CVE-2022-1386 PoC — Fusion Builder < 3.6.2 - Unauthenticated SSRF

Source

Associated Vulnerability

Description

Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder < 3.6.2 - Unauthenticated SSRF

Readme

# Fubucker | CVE-2022-1386 - Fusion Builder
Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder < 3.6.2 - Unauthenticated SSRF<br>Using GNU Parallel. You must have parallel for running this tool<br><b>If you found error like "$'\r': command not found" just do "dos2unix fubucker.sh"</b>
# Install Parallel
Linux : <br>
<b>command</b> <br># <i>apt-get install parallel -y</i><br>
Windows : <br>
You can install WSL (windows subsystem linux) then do install like linux<br>if you want use windows, install <a href="https://git-scm.com/download/win">GitBash</a><br>
<b>command</b> <br># <i>curl pi.dk/3/ > install.sh <br># sha1sum install.sh | grep 12345678 <br># md5sum install.sh <br># sha512sum install.sh <br># bash install.sh</i><br>
# Install JQ 
Linux : <br>
<b>command</b> <br># <i>apt-get install jq -y</i><br>
Windows : <br>
For WSL just do install like linux, For gitbash you can do this command<br>
<b>command</b> <br># <i>curl -L -o C:/Program\ Files/Git/usr/bin/jq.exe https://github.com/stedolan/jq/releases/latest/download/jq-win64.exe</i>
# How To Use
<i>bash fubucker.sh yourlist.txt thread</i>
# Reference
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1386<br>
https://wpscan.com/vulnerability/bf7034ab-24c4-461f-a709-3f73988b536b<br>
https://github.com/projectdiscovery/nuclei-templates/issues/4892<br>
https://github.com/ardzz/CVE-2022-1386<br>

File Snapshot

 [4.0K]  /data/pocs/ce6b9aef9b12eaf9edf65ebe7bd4cbb85d712ccd
├── [1.9K]  fubucker.sh
├── [   9]  notvuln.txt
├── [1.4K]  README.md
├── [1.5K]  single-exploiter.sh
└── [  11]  vuln.txt

0 directories, 5 files

Remarks