CVE-2023-34634

This PowerShell script exploits an insecure deserialization vulnerability in GreenShot 1.2.10 and below by crafting a malicious *.greenshot file. It embeds a serialized payload (generated via ysoserial.net) into a PNG file, which triggers arbitrary code execution when opened.

This PoC exploits CVE-2023-34634 by crafting a malicious Greenshot image file with an embedded ysoserial payload. The payload is appended to a PNG file, which, when processed by vulnerable software, triggers deserialization leading to arbitrary command execution (e.g., calc.exe).

This Metasploit module exploits a .NET deserialization vulnerability in Greenshot (CVE-2023-34634) by embedding a malicious payload in a Greenshot file. When opened, it executes arbitrary commands with the privileges of the user running Greenshot.