{"id":20706747,"url":"https://github.com/electr0lulz/Mass-exploit-CVE-2022-29464","last_synced_at":"2025-05-10T20:30:55.234Z","repository":{"id":38024955,"uuid":"506404115","full_name":"electr0lulz/Mass-exploit-CVE-2022-29464","owner":"electr0lulz","description":"Mass Exploit for CVE 2022-29464 on Carbon","archived":false,"fork":false,"pushed_at":"2022-06-22T23:54:38.000Z","size":257,"stargazers_count":18,"open_issues_count":1,"forks_count":8,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-11-17T01:28:52.706Z","etag":null,"topics":["0day","auto-exploiter","bash","carbon","cve","cve-2022-29464","exploit","massexploit","python","shodan"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/electr0lulz.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-06-22T20:58:33.000Z","updated_at":"2024-08-12T20:24:23.000Z","dependencies_parsed_at":"2022-09-18T02:11:54.849Z","dependency_job_id":null,"html_url":"https://github.com/electr0lulz/Mass-exploit-CVE-2022-29464","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/electr0lulz%2FMass-exploit-CVE-2022-29464","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/electr0lulz%2FMass-exploit-CVE-2022-29464/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/electr0lulz%2FMass-exploit-CVE-2022-29464/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/electr0lulz%2FMass-exploit-CVE-2022-29464/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/electr0lulz","download_url":"https://codeload.github.com/electr0lulz/Mass-exploit-CVE-2022-29464/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253480282,"owners_count":21915245,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["0day","auto-exploiter","bash","carbon","cve","cve-2022-29464","exploit","massexploit","python","shodan"],"created_at":"2024-11-17T01:23:53.557Z","updated_at":"2025-05-10T20:30:54.955Z","avatar_url":"https://github.com/electr0lulz.png","language":"Python","funding_links":[],"categories":["Exploit Automation Tools"],"sub_categories":[],"readme":"## Meow Meow Meow!\u003cbr\u003e\n\nJust a Mass Exploit based on a Python PoC for # WSO2 Carbon Server [CVE-2022-29464](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29464)\u003cbr\u003e\nPre-auth RCE bug  [CVE-2022-29464](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29464).\u003cbr\u003e\n## Meow Meow Meow? Requirements? \u003cbr\u003e\n\u003cbr\u003e\nPython3\u003cbr\u003e\nShodan\u003cbr\u003e\nZoomeye\u003cbr\u003e\nA Brain\u003cbr\u003e\n\n## What is this tool? \u003cbr\u003e\n\nThis is a mass-autoscan-exploit of [CVE-2022-29464](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29464) based on the PoC wrote in python by a third part.\u003cbr\u003e\nThe Py file is available and readable, see also the bash script that don't contain any encoded string.\u003cbr\u003e\nMassexploit will upload a shell and a reverse shell and print out the path to access it. Easy, Quick and Cool.\u003cbr\u003e\nI know that probably the code could be wrote better and saving some lines, but i did it when i was drunk and just to do something.\u003cbr\u003e\nSo?\u003cbr\u003e\nJust run:\u003cbr\u003e\n\n```bash\n./mass_exploit.sh\n```\nThis command can setup your shodan and zoomeye tool, API included (if you want to skip the setup of tools or api, just press enter to skip.)\u003cbr\u003e\nThen it start search for vulnerable hosts based on the dorks (examples are provided in the file examples_dorks.txt).\u003cbr\u003e\nIf you prefer, the manual mode is always available through the command below.\u003cbr\u003e\nThe mass_exploit.sh output will be printed in the shell screen.\u003cbr\u003e\n\n![PoC](https://github.com/electr0lulz/Mass-exploit-CVE-2022-29464/blob/12c649eddaed6033a1aec05d27fc93408900a128/poc.png)\u003cbr\u003e\n\n\n```bash\npython3 exploit.py -u host:port\n```\nor easily:\n\n```bash\npython3 exploit.py -f \u003cfile\u003e\n```\n################################################################\u003cbr\u003e\n## Search tools: \u003cbr\u003e\n## Shodan  \u003cbr\u003e\nGet your account and an API Key here: https://account.shodan.io/\u003cbr\u003e\n```bash\nsudo apt-get install python-setuptools -y\nsudo apt-get install pip -y\npip install shodan\neasy_install shodan\n```\n## Zoomeye \u003cbr\u003e\nGet an account and your API Key here: https://www.zoomeye.org/\n```bash\npip3 install git+https://github.com/knownsec/ZoomEye-python.git\n```\n## Enjoy it \u003cbr\u003e\nThis tool has been provided just for accademic purposes. I am not responsible for any illegal action made with this code.\u003cbr\u003e\nElectrolulz - https://github.com/electr0lulz - electrolulz@protonmail.com\u003cbr\u003e\nTested on a Ubuntu based O.S.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felectr0lulz%2FMass-exploit-CVE-2022-29464","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Felectr0lulz%2FMass-exploit-CVE-2022-29464","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felectr0lulz%2FMass-exploit-CVE-2022-29464/lists"}