
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability.
exploit.sh = Exploring Vulnerability.
detect-pulse.sh = Checks a list of IP's which are running Pulse Secure.
dr4x-wordlist.sh = It triggers exploit.sh only in the form of a wordlist looking at several sites in a file and saying if it is vulnerable.
example: ./exploit.sh -d vpn.target.com