CVE-2024-1800

This repository contains a functional exploit for CVE-2024-4358 and CVE-2024-1800, targeting Progress Telerik Report Server. The exploit chains an authentication bypass with a deserialization vulnerability to achieve pre-authenticated remote code execution.

This repository contains a functional exploit for CVE-2024-4358, targeting Telerik Report Server with an authentication bypass and deserialization RCE. The script automates user registration, token acquisition, and payload delivery to achieve remote code execution.

This Metasploit module exploits CVE-2024-4358 (auth bypass) and CVE-2024-1800 (.NET deserialization) to achieve RCE on Telerik Report Server. It creates an admin account, uploads a malicious report, and triggers command execution as NT AUTHORITY\SYSTEM.