Rocket.Chat Automated Unauthenticated Account Takeover to RCE (CVE-2021-22911)

Full unauthenticated RCE proof of concept for Rocket.Chat 3.12.1 CVE-2021-22911

The original PoC created by Enox.

Currently this only works for accounts without 2FA. I will be adding 2FA bypasses shortly

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
README.md		README.md
exploit.py		exploit.py
requirements.txt		requirements.txt