Remote CVE-2024-4358 (Telerik report server)

[heartBit]

● Shodan search query: title:"Log in | Telerik Report Server" port:83
● FOFA search query: app="Telerik-Report-Server"

● Github for the exploit: https://github.com/sinsinology/CVE-2024-4358

Usage: python CVE-2024-4358.py --target http://(IP):83 -c "whoami"

 

[Focus17]

shodan count "Telerik Report Server"
8

 

[heartBit]

shodan count "Telerik Report Server"
8

● I got 55 counts after using the title search query (on port 83)