An exploit for an XSS vulnerability I found in the GoAhead webserver. I also decided to re-write and add an exploit for the RCE vulnerability that was discovered by other security researchers for this webserver.
| Vulnerability | Severity | Description |
|---|---|---|
| Stored XSS | 5/10 | This vulnerability allows attackers to execute arbitrary javascript code on a victims browser. |
| Remote Code Execution | 10/10 | This vulnerability allows remote attackers to execute arbitrary system commands. |
Steps for running exploit:
cd bin
./exploit
Steps for compiling (Make sure you have Vlang installed):
v exploit.v
./exploit
https://github.com/0x1CA3