CVE-2024-47533

This is a functional exploit for CVE-2024-47533, targeting Cobbler's XMLRPC authentication bypass vulnerability. It leverages the flawed `utils.get_shared_secret()` function to execute arbitrary commands via reverse shell payloads.

This PoC exploits CVE-2024-47533 in Cobbler by leveraging an authentication bypass and template injection to achieve remote code execution. It creates a malicious kickstart template with embedded Python code that executes arbitrary commands during the rendering process.

This PoC exploits an authentication bypass in Cobbler's XMLRPC interface (CVE-2024-47533) by leveraging a flawed shared secret function to execute arbitrary commands via the `background_import` method, resulting in remote code execution.

This exploit leverages an authentication bypass in Cobbler's XML-RPC API (CVE-2024-47533) to execute a reverse shell via a malicious kickstart template. It bypasses authentication by using an empty username and a password of -1, then triggers payload execution through profile rendering.

This is a functional PoC exploit for CVE-2024-47533, an authentication bypass in Cobbler's XML-RPC interface leading to unauthenticated RCE via command injection in the `background_import` function.