CVE-2024-29824

This PoC exploits a SQL injection vulnerability in Ivanti EPM via a crafted SOAP request, enabling blind remote command execution through `xp_cmdshell`. The exploit sends commands from a file to the target endpoint `/WSStatusEvents/EventHandler.asmx`.

This PoC exploits CVE-2024-29824, a SQL injection vulnerability in a SOAP endpoint, leading to remote command execution via `xp_cmdshell`. It supports both single-target and multi-target exploitation using a thread pool for efficiency.

This Metasploit module exploits an unauthenticated SQL injection vulnerability in Ivanti Endpoint Manager (EPM) 2022 SU5 and prior, leveraging `xp_cmdshell` to achieve remote code execution via a crafted SOAP request.