CVE-2024-2054

This repository contains a functional exploit for CVE-2024-2054, an insecure deserialization vulnerability in Artica Proxy's administrative web application. The exploit leverages a base64-encoded PHP payload to achieve remote code execution (RCE) by manipulating the `wiz.upload.php` endpoint.

This exploit targets a deserialization vulnerability in Artica Proxy 4.40/4.50, allowing remote code execution via a crafted payload. It writes a PHP shell to a writable directory and executes arbitrary commands through HTTP GET requests.

This Metasploit module exploits an unauthenticated PHP deserialization vulnerability in Artica Proxy versions 4.40 to 4.50, allowing remote code execution as the 'www-data' user via crafted HTTP requests.