ambionics / vbulletin-exploits

Exploits targeting vBulletin.

vbulletin-exploits

Exploits targeting vBulletin.

CVE-2023-25135: Pre-authentication RCE

See: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable

./vbulletin-rce-cve-2023-25135.py --help                 
Usage: vbulletin-rce-cve-2023-25135.py [-h] [-p PROXY] url command

Exploit for CVE-2023-25135: vBulletin pre-authentication RCE.

See: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable

Positional Arguments:
  url                   Target URL
  command               Command to execute

Options:
  -h, --help            show this help message and exit
  -p, --proxy PROXY     Proxy to use (optional)