
Bludit 3.9.2 - تجاوز القوة العمياء - CVE-2019-17240
Bludit 3.9.2 - تجاوز القوة الغاشمة - CVE-2019-17240
نص برمجي بسيط جداً يعتمد على CVE-2019-17240.
نموذج الإثبات الأصلي والشرح: https://github.com/bludit/bludit/pull/1090.
usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u ./usernames_file_list.txt -p ./passwords_file_list.txt
-l : login page (example: http://192.168.1.50/admin/login)
-u : file with usernames list (one by line)
-p : file with passwords list (one by line)
-h : help (optional)
-v : verbose (optional, show all tested 'username:password')