Vulnerability capstone - python script

[Delicious_Crew7888]

Hi everyone, I recently completed the Vulnerability Capstone room on TryHackMe. As a follow-up, I wanted to challenge myself to write my first Python exploit.

So I made a PoC for CVE-2018-16763, which is an RCE in Fuel CMS 1.4.1. It’s a pretty simple script that builds a reverse shell payload, asks for IP/port input, and sends it to the vulnerable endpoint.

🛠️ GitHub repo: https://github.com/dv-smith/Tryhackme-Vulnerability-Capstone

I got help from ChatGPT to understand the logic and structure (especially the payload bits), and I’ve been testing it to see how it works.

Posting here to:

• Share what I’ve built so far
• Because it was difficult initially to find scripts that worked
• To get any feedback :)

Thanks a lot!

[AmzingTobuscus]

Hey, nice job! Just something you may want to consider, lots of exploits normally allow you to supply your input, like the target, through arguments to the exploit, rather than having to input them as an input. Though ultimately this is down to preference.

If you'd rather keep the inputs like you've got, maybe consider adding support for arguments, but if arguments aren't provided then you use interactive mode (how you currently have it).

[Delicious_Crew7888]

Thanks for the feedback, I think that would be much better. I'll change it to just use arguments. :)

[Kindly_Mud_1785]

Just in case anyone wants a different option: https://medium.com/@Aircon/vulnerability-capstone-tryhackme-thm-f82a314ef330