CVE-2024-30851

This repository contains a functional exploit for CVE-2024-30851, demonstrating a path traversal vulnerability in the Jasmin Ransomware web panel. The exploit leverages an authentication bypass via SQL injection and unsanitized file read operations to dump decryption keys and arbitrary files.

This Metasploit module exploits an unauthenticated SQL injection vulnerability in the Jasmin Ransomware web server's login functionality. It uses time-based blind SQLi to dump credentials and victim data from the database.

This Metasploit module exploits an unauthenticated directory traversal vulnerability in the Jasmin Ransomware web server via the 'download_file.php' endpoint. It allows arbitrary file retrieval by manipulating the 'file' parameter with traversal sequences.