LRQA Nettitude PoshC2 Unauthenticated Command Execution Vulnerability

A vulnerability in LRQA Nettitude PoshC2, introduced after commit 09ee2cf, allows unauthenticated attackers to connect to the command and control (C2) server and execute arbitrary commands. This is achieved by impersonating an infected machine.

Impact

Exploitation of this vulnerability allows for unauthorized command execution on the C2 server, potentially leading to further exploitation or manipulation of the server environment.

Reproduction

The vulnerability can be reproduced by sending a request to the PoshC2 server without authentication, including a payload that is executed on the server. The payload can be crafted to perform various actions, such as establishing a reverse shell connection.