Alienfader Exploit / Alien@shell Webshell Upload Exploit

Description:

This Python script exploits a file upload restriction bypass vulnerability in Pluck CMS (e.g., versions prior to 4.7.13) to upload a PHP webshell. Once uploaded, the shell (named "shell.phar") can be used to execute commands on the target server.

The script performs the following steps:

1. Retrieves and formats the session cookie from the target.
2. Authenticates with the target using the supplied password.
3. Uploads a PHP webshell via the vulnerable file upload functionality.
4. Displays a success message when the upload is complete.

Upon success, the script prints: "Auth Successful, Shell is being uploaded. Hack, Sleep,Repeat" and the URL to the uploaded shell (e.g., http://<target_ip>:<target_port>//files/shell.phar).

Usage:

The script requires Python 3 and the "requests" module. To run the script, use the following command-line syntax:

./exploit.py <target_ip> <target_port> <password> <pluckcmspath>

Example: ./exploit.py 10.10.185.89 80 mypassword /app/pluck-4.7.13

Parameters: <target_ip> : IP address of the target machine. <target_port> : Port number of the target machine (e.g., 80). : The password to use for authentication. : The path to the Pluck CMS installation (e.g., /app/pluck-4.7.13).

Dependencies:

• Python 3.x
• requests module (Install via: pip install requests)

Important Notes:

• This tool is provided for educational and authorized testing purposes only.
• Unauthorized use or exploitation of systems is illegal and unethical.
• Use this exploit at your own risk. The author (Alienfader) assumes no responsibility for any misuse or damage.

Modifications & Branding:

• All references to the original branding have been changed to "Alienfader".
• The interactive prompt in the webshell displays "alien@shell" instead of the original prompt.
• The successful messages have been modified to: "Auth Successful, Shell is being uploaded. Hack, Sleep,Repeat"

Author:

Exploit by Alienfader

License:

This software is distributed "as is", without any warranty. Use it at your own risk.