CVE-2024-54761

This exploit leverages a SQL injection vulnerability in BigAnt Office Messenger 5.6.06 to upload a PHP webshell, enabling remote command execution. It includes authentication, token handling, and a shell interface for post-exploitation.

This PoC exploits a SQL injection vulnerability in BigAnt Office Messenger 5.6.06 to achieve remote code execution by uploading a PHP webshell. The exploit authenticates with default credentials, injects a malicious SQL payload to write a shell, and provides interactive command execution.