CVE-2023-46454

This exploit targets GL.iNet <= 4.3.7 via a command injection vulnerability in the OpenVPN client configuration. It triggers a reverse shell by abusing the 'plugins' RPC endpoint with a maliciously crafted payload.

The repository contains functional exploit code for CVE-2023-46454, demonstrating remote code execution (RCE) via OpenVPN client manipulation in GL.iNet devices. The exploit triggers a reverse shell by injecting a malicious payload into the OpenVPN configuration.