DiscuzX3.2_SSRF_EXP
1.环境 Ubuntu 14.04.3+docker +pocsuite
https://github.com/C1tas/DiscuzX3.2_SSRF_EXP
2. Requirements
Python 2.6+
Works on Linux, Windows, Mac OSX, BSD
Installation
The quick way:
$pip install pocsuite Or click here to download the latest source zip package and extract$ wget https://github.com/knownsec/Pocsuite/archive/master.zip
$ unzip master.zip
The latest version of this software is available from: http://pocsuite.org
3.docker
root@ubuntu:~# apt-get install docker.io
4.Usage
git clone https://github.com/C1tas/DiscuzX3.2_SSRF_EXP.git
cd DiscuzX3.2_SSRF_EXP/DockerFile/DiscuzX3.2_init
git submodule init
git submodule update
DockerFile
参考@kaushalkishorejaiswal
Usage:
docker build -t ubuntu:Discuz .
docker run –name Discuz -d -p 8082:80 ubuntu:Discuz
http://localhost:8082/Discuz
EXP Exp基于pocsuit 参考@imp0wd3r
Usage:
pocsuite -r Discuz_SSRF_Redis.py -u url –verify
pocsuite -r Discuz_SSRF_Redis.py -u url –attack