perseus99999/cve-2019-9053-working-CMS Made Simple < 2.2.10 - SQL Injection . Actual working version
CMS Made Simple < 2.2.10 - SQL Injection . Actual working version
Updated the script to work with latest python versions Added Exception Handling for each function You can also calibrate time.sleep inside the exception handling blocks depending on response and connection timeout errors
The command syntax is
python3 exploit.py -u http://target-url/CMS-directory --crack -w /path-wordlist
Wordlist Examples rockyou.txt seclists/Passwords/Common-Credentials/best110.txt
You will need to run the script multiple times to get the correct output. Since this is a Time-based SQL injection, it is highly reliant on your network latency. Feel free to change the TIME, time.sleep(), and timeout variables if outputs seem wrong or it goes into an indefinite loop. Be Patient.
This can also be used for the TryHackMe(THM) Room - Simple CTF
