search

Madan301 / CVE-2024-2054

0 stars 0 forks source link

use Failed #1

Closed lol1qazxsw2 closed 7 months ago

lol1qazxsw2 commented 7 months ago 
python3 CVE-2024-2054.py
Url format Ex: https://8x.3x.xx.xx:9000 the port 9000 might sometimes vary from how artica proxy interface is hosted

Enter url: http://xx.x.x.x:80
Vulnerable
enter command: ls
<html><head> <link href="http://fonts.bunny.net/css?family=Rubik:300,400,500,700,900" rel="stylesheet" type="text/css"> <link rel="stylesheet" href="https://bunnycdn.b-cdn.net/assets/landingpage/css/unconfigured.css"> <title>BunnyCDN - Node LA1-992</title><meta name="norton-safeweb-site-verification" content="u9xdnnrb2ficyb1mhyc82vxqed2u0s0wdnchnlyhh2hvq0oz8fp1t0pt7u7i7tt66a9vx0lgonz1flh1cnjesvb03r2loequn14svim-k13jbfdoi3hjxj4ur1q9wy3a" /></head><body> <div id="header"> <a href="https://bunny.net"><img style="vertical-align:middle;margin-top: 70px;width: 218px;margin-bottom: -12px;margin-left: 32px; image-rendering: -webkit-optimize-contrast;" src="https://bunny.net/v2/images/bunnynet-logo.svg"></a> <br></div><div id="content" style="margin-top: 0px;"><h1 style="margin-top: -15px;margin-bottom: -11px; font-size: 24px;"><b>Server Node: </b>LA1-992</h1><br>This server is a part of a CDN service provided by <a href="https://bunny.net">bunny.net</a>.<p></p></div><div id="footer"><a href="https://support.bunny.net/hc/en-us/requests/new">Contact Support</a> &nbsp; | &nbsp; <a href="https://bunny.net/abuse">Report Abuse</a> </div></body></html>
Madan301 commented 7 months ago

the site your trying to use on is not vulnerable, the tool sends a get request to the '/wizard/wiz.upload.php' endpoint and on a 200ok response it considers it to be accessible and proceeds with the further steps, in your case the site seems to accept request to all endpoints giving a 200ok response but rendering a custom error page, the tool is not smart enough to go see the response (custom error page) and consider it as a false positive it just considers the 200ok response. (also i dont think Artica proxy admin panel would be hosted on port 80)