Skip to content
This repository has been archived by the owner on Sep 5, 2022. It is now read-only.

run error #3

Open
Scholar-City opened this issue Aug 4, 2022 · 1 comment
Open

run error #3

Scholar-City opened this issue Aug 4, 2022 · 1 comment

Comments

@Scholar-City
Copy link

Traceback (most recent call last):
File "CVE-2021-22205.py", line 1075, in
ip=console.ip, port=console.port, user=console.user, passwd=console.passwd)
File "CVE-2021-22205.py", line 219, in step2
self.oob_init()
File "CVE-2021-22205.py", line 125, in oob_init
self.reqb.create_bin()
File "CVE-2021-22205.py", line 95, in create_bin
self.bin_id = json.loads(resp.text)['name']
File "/usr/lib64/python3.6/json/init.py", line 354, in loads
return _default_decoder.decode(s)
File "/usr/lib64/python3.6/json/decoder.py", line 339, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/lib64/python3.6/json/decoder.py", line 357, in raw_decode
raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)

@inspiringz
Copy link
Owner

This error occurs when the RequestBin.net API is called as the OOB echo method, because RequestBin's API has been modified, and the API request that was working before is not working now.
The api of dnslog.cn and requestbin.net is built into the script to get the echo result of command execution (Out-of-band through DNS and HTTP POST Request), but now it doesn't work properly because of high latency of dnslog.cn and api changes for requestbin.net.
You can modify the script according to your needs. In addition, the functions of version detection(-m detect), adding SSH Public Key(-m ssh root/git), rebounding the shell(-m rev ip port), and modifying and restoring gitlab user password(-m mod/rec root) can still be used normally.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants