CupSmasher is an exploit tool that takes advantage of an attack chain starting with the cups-browsed CVE-2024-47176 and then uses that in combination with CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177 to lead to remote code execution.

---

CupSmasher is a fork of ipp-server and contains modified exploit code stemming from the awesome work done by evilsocket

CupSmasher IS INTENDED FOR EDUCATIONAL OR CTF PURPOSES ONLY. I TAKE NO RESPONSIBILITY FOR YOUR USE!

The CVEs:

---

https://nvd.nist.gov/vuln/detail/cve-2024-47176
https://nvd.nist.gov/vuln/detail/cve-2024-47076
https://nvd.nist.gov/vuln/detail/cve-2024-47177
https://nvd.nist.gov/vuln/detail/cve-2024-47175

Additional Reading:

---

https://letsdefend.io/blog/openprinting-cups-rce-analysis-and-poc-cve-2024-47176
https://gist.github.com/stong/c8847ef27910ae344a7b5408d9840ee1
https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

Please note that this project is still a work in progress