Remote Code Execution in Embedthis GoAhead CGI Environment Handling

This repository contains a Python exploit (exploit.py) for CVE-2017-17562, a remote code execution vulnerability in GoAhead Web Server versions prior to 3.6.5. The exploit targets servers with CGI enabled and at least one dynamically linked CGI program. The attacker must generate a malicious ELF shared object payload (e.g., with msfvenom) and provide it to the script, which then probes a list of possible CGI endpoints (from paths.lst) on the target server. If a vulnerable endpoint is found, the script uploads the payload via HTTP POST with the LD_PRELOAD environment variable set, triggering execution of the attacker's code. The README.md provides detailed usage instructions, including payload generation and listener setup. The repository structure is straightforward: exploit.py (main exploit script), paths.lst (CGI endpoint wordlist), requirements.txt (Python dependencies), and README.md (documentation). The exploit is operational and requires attacker-supplied payloads, providing remote code execution on vulnerable GoAhead servers.