CVE-2025-54123

This repository contains a functional Python exploit for CVE-2025-54123, targeting Hoverfly versions <= 1.11.3. The exploit leverages authenticated command injection via the middleware API to achieve remote code execution (RCE).

This repository contains a functional Python exploit for CVE-2025-54123, targeting Hoverfly's middleware API to achieve remote code execution (RCE) via authenticated API requests. The exploit supports both direct command execution and reverse shell payloads.

This repository contains a functional exploit script for CVE-2025-54123, which targets a command injection vulnerability in Hoverfly's middleware endpoint. The script authenticates, checks the target version, and executes arbitrary commands via the 'script' parameter.

This repository contains a functional exploit for CVE-2025-54123, an authenticated RCE vulnerability in HoverFly's middleware API endpoint. The exploit leverages insufficient input validation to execute arbitrary commands via the `binary` and `script` parameters in a PUT request to `/api/v2/hoverfly/middleware`.

This repository contains a functional Python exploit for CVE-2025-54123, which achieves RCE in Hoverfly by injecting a malicious middleware script via the /api/v2/hoverfly/middleware endpoint. The exploit uses a reverse shell payload to establish a connection back to the attacker.