ChaoMixian/dsh2shell: unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances
Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances. !demo Principle: spoofing the Host header unlocks dsh's privileged RPC methods, which lets the PoC register a temporary LLM pr...
Continue Reading