CVE-2024-53704

This PoC exploits CVE-2024-53704, an authentication bypass vulnerability in SonicWALL NetExtender VPN. It skips the login process by injecting a stolen 'swap' cookie and establishes a VPN session, allowing unauthorized access to the VPN tunnel.

This repository contains a functional exploit for CVE-2024-53704, an authentication bypass vulnerability in SonicWall SSLVPN via cookie forgery. It includes a Docker-based lab environment with vulnerable containers for testing, along with working exploit code and detailed walkthroughs.

The repository contains functional exploit code for CVE-2024-53704, targeting a session hijacking vulnerability in a web application via a crafted cookie. The exploit sends a GET request with a base64-encoded cookie to trigger the vulnerability.

This PoC exploits CVE-2024-53704 by brute-forcing session cookies to leak valid session IDs from a target system. It uses a checksum calculation to generate valid cookies and checks their validity via an API endpoint.