CVE-2023-35813

This Go-based exploit targets CVE-2023-35813, a vulnerability in Sitecore's XAML parsing functionality. It sends crafted HTTP requests to trigger arbitrary code execution via deserialization, then attempts to dump database connection strings.

This PoC exploits CVE-2023-35813, a critical RCE vulnerability in Sitecore's XAML parser. It encodes a command via a custom URL encoding scheme and sends it to a vulnerable endpoint to achieve remote code execution.

This repository contains a scanner for CVE-2023-35813, which checks if a Sitecore instance is vulnerable by analyzing the server's response header for a specific modification. The script sends a crafted payload to the target and checks if the response contains a specific Content-Type header.

This is a functional PoC for CVE-2023-35813, a Sitecore RCE vulnerability. It demonstrates content type and status code injection via crafted payloads, with detailed response analysis and credential highlighting.