chybeta / cmspoc Goto Github PK

https://chybeta.github.io/2017/10/15/DiscuzX-v3-4-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4%E6%BC%8F%E6%B4%9E/

文章写道discuzx 但是不对的 ^^'' 应该是discuz

登陆后获取cookie后，命令行：

python cmspoc.py -u http://10.10.10.1:2500/DiscuzX/upload/home.php -t discuzx -s v34_delete_arbitrary_files

Traceback (most recent call last):
File "cmspoc.py", line 26, in
cli()
File "cmspoc.py", line 14, in cli
start()
File "/var/local/.x/cmsPoc/lib/controllor/task.py", line 16, in start
runPoc(loadScripts())
File "/var/local/.x/cmsPoc/lib/controllor/task.py", line 42, in runPoc
script.poc()
File "/var/local/.x/cmsPoc/scripts/beecms/v40_fileupload_getshell.py", line 38, in poc
path = re.search(p,r.text).group(0)
AttributeError: 'NoneType' object has no attribute 'group'

discuz旧版本有很多bug 但没有在这个repo里
像这个:
discuz! 5.5 + discuz! 6.0 sql注入漏洞 http://www.0day5.com/archives/3241/

希望你可以添加更多discuz旧版本poc

请问这个框架为什么不使用Python3来搭建那