CVE-2024-40422

This exploit demonstrates a path traversal vulnerability in Devika v1 via the 'snapshot_path' parameter in the '/api/get-browser-snapshot' endpoint. It allows an attacker to read arbitrary files (e.g., '/etc/passwd') by manipulating the parameter with directory traversal sequences.

This repository contains a functional Python exploit for CVE-2024-40422, a path traversal vulnerability in Devika v1. The exploit sends a crafted request to the '/api/get-browser-snapshot' endpoint to retrieve the contents of '/etc/passwd'.