search

darkpills / CVE-2021-25094-tatsu-preauth-rce

8 stars 2 forks source link

__init__() takes from 2 to 5 positional arguments but 6 were given #1

Open baicai888 opened 2 years ago

baicai888 commented 2 years ago

$ python3 exploit-rce.py http://wordpress/ id |=== Tatsudo: pre-auth RCE exploit for Tatsu wordpress plugin <= 3.3.8 |=== CVE-2021-25094 / Vincent MICHEL (@darkpills)

[+] Generating a zip with shell technique 'php' Traceback (most recent call last): File "exploit-rce.py", line 178, in main() File "exploit-rce.py", line 148, in main caller.generateZip(args.compressionLevel, args.technique, args.customShell, args.keep) File "exploit-rce.py", line 51, in generateZip with zipfile.ZipFile(buffer, "w", zipfile.ZIP_DEFLATED, False, compressionLevel) as zipFile: TypeError: init() takes from 2 to 5 positional arguments but 6 were given

darkpills commented 2 years ago

Python3.7+ changed ZipFile constructor. I made a fix, coud you test again?

baicai888 commented 2 years ago

Thank you. It works now on my machine.