CVE-2023-33243

This exploit demonstrates an authentication bypass in STARFACE PBX by leveraging the use of password hashes instead of cleartext passwords. The PoC Python script automates the login process by calculating the required 'secret' value using the SHA512 hash of the password.

This PoC demonstrates an authentication bypass vulnerability in STARFACE by allowing login using a password hash instead of the plaintext password. It includes both web and REST API login methods.