Path Traversal in Apache OFBiz

This repository contains a working exploit for CVE-2024-32113, a path traversal vulnerability in Apache OFBiz (prior to version 18.12.13) that leads to remote code execution. The exploit consists of a single Python script ('exploit.py') and a README.md file. The script takes a target IP and port, then allows the user to interactively execute arbitrary shell commands on the vulnerable server. It does this by sending a specially crafted Groovy payload (encoded as Unicode) to the '/webtools/control/forgotPassword;/ProgramExport' endpoint over HTTPS, exploiting the path traversal to reach a Groovy execution context. The output of the executed command is returned to the attacker by being thrown as an exception and parsed from the server's response. The exploit is operational and provides an interactive shell-like experience for the attacker. No detection or fake code is present; this is a real exploit targeting Apache OFBiz servers exposed to the network.

This repository contains a Python exploit script (exploit.py) targeting Apache OFBiz versions prior to 18.12.15, specifically exploiting CVE-2024-38856. The exploit leverages an incorrect authorization vulnerability in the /webtools/control/forgotPassword/ProgramExport endpoint, allowing unauthenticated remote code execution via Groovy code injection. The script provides two main capabilities: executing arbitrary Linux commands on the target server and establishing a reverse shell using busybox/nc. The payload is encoded as Unicode escape sequences and sent as a POST parameter. The script supports proxying, colored output, and intelligent response parsing. The README.md provides usage instructions and a description of the vulnerability. The main entry point is exploit.py, which is a standalone exploit and not part of a larger framework.