Sploitus

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Activemq

gitee · 2021-10-22

Exploit Code

MARKDOWN8 lines
## https://sploitus.com/exploit?id=9F9D1501-F1ED-5B7F-B067-23A12DF6C9D7
This is a Python script for exploiting a vulnerability in Apache ActiveMQ. The script is designed to upload a shell to the server using the PUT method. The vulnerability being exploited is CVE-2016-3088. The script requires the user to provide the URL of the ActiveMQ server, the username, and the password. The script will then upload a shell to the server and move it to a location where it can be executed. The script also includes a banner that displays the information about the vulnerability and the script's purpose. 

The script uses the `urlparse` and `urlunparse` functions to parse and unparse URLs, and the `socket` module to establish a connection to the server. The `base64` module is used to encode the shell. The script also includes a `NotFoundException` exception class that is raised when the server does not respond as expected.

The script is designed to be run from the command line, and the user must provide the required arguments when running the script. The script will then upload the shell to the server and execute it, allowing the user to gain access to the server. 

The script is a Python script and is not a compiled executable, so it must be run from a Python interpreter. The script is designed to be used for educational