daniel0x00/invoke-cve-2022-22965-safecheckcolincowie가 작성한 CVE-2022-22965 취약점 검사의 PowerShell 포트
colincowie의 원본 Python 버전 CVE-2022-22965의 PowerShell 포트.
iex((iwr https://raw.githubusercontent.com/daniel0x00/Invoke-CVE-2022-22965-SafeCheck/main/Invoke-CVE202222965-SafeCheck.ps1 -UseBasicParsing).content)
# Injects file 'CVE_2022_22965_exploited.txt' on the server:
$Output = Get-Content targets.txt | ForEach-Object { Invoke-CVE202222965-SafeCheck -Url "https://$_" }
# Outputs vulnerable items only:
$Output | Where-Object {$_.url_content -match 'CVE_2022_22965 was sucessfully exploited' -or $_.base_content -match 'CVE_2022_22965 was sucessfully exploited'}
참고: 스크립트를 C:\scripts\Invoke-CVE-2022-22965-SafeCheck.ps1 또는 다른 곳에 로컬로 배치해야 합니다.
$Output = Get-Content targets.txt | ForEach-Object -ThrottleLimit 4 -Parallel { . C:\scripts\Invoke-CVE-2022-22965-SafeCheck.ps1; Invoke-CVE202222965-SafeCheck -Url "https://$_" }
$Output | Where-Object {$_.url_content -match 'CVE_2022_22965 was sucessfully exploited' -or $_.base_content -match 'CVE_2022_22965 was sucessfully exploited'}
제안: 요청 사이에 2' 차이를 두고 대상에 대해 스크립트를 두 번 실행하세요.