CVE-2024-3721

This repository provides a functional exploit for CVE-2024-3721, demonstrating how to achieve remote code execution (RCE) on a vulnerable system by leveraging a command injection vulnerability. The exploit involves downloading and executing malicious binaries (tinyproxy and a DDoS tool) on the target system.

This is a functional exploit PoC for CVE-2024-3721, targeting a command injection vulnerability in a web server via a crafted HTTP POST request. The code establishes multiple TCP connections to random IPs, sends a malicious payload to execute arbitrary commands, and downloads/executes a secondary payload ('arm7').