Example Usage
$ ./CVE-2022-36446.py -h
CVE-2022-36446 - Webmin < 1.997 - Software Package Updates RCE (Authenticated) v1.1 - by Remi GASCOU (Podalirius)
usage: CVE-2022-36446.py [-h] -t TARGET [-k] -u USERNAME -p PASSWORD (-I | -C COMMAND) [-v]
CVE-2022-36446 - Webmin < 1.997 - Software Package Updates RCE (Authenticated)
optional arguments:
-h, --help show this help message and exit
-t TARGET, --target TARGET
URL to the webmin instance
-k, --insecure
-u USERNAME, --username USERNAME
Username to connect to the webmin.
-p PASSWORD, --password PASSWORD
Password to connect to the webmin.
-I, --interactive Interactive console mode.
-C COMMAND, --command COMMAND
Only execute the specified command.
-v, --verbose Verbose mode. (default: False)
See also
100-redteam-projects
Free
Projects for security students…
Impacket
Open Source
Kali
Collection of Python classes for working with network protocols. Includes tools for SMB, MSRPC, LDAP…
WADComs.github.io
Open Source
WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and the…
Viper
Free
Adversary simulation and Red teaming platform with AI…
BlueToolkit
Free
BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover ne…
NoSQLMap
Open Source
Automated NoSQL injection and database exploitation tool. Targets MongoDB, CouchDB, Redis, and Cassa…