CVE-2023-43177

This repository contains a functional exploit for CVE-2023-43177, targeting CrushFTP versions below 10.5.2. The exploit demonstrates an authentication bypass, session hijacking, and privilege escalation leading to remote code execution (RCE).

This Metasploit module exploits CVE-2023-43177, an unauthenticated RCE vulnerability in CrushFTP versions prior to 10.5.1, by manipulating session properties via crafted HTTP headers to achieve remote code execution.