CVE-2024-41570

This repository contains a functional exploit for CVE-2024-41570, an unauthenticated SSRF vulnerability in Havoc C2 v0.7. The exploit spoofs a demon agent registration to open a TCP socket on the teamserver, allowing attackers to leak origin IPs and interact with internal services.

This repository contains a functional exploit for CVE-2024-41570, demonstrating an SSRF-to-RCE vulnerability. The exploit leverages AES-encrypted communication with a teamserver to register a spoofed agent, open a socket, and execute commands via WebSocket requests.

This repository contains a functional Python-based exploit for CVE-2024-41570, targeting a WebSocket-based service in Havoc C2. The exploit automates agent registration, WebSocket payload delivery, and remote command execution to establish a reverse shell.

This exploit demonstrates an unauthenticated SSRF and authenticated RCE in Havoc C2 v0.7 by spoofing agent registration and leveraging socket manipulation to achieve remote code execution. The PoC includes encryption/decryption logic and socket operations to interact with the teamserver.

This repository contains a functional exploit for CVE-2024-41570, targeting the Havoc C2 framework. It chains SSRF and command injection vulnerabilities to achieve remote code execution on the teamserver.

This repository contains a functional Python-based exploit for CVE-2024-41570, targeting a WebSocket-based service to achieve SSRF with RCE via a reverse shell. The exploit automates agent registration, WebSocket payload delivery, and command execution.