Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xp_cmdshell — Detect

Fingerprint / reachability check for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE""" from kittysploit...

Netsis NetOpenX token endpoint SQLi xp_cmdshell RCE

Unauthenticated POST /api/v2/token idmuserid parameter stacked SQL enables xpcmdshell on the backend SQL Server. """Logo Netsis NetOpenX OAuth token SQLi to xpcmdshell RCE.""" from future import annotations import re import time from urllib.parse import urlencode from kittysploit import from...