CVE-2024-39713

The repository contains a functional Python script and Nuclei template that exploit an SSRF vulnerability in Rocket.Chat's Twilio webhook endpoint. The exploit sends a crafted POST request with a malicious MediaUrl0 parameter to trigger an SSRF.

The repository contains a functional Python script that exploits CVE-2024-39713, an SSRF vulnerability in Rocket.Chat's Twilio webhook endpoint. The PoC sends a crafted JSON payload to the vulnerable endpoint, allowing an attacker to trigger SSRF by specifying an arbitrary target URL.