to craft malicious IKEv2 packets with command injection payloads. It supports both direct command execution and reverse shell establishment via crafted Notify payloads.

This repository contains a functional exploit PoC for CVE-2023-28771, leveraging a crafted IKEv2 packet to achieve remote command execution (RCE) on vulnerable systems. The exploit uses Scapy to send a malformed IKEv2 packet with a command injection payload, supporting both direct command execution and reverse shell functionality.

This Metasploit module exploits CVE-2023-28771, an unauthenticated remote command injection vulnerability in Zyxel devices' IKE packet decoder over UDP port 500. It crafts a malicious IKE packet with a command injection payload to achieve root-level RCE.