• Upload files without authentication.
• Browse existing files on the server.

The vulnerable endpoint (/cmsmodules/medialibrary/formcontrols/liveselectors/insertimageormedia/tabs_media.aspx) can be accessed without authentication if the hash parameter is not properly validated. If the URL redirects to /CMSMessages/accessdenied.aspx?resstring=dialogs.missinghashtext&hash=, the domain is considered vulnerable.

Key Features

• Automated Scanning: Scans a list of domains from an input file.
• Double Verification: Ensures that a domain is truly vulnerable by adding a hash parameter.
• Color-Coded Output: Displays results in color for easy identification (red for confirmed vulnerable, yellow for potentially vulnerable).
• Separate Output Files: Saves Potentially Vulnerable and Confirmed Vulnerable domains into separate files.
• Safe Saving: Saves results even if the script is interrupted (e.g., by pressing Ctrl+C).

Installation

Prerequisites

• Python 3.x
• Python modules: requests, colorama

Installation Steps

1. Clone this repository:

   root@kitploit:~

   git clone https://github.com/Egi08/CVE-2019-12102-Scanner.git
   cd CVE-2019-12102-Scanner
   

2. Install dependencies:

   root@kitploit:~

   pip install -r requirements.txt 
   

   (If the requirements.txt file does not exist, create it with the following content):

   root@kitploit:~

   requests
   colorama
   

3. Prepare an input file (domains.txt) containing a list of domains, one domain per line. Example:

   root@kitploit:~

   example.com
   another-example.com
   vulnerable-site.com
   

Usage

Command-Line Arguments

Parameters

• -l, --list: Path to the file containing the list of domains (required).
• -p, --potentially: Output file for Potentially Vulnerable domains (optional, default: potentially_vulnerable.txt).
• -c, --confirmed: Output file for Confirmed Vulnerable domains (optional, default: confirmed_vulnerable.txt).

Example Command

Sample Output

Console

Output File (potentially_vulnerable.txt)

Output File (confirmed_vulnerable.txt)

Important Notes

1. Ethical Testing:

   • Use this tool only on domains you have permission to test.
   • Unauthorized scanning may violate laws.

2. Timeout:

   • If a domain responds slowly, you can adjust the timeout value in the requests.get function:
     root@kitploit:~

     response = requests.get(full_url, timeout=20)  # Timeout of 20 seconds
     

3. Error Handling:

   • If a network error occurs or a domain is unreachable, the tool will log an error message but continue checking other domains.

4. Safe Saving:

   • Results will be saved to output files even if the script is interrupted (e.g., by pressing Ctrl+C).

5. Hash Parameter:

   • The test_hash currently uses the example hash (13b203251094c6c51e1f7974b22e84538003b9c23754bc7b24a19891e6d476bf). Adjust it if necessary.

Contributions

Contributions are welcome! If you'd like to contribute, please:

1. Fork this repository.
2. Create a new branch for your feature/fix:
   root@kitploit:~

   git checkout -b feature/your-feature-name
   

3. Commit your changes:
   root@kitploit:~

   git commit -m "Add your changes here"
   

4. Push to your branch:
   root@kitploit:~

   git push origin feature/your-feature-name
   

5. Create a pull request.

License

This project is licensed under the MIT License. See the LICENSE file for more details.

With this documentation, you can easily upload the script to GitHub and provide clear instructions for others to use the tool.