Example Usage
$ ./CVE-2022-36446.py -h
CVE-2022-36446 - Webmin < 1.997 - Software Package Updates RCE (Authenticated) v1.1 - by Remi GASCOU (Podalirius)
usage: CVE-2022-36446.py [-h] -t TARGET [-k] -u USERNAME -p PASSWORD (-I | -C COMMAND) [-v]
CVE-2022-36446 - Webmin < 1.997 - Software Package Updates RCE (Authenticated)
optional arguments:
-h, --help show this help message and exit
-t TARGET, --target TARGET
URL to the webmin instance
-k, --insecure
-u USERNAME, --username USERNAME
Username to connect to the webmin.
-p PASSWORD, --password PASSWORD
Password to connect to the webmin.
-I, --interactive Interactive console mode.
-C COMMAND, --command COMMAND
Only execute the specified command.
-v, --verbose Verbose mode. (default: False)
See also
100-redteam-projects
Free
Projects for security students…
Commander
Open Source
A command and control (C2) server…
CVE_Prioritizer
Open Source
Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prior…
Impacket
Open Source
Kali
Collection of Python classes for working with network protocols. Includes tools for SMB, MSRPC, LDAP…
Advanced-WAF-WAFinity
Free
An Advanced Web Application Firewall that protects against threats like SQL injection and XSS by fil…
Unicorn
Open Source
Simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Works…