UEditor编辑器批量GetShell / Code By:Tas9er
🔱 更新日志:
[2022.07.10]
代码重构，字典加强，部分逻辑代码更新，修复部分线程卡死Bug
[2021.11.24]
修复部分高版本IIS响应状态码500不回显Bug
本工具旨在帮助企业快速定位漏洞修复漏洞,仅限授权安全测试使用!
严格遵守《中华人民共和国网络安全法》,禁止未授权非法攻击站点!
将测试站点保存在当前目录下的url.txt
字典文件ueditor.properties默认有常见漏洞路径，用户可以自定义添加扩展
命令行输入:java -jar UEditorGetShell.jar
添加远程调用图片WebShell马
全部资产测试后,成功数据将会自动化保存在当前目录下的txt里,文件名为当前时间戳
网络安全工具的开发区别于业务开发,本质存在攻击代码以及不可预估的风险
工具只是快速辅助安全工程师的相关工作,并不是作为部分心怀叵测的人用来从事违法犯罪活动
理解漏洞原理比会用工具更有价值
在使用他人开发的工具的时候多想想自己给别人创造了哪些
有Bug可以随时提出。
大佬，你好，批量扫描测试，容易卡着不动，无法进行下一个目标的扫描测试，能不能添加一个长时间无响应，自动进行下一个。
您好谢谢您的工具我在测试的时候已经有找到位置注入SHELL但是我根据反馈的网址都是显示文件不存在
验证结果的时候不知道是什么验证逻辑，经过测试存在漏报。状态码500的返回程序判定验证失败。 麻烦修复一下。没有源代码，自己也改不了
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
