## https://sploitus.com/exploit?id=B5FD59FE-7BAD-59C9-B084-77CBF4430603
## Introduction
This is an automated test tool for the CVE-2017-10271 vulnerability. It has been tested on CentOS 7 and Windows 7/10. ## Compilation
The project is written in Rust language. You need to install the Rust development environment from https://www.rust-lang.org/ first, and then compile the project using the following command: ```bash
$ cargo build --release
```
After compilation, you can find the binary in the `target/release/cve-2017-10271-poc` directory. ## Usage
### View Help Message
You can view the help message by running the command without arguments:
```bash
$ cve-2017-10271-poc
```
### Test One Website
Suppose you have a website `http://www.test.com/`, which has vulnerabilities at the addresses `http://www.test.com/wls-wsat/CoordinatorPortType` or `http://www.test.com/wls-wsat/CoordinatorPortType11`. To test this website, run the following command:
```bash
$ cve-2017-10271-poc http://www.test.com
```
If the website is vulnerable, the tool will indicate which URLs are vulnerable. Otherwise, it will report “Not Vulnerable”.
### Test Multiple Websites
If you want to test multiple websites, you can add them as arguments. For example, the following command will test three websites:
```bash
$ cve-2017-10271-poc http://www.test.com http://www.test.org http://www.test.net
```
## Donate to Developers
If you’d like to help developers, feel free to donate Bitcoin Cash to the address `BITCOINCASH:QPZNZ089TQKAVWF6XM6SD8KPGM59FF5H6CKV0585EP`. Pull requests are also welcome. # CVE-2017-10271 POC
[source-iocs-preserved url=http://www.test.com/`，这个网站在`http://www.test.com/wls-wsat/CoordinatorPortType`或者`http://www.test.com/wls-wsat/CoordinatorPortType11`的地址处存在CVE-2017-10271漏洞。]