CVE-2024-42640

This exploit targets CVE-2024-42640, an unauthenticated RCE vulnerability in the Angular-Base64-Upload library prior to v0.1.21. It uploads a malicious PHP payload via base64 encoding to a vulnerable server endpoint, enabling remote command execution or a reverse shell.

This exploit targets CVE-2024-42640, an unauthenticated RCE vulnerability in the Angular-Base64-Upload library prior to v0.1.21. It uploads a PHP reverse shell via a base64-encoded payload to a vulnerable endpoint and triggers execution.

This repository contains a functional exploit for CVE-2024-42640, an unauthenticated remote code execution vulnerability in the `angular-base64-upload` library prior to v0.1.21. The exploit leverages a file upload vulnerability in the `demo/server.php` endpoint to achieve RCE via a PHP web shell or reverse shell.

The repository contains a functional Python exploit for CVE-2024-42640, which targets an unauthenticated RCE vulnerability in the angular-base64-upload library (versions < 0.1.21). The exploit uploads a malicious PHP shell via the vulnerable endpoint and verifies its execution by checking for a specific string in the response.