CVE-2024-27564

This PoC demonstrates an SSRF vulnerability in `pictureproxy.php` where the `url` parameter is passed directly to `file_get_contents()` without validation, allowing arbitrary requests. The provided curl command exploits this to read local files.

This repository provides a writeup and proof-of-concept for CVE-2024-27564, an SSRF vulnerability in `pictureproxy.php` due to improper validation of the `url` parameter. The PoC demonstrates how an attacker can exploit this to perform arbitrary requests, including local file reads.

This repository contains a technical analysis of the Deadbolt ransomware, focusing on its SHA-256 implementation and lock screen changes. It includes JavaScript code snippets and diffs but does not provide a functional exploit.