2019-03-30 23:03:09 +08:00
|
|
|
#coding=utf-8
|
|
|
|
|
from plugins.weblogic_poc import CVE_2015_4852
|
|
|
|
|
from plugins.weblogic_poc import CVE_2016_0638
|
|
|
|
|
from plugins.weblogic_poc import CVE_2016_3510
|
|
|
|
|
from plugins.weblogic_poc import CVE_2017_3248
|
|
|
|
|
from plugins.weblogic_poc import CVE_2017_3506
|
|
|
|
|
from plugins.weblogic_poc import CVE_2018_2628
|
|
|
|
|
from plugins.weblogic_poc import CVE_2018_2893
|
|
|
|
|
from plugins.weblogic_poc import managerURL200
|
|
|
|
|
from plugins.weblogic_poc import uddi_ssrf
|
2019-03-31 15:47:11 +08:00
|
|
|
import threading
|
2019-03-30 23:03:09 +08:00
|
|
|
import socket
|
|
|
|
|
def weblogic_special_plugin_(arg,config):
|
|
|
|
|
port=7001
|
|
|
|
|
ip=socket.gethostbyname(arg.url.strip("http://").strip("https://"))
|
2019-03-31 15:47:11 +08:00
|
|
|
threads=[]
|
|
|
|
|
threads.append(threading.Thread(CVE_2015_4852.run(ip,port)))
|
|
|
|
|
threads.append(threading.Thread(CVE_2016_0638.run(ip,port,0)))
|
|
|
|
|
threads.append(threading.Thread(CVE_2016_3510.run(ip,port,0)))
|
|
|
|
|
threads.append(threading.Thread(CVE_2017_3248.run(ip,port,0)))
|
|
|
|
|
threads.append(threading.Thread(CVE_2017_3506.run(ip,port)))
|
|
|
|
|
threads.append(threading.Thread(CVE_2018_2893.run(ip,port,0)))
|
|
|
|
|
threads.append(threading.Thread(CVE_2018_2628.run(ip,port,0)))
|
|
|
|
|
threads.append(threading.Thread(managerURL200.run(ip,port)))
|
|
|
|
|
threads.append(threading.Thread(uddi_ssrf.run(ip,port)))
|
2019-03-30 23:03:09 +08:00
|
|
|
#print(arg.url)
|
2019-03-31 15:47:11 +08:00
|
|
|
for thread in threads:
|
|
|
|
|
thread.start()
|
|
|
|
|
for j in threads:
|
|
|
|
|
j.join()
|
|
|
|
|
|
|
|
|
|
'''
|
|
|
|
|
try:
|
|
|
|
|
threads[0].strat()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
|
|
|
|
print("CVE_2015_4852 脚本出错")
|
|
|
|
|
try:
|
2019-03-31 15:47:11 +08:00
|
|
|
threads[1].start()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
|
|
|
|
print("CVE_2016_0638 脚本出错")
|
|
|
|
|
try:
|
2019-03-31 15:47:11 +08:00
|
|
|
threads[2].start()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
|
|
|
|
print("CVE_2016_3510 脚本出错")
|
|
|
|
|
try:
|
2019-03-31 15:47:11 +08:00
|
|
|
threads[3].start()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
|
|
|
|
print("CVE_2017_3248 脚本出错")
|
|
|
|
|
try:
|
2019-03-31 15:47:11 +08:00
|
|
|
threads[4].start()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
|
|
|
|
print("CVE_2017_3506 脚本出错")
|
|
|
|
|
try:
|
2019-03-31 15:47:11 +08:00
|
|
|
threads[5].start()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
|
|
|
|
print("CVE_2018_2893 脚本出错")
|
|
|
|
|
try:
|
2019-03-31 15:47:11 +08:00
|
|
|
threads[6].start()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
|
|
|
|
print("CVE_2018_2628 脚本出错")
|
|
|
|
|
try:
|
2019-03-31 15:47:11 +08:00
|
|
|
threads[7].start()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
|
|
|
|
print("managerURL200 脚本出错")
|
|
|
|
|
try:
|
2019-03-31 15:47:11 +08:00
|
|
|
threads[8].start()
|
2019-03-30 23:03:09 +08:00
|
|
|
except Exception:
|
2019-03-31 15:47:11 +08:00
|
|
|
print("uddi_ssrf 脚本出错")
|
|
|
|
|
'''
|