laravel phpunit rce masscanner CVE-2017-9841

Laravel phpunit RCE用マススキャナー CVE-2017-9841

依存関係

python3 -m pip install -r requirements.txt

or 

pipenv install -r requirements.txt

使い方


usage: tool [-h] [--file <hostnames.txt>] [--range <ip-start>,<ip-end>] [--single SINGLE]

optional arguments:
  -h, --help                   show this help message and exit
  --file <hostnames.txt>       Input your target host lists
  --range <ip-start>,<ip-end>  Set range IP Eg.: 192.168.15.1,192.168.15.100

PoC

特徴

IPの範囲（--range付き）例: python3 main.py --range 192.168.0.1,192.168.1.253
ホスト名のリスト（--file付き）例: python3 main.py --file hostnames.txt
Dorksの詳細はdorks.txtを参照

参考文献

https://github.com/sebastianbergmann/phpunit/pull/1956

https://nvd.nist.gov/vuln/detail/CVE-2017-9841

注意

+------------------------------------------------------------------------------+
|  [!] Legal disclaimer: Usage of this tool for attacking                      |
|  targets without prior mutual consent is illegal.                            |
|  It is the end user's responsibility to obey all applicable                  | 
|  local, state and federal laws.                                              |
|  Developers assume no liability and are not responsible for any misuse or    |
|  damage caused by this program                                               |
+------------------------------------------------------------------------------+

バイバイ!

laravel-phpunit-rce-masscaner

人気