LibreOffice Floating Frame External-Link Prompt Bypass

This repository contains a Python-based exploit for CVE-2023-2255, targeting office suites (such as LibreOffice or OpenOffice) that support embedded Python scripts in ODT files. The main script, 'exploit.py', takes a payload Python file (by default 'payload.py') and embeds its contents into a specially crafted 'content.xml' within a ZIP archive structured as an ODT file. The payload ('payload.py') is a Python script that, when executed on a Windows system, creates a new user 'hacker' with the password 'P@ssw0rd' and adds this user to the Administrators group, effectively granting full system access. The exploit requires the victim to open the malicious ODT file with a vulnerable application. The repository is structured with two main code files: 'exploit.py' (the exploit builder) and 'payload.py' (the embedded payload). No network endpoints are present; the attack vector is local execution via document opening.

This repository provides an exploit for CVE-2023-2255, a remote code execution vulnerability affecting software that processes ODT (OpenDocument Text) files. The main exploit script (CVE-2023-2255.py) takes a template ODT file, injects a user-supplied command payload, and repackages it as a new ODT file. When this malicious ODT file is processed by a vulnerable application, the embedded command is executed on the target system. The README demonstrates usage by showing how to craft a payload that downloads a PHP webshell (webshell.php) from a remote URL. The included webshell is a minimal PHP script that executes system commands provided via a GET parameter. The repository consists of the exploit script (Python), a sample webshell (PHP), and documentation. The exploit is operational and can be used to achieve arbitrary command execution on vulnerable systems.