Improper Output Encoding in Synology BeeStation OS and DSM webapi

This repository contains a functional exploit for CVE-2024-50629, CVE-2024-50630, and CVE-2024-50631, targeting Synology BeeStation and DSM/Drive Server installations. The main exploit logic is in 'poc.py', which chains three vulnerabilities: a CRLF injection to leak a valid username, an authentication bypass to obtain an access token, and a SQL injection over a custom protocol to write a cron job that executes a reverse shell as root. The exploit is fully automated and requires only the target and attacker IP addresses. The payload is a bash reverse shell, and the exploit listens for the connection on port 1337. The repository also includes a logging utility ('log.py'), a requirements file, and a README with usage instructions and a demonstration. The attack is network-based, targeting HTTP and a custom TCP service on the victim. Several fingerprintable endpoints are present, including HTTP API endpoints and file paths on the target system. The exploit is operational and provides root access if successful.