SQL Injection in Job Portal 1.0 logindbc.php

This repository provides a working exploit for CVE-2024-7806, a remote code execution (RCE) vulnerability in open-webui. The exploit consists of several components: - 'CVE-2024-7806.py' is the main exploit script. It starts a local web server and a netcat listener (via 'serve.sh'), then uploads a Python reverse shell ('non_suspicious_file.py') to the target open-webui instance using the '/api/models' endpoint. The script requires the attacker to specify the target URL and to configure the reverse shell's IP and port. - 'non_suspicious_file.py' is the payload, a Python script that, when executed on the target, connects back to the attacker's machine and provides a remote shell. - 'shell-uploader.html' is a malicious HTML file that can be used for CSRF-style attacks, automatically uploading the reverse shell to the vulnerable endpoint when loaded in a victim's browser. - 'serve.sh' automates the setup of the attacker's web server and netcat listener. - 'install.sh' is a setup script to install dependencies and ensure the environment is ready. - 'requirements.txt' lists the Python dependencies (requests library). The exploit targets the '/api/models' file upload endpoint of open-webui, leveraging insufficient authentication or CSRF protections to upload and execute a reverse shell. The attack vector is primarily network-based, with an optional browser-based (CSRF) component. The exploit is operational, requiring some manual configuration but providing a working reverse shell if successful.