> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# CVE-2024-4577: PHP CGI Argument Injection Scanner and Exploit
- URL: https://darkwebinformer.com/cve-2024-4577-php-cgi-argument-injection-scanner-and-exploit/
- Published: 2024-10-14T17:37:08.000Z
- Updated: 2025-09-04T22:25:58.000Z
- Author: Dark Web Informer
- Tags: Vulnerabilities, Tools

GitHub: <https://github.com/longhoangth18/CVE-2024-4577>  
Last Commit: October 14th, 2024

---

# 🚀 CVE-2024-4577: PHP CGI Argument Injection Scanner and Exploit

[](https://github.com/longhoangth18/CVE-2024-4577#-cve-2024-4577-php-cgi-argument-injection-scanner-and-exploit)

[](https://opensource.org/licenses/MIT) [](https://www.python.org/downloads/) [](https://www.first.org/cvss/)

## 🛡️ Overview

[](https://github.com/longhoangth18/CVE-2024-4577#%EF%B8%8F-overview)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/10/87837278.png)

CVE-2024-4577 is a **critical vulnerability** affecting PHP applications that utilize the **Common Gateway Interface (CGI)**. This tool serves as both a **scanner** and an **exploit**, enabling cybersecurity professionals to:

- Detect PHP CGI Argument Injection flaws
- Exploit vulnerabilities leading to **Remote Code Execution (RCE)**
- Execute arbitrary PHP code on vulnerable systems

## 🔑 Key Features

[](https://github.com/longhoangth18/CVE-2024-4577#-key-features)

- **🔍 Vulnerability Detection:** Robust scanning process to identify susceptible PHP applications
- **💥 Exploit Functionality:** Customizable payloads for targeted vulnerability exploitation
- **🔧 Flexible Payload Management:** Specify PHP payload files for post-exploitation execution
- **👥 User-Friendly Interface:** Simple command-line options with clear, actionable output

## 📦 Installation

[](https://github.com/longhoangth18/CVE-2024-4577#-installation)\# Clone the repository  
git clone https://github.com/your-username/CVE-2024-4577-scanner.git  
  
\# Navigate to the project directory  
cd CVE-2024-4577-scanner  
  
\# Install required dependencies  
pip install -r requirements.txt

## 📖 Usage

[](https://github.com/longhoangth18/CVE-2024-4577#-usage)

Ensure you have **Python 3** installed on your system. Use the following command structure:

python3 CVE-2024-4577.py \[-h\] -t TARGET\_FILE \[-s\] \[-e\] \[-p PAYLOAD\_FILE\]

### Arguments:

[](https://github.com/longhoangth18/CVE-2024-4577#arguments)

- `-h, --help`: Show help message and exit
- `-t TARGET_FILE, --target-file TARGET_FILE`: File containing target URLs (required)
- `-s, --scan`: Perform vulnerability scan only
- `-e, --exploit`: Attempt to exploit the vulnerability
- `-p PAYLOAD_FILE, --payload-file PAYLOAD_FILE`: PHP payload file for exploitation

### Example:

[](https://github.com/longhoangth18/CVE-2024-4577#example)python3 CVE-2024-4577.py -t targetsite.txt -e -p rev\_shell.php

## 🔍 Discovering Vulnerable Hosts

[](https://github.com/longhoangth18/CVE-2024-4577#-discovering-vulnerable-hosts)

Utilize powerful search engines to identify potentially vulnerable hosts:

### 🌐 Shodan Query

[](https://github.com/longhoangth18/CVE-2024-4577#-shodan-query)

Search for servers running PHP versions 8.1, 8.2, and 8.3:

```
server: PHP 8.1, server: PHP 8.2, server: PHP 8.3, html:"phpinfo"

```

### 🌐 FOFA Query

[](https://github.com/longhoangth18/CVE-2024-4577#-fofa-query)

```
protocol="http" && (header="X-Powered-By: PHP/8.1" || header="X-Powered-By: PHP/8.2" || header="X-Powered-By: PHP/8.3")

```

## ⚠️ Disclaimer

[](https://github.com/longhoangth18/CVE-2024-4577#%EF%B8%8F-disclaimer)

This tool is intended for authorized security testing and research purposes only. Ensure you have explicit permission before scanning or attempting to exploit any systems you do not own or have the right to test.

## 📞 Support

[](https://github.com/longhoangth18/CVE-2024-4577#-support)

If you encounter any issues or have questions, please file an issue on the GitHub issue tracker.