CVE-2024-22120

This repository contains functional exploit code for CVE-2024-22120, demonstrating a time-based SQL injection attack against Zabbix servers to extract session keys and achieve remote code execution (RCE) via script manipulation. The PoC includes multiple scripts for session extraction, admin session generation, and RCE payload execution.

The repository contains detailed technical writeups for multiple CVEs, including CVE-2024-22120, which involves a SQL injection vulnerability in Zabbix that can lead to RCE. The writeups include vulnerability descriptions, proof-of-concept details, mitigation strategies, and references to external resources.

This repository contains a functional exploit for CVE-2024-22120, leveraging XXE and gopher protocol to achieve RCE on Zabbix 6.0.27. The exploit chains SQL injection for session ID extraction and script execution for reverse shell.

This repository contains a functional exploit for CVE-2024-22120, leveraging a time-based SQL injection to extract an admin session ID and subsequently achieving RCE via a reverse shell. The exploit uses a gopher protocol to bypass restrictions and execute commands on the Zabbix server.

This repository contains a functional exploit for CVE-2024-22120, leveraging a time-based SQL injection to extract an admin session ID and then using a Gopher-based SSRF to execute a reverse shell on a Zabbix server. The exploit requires low-privileged credentials and targets a vulnerability in Zabbix's API/webhook functionality.