Skip to content
This repository has been archived by the owner on Sep 5, 2022. It is now read-only.

when i run its not workig #4

Open
qaisarafridi opened this issue Sep 2, 2022 · 1 comment
Open

when i run its not workig #4

qaisarafridi opened this issue Sep 2, 2022 · 1 comment

Comments

@qaisarafridi
Copy link

its show me when i run command python3 CVE-2021-22205.py -u http://target.com -m detect
its show
File "/home/mrkc/Desktop/myexperience/CVE-2021-22205-main/CVE-2021-22205.py", line 1074, in
grce.step2(method=console.method, cmd=console.cmd,
File "/home/mrkc/Desktop/myexperience/CVE-2021-22205-main/CVE-2021-22205.py", line 176, in step2
self.oob_init()
File "/home/mrkc/Desktop/myexperience/CVE-2021-22205-main/CVE-2021-22205.py", line 125, in oob_init
self.reqb.create_bin()
File "/home/mrkc/Desktop/myexperience/CVE-2021-22205-main/CVE-2021-22205.py", line 95, in create_bin
self.bin_id = json.loads(resp.text)['name']
File "/usr/local/lib/python3.10/json/init.py", line 346, in loads
return _default_decoder.decode(s)
File "/usr/local/lib/python3.10/json/decoder.py", line 337, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/local/lib/python3.10/json/decoder.py", line 355, in raw_decode
raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)

@inspiringz
Copy link
Owner

This error occurs when the RequestBin.net API is called as the OOB echo method, because RequestBin's API has been modified, and the API request that was working before is not working now. self.reqb.create_bin()
The api of dnslog.cn and requestbin.net is built into the script to get the echo result of command execution (Out-of-band through DNS and HTTP POST Request), but now it doesn't work properly because of high latency of dnslog.cn and api changes for requestbin.net.
You can modify the script according to your needs. In addition, the functions of version detection(-m detect), adding SSH Public Key(-m ssh root/git), rebounding the shell(-m rev ip port), and modifying and restoring gitlab user password(-m mod/rec root) can still be used normally.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants