POC详情： 54f9d1a89c74788f73bb3c92f1de084feba27157

来源
https://github.com/Farzan-Kh/CVE-2024-9465
关联漏洞
标题： Palo Alto Networks Expedition 安全漏洞 (CVE-2024-9465)
描述：Palo Alto Networks Expedition是美国Palo Alto Networks公司的一种有助于配置迁移、调优和丰富的工具。 Palo Alto Networks Expedition存在安全漏洞。攻击者利用该漏洞可以创建和读取任意文件。
描述
CVE-2024-9465 Proof of Concept
介绍
# CVE-2024-9465: Palo Alto Expedition Unauthenticated SQL Injection
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.

## Affected Versions
From 1.2.0 (including) to 1.2.96 (excluding)

## Prerequisites
Before running the script, make sure you have:
- Python 3.x installed on your system.
- [sqlmap](https://sqlmap.org/) installed on your system
- And run `pip install -r requirements.txt` to make sure the depndecies are satisfied.

## Usage
```bash
python3 CVE-2024-9465.py -u https://target.com
```

## Disclaimer
This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage caused by this tool.

## License

This project is licensed under the MIT License.
文件快照

 [4.0K]  /data/pocs/54f9d1a89c74788f73bb3c92f1de084feba27157
├── [2.5K]  CVE-2024-9465.py
├── [1.0K]  LICENSE
├── [1.1K]  README.md
└── [  25]  requirments.txt

0 directories, 4 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。