CVE-2019-25137-RCE

CVE-2019-25137 is an Umbraco RCE vulnerability, the script within this repo is slightly altered

This exploit script is based on script by Alexandre ZANNI EDB-ID 49488. It is slightly altered, changed the flow to skip token extraction before login, performed the login first (without a token), then captured the real CSRF token from the login response cookies.

⚠️ Disclaimer: This exploit code is provided for educational and research purposes only. Unauthorized use against systems you do not own or have explicit permission to test is illegal and unethical. Use responsibly.