Fixing vulnerable target To fix the vulnerable target, copy the remediation script to the container/machine where the vulnerable Dasherr project is available and run the script. kali@kali:~/vicarious/cve-2023-23607/Dasherr$ docker cp remediation.sh test:/ kali@kali:~/vicarious/cve-2023-23607/Dasherr$ docker exec -it test bash root@2c3c6bf3735e:/var/www/html# bash /remediation.sh [*] The target has been successfully patched! root@2c3c6bf3735e:/var/www/html# root@2c3c6bf3735e:/var/www/html# exit kali@kali:~/vicarious/cve-2023-23607/Dasherr$ go run exploit.go -t http://127.0.0.1 Exploit failed with error: kali@kali:~/vicarious/cve-2023-23607/Dasherr$ As we can notice from the above output, the target was successfully patched after running the remediation script. The remediation script updates the affected file to check if the file extension is .json and only then let the file be uploaded. This prevents the initial arbitrary PHP file upload vulnerability.