CVE-2024-32651

This repository contains a functional Python exploit for CVE-2024-32651, targeting a Server-Side Template Injection (SSTI) vulnerability in changedetection.io <= 0.45.20. The exploit automates the process of obtaining a CSRF token, submitting a crafted form, and delivering a payload that triggers a reverse shell via SSTI.

This repository contains a functional exploit for CVE-2024-32651, demonstrating an RCE vulnerability in changedetection.io <= 0.45.20 via Server-Side Template Injection (SSTI). The exploit uses a crafted notification template to execute arbitrary commands, establishing a reverse shell.

This repository contains a functional Python exploit for CVE-2024-32651, targeting a Server-Side Template Injection (SSTI) vulnerability in changedetection.io <= 0.45.20. The exploit chains authentication bypass (if needed), CSRF token extraction, and SSTI payload delivery to achieve remote code execution via a reverse shell.

This repository provides a detailed technical walkthrough of exploiting multiple vulnerabilities (CVE-2024-34716, CVE-2024-32651, CVE-2023-47268) on the Trickster HTB machine, including XSS, SSTI, and privilege escalation techniques. It describes the attack chain but does not include functional exploit code.