delsadan/cnvd-2020-10487-bulk-verificationCNVD-2020-10487 OR CVE-2020-1938 批量验证脚本，批量验证，并自动截图，方便提交及复核
Batch script, based on the POC file by @YDHCUI, supports batching and automatic screenshots for easy review.
Use conda to install virtual environments (search Baidu for miniconda installation). Since the POC uses Python 2, you need to create a Python 2 environment and a Python 3 environment.
conda create -n python2 python=python2.7
conda create -n biubiubiu python=python3.7
pip install pywin32
pip install pyqt
pip install loguru
If you cannot import win32gui, see: https://stackoverflow.com/questions/3956178/cant-load-pywin32-library-win32gui
Must be run in the cmd environment, otherwise screenshots will not work correctly!
· Set the TomcatLFI_path below
· conda activate biubiubiu
· cd to the directory containing cmd.py
· python cmd.py
See cmd.py for other detailed usage instructions.
The vulnerability is determined by whether Getting resource exists in the returned result string.
Screenshots of vulnerable targets are saved in jpg format, non-vulnerable ones in png.
A txt file saving results will be automatically generated in the script's directory.