针对Pulse Connect Secure SSL VPN任意文件读取漏洞(CVE-2019-11510)的利用工具
脚本由braindead @BishopFox编写。基于Orange Tsai和Meh Chang的研究。同时感谢Alyssa Herrera和0xDezzy提供的额外见解。特别感谢bl4ckh0l3z对代码进行了大幅修复、清理和重构！
该脚本通过CVE-2019-11510下载Pulse Connect Secure VPN文件，并从中提取私钥、用户名、管理员详情（包括会话cookie）以及观察到的登录信息（包括密码）。
关于脚本开发的更多详情，请参阅这篇博客文章。
./pwn-pulse.sh -h
[pwn-pulse.sh by braindead @BishopFox]
This script extracts private keys, usernames, admin details (including
session cookies) and observed logins (including passwords) from Pulse
Connect Secure VPN files downloaded via CVE-2019-11510.
Usage: pwn-pulse.sh [options]
Options:
-h show this output
-t set the target (IPs - single entry by stdin, in csv format, single column in a file)
-d download config, cache and sessions files
-c test cookies in order to identify active sessions
-k test cookies without downloading files (already downloaded and extracted)
-s extract ssh keys
-a all tests