Maian Cart 3.8 preauth RCE exploit

For technical details about the exploit: https://dreyand.rs/post/maian-cart-rce/

Exploit usage:

usage: maian-cart-rce.py [-h] host dir

positional arguments:
  host        Host to exploit (with http/https prefix)
  dir         default=/ , starting directory of the maian-cart instance, sometimes is placed at /cart or /maiancart

optional arguments:
  -h, --help  show this help message and exit

PoC video:

Author: DreyAnd, purpl3