CVE-2024-46538

This is a Python-based exploit for CVE-2024-46538, a stored XSS vulnerability in pfSense 2.5.2. It automates the process of injecting a malicious JavaScript payload via the interfaces_groups_edit.php page, which then executes arbitrary commands via a CSRF-protected endpoint.

This is a Python-based exploit for CVE-2024-46538, a stored XSS vulnerability in pfSense v2.5.2. It leverages a crafted payload to execute arbitrary JavaScript, which then performs command execution and user creation via CSRF token manipulation.