Accellion FTA - getStatus RCE Detection (CVE-2015-2857)

Detects CVE-2015-2857 by POSTing oauthtoken=';echo ' to /tws/getStatus and matching Success resultmsg. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA oauthtoken command injection CVE-2015-2857.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Accellion FTA - getStatus Command Injection (CVE-2015-2857)

Exploits CVE-2015-2857 by injecting OS commands via oauthtoken on /tws/getStatus. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Accellion FTA getStatus oauthtoken RCE CVE-2015-2857 — opens execute session.""" import re from urllib.parse import quote from...