/CVE-2024-3400

Global Protec Palo Alto File Write Exploit

Primary LanguageShell

CVE-2024-3400

CVE-2024-3400 Palo Alto File Write Exploit

This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400

[ Use with Caution ]

[ Made with educational Purpouses only ]

Usage:

chmod +x gp-exploit.sh

./gp-exploit.sh file_name_to_write urls.txt

Test Image 4

Shodan Search & Url's filtering:

# shodan search --fields ip_str,port 'http.html:"Global Protect"' --separator ":" | sed 's/.$//' > gp.hosts
# httpx -l gp.hosts 
# ./gp-exploit file_name gp.hosts

Status Code Reponses Verification:

Test Image 5