CVE-2024-2054

This exploit targets a deserialization vulnerability in Artica Proxy 4.40/4.50, allowing remote code execution via a crafted payload. It writes a PHP shell to a writable directory and executes arbitrary commands through HTTP GET requests.

This repository contains a functional exploit for CVE-2024-2054, an insecure deserialization vulnerability in Artica Proxy's administrative web application. The exploit leverages a base64-encoded PHP payload to achieve remote code execution (RCE) by manipulating the `wiz.upload.php` endpoint.

This Metasploit module exploits an unauthenticated PHP deserialization vulnerability in Artica Proxy versions 4.40 to 4.50, allowing remote code execution as the 'www-data' user via crafted HTTP requests.