DotNetNuke

plugin

Generates payload for DotNetNuke CVE-2017-9822

Declared metadata, not a runtime result. How to read evidence.

.\ysonet.exe -p DotNetNuke -h

Target declarations

Runtime tokens: unspecified.

Structured formatter and requirement metadata is not declared. Read the description and option help for conditions.

Options (6)

Option	Help	Default	Required
m|mode=	the payload mode: read_file, write_file, run_command. Suggested values: read_file, write_file, run_command. Required.	Not declared	true
c|command=	the command to be executed in run_command mode.	Not declared	false
u|url=	the url to fetch the file from in write_file mode.	Not declared	false
f|file=	the file to read in read_file mode or the file to write to in write_file mode.	Not declared	false
minify	Whether to minify the payloads where applicable (experimental). Default: false	false	false
rawcmd	Command will be executed as is without `cmd /c ` being appended (anything after the first space is an argument). Default value: "false".	false	false

Mode declarations

[
  {
    "name": "Run command (run_command)",
    "description": "Execute a command on the target.",
    "options": [
      "command",
      "rawcmd",
      "minify"
    ],
    "requiredOptions": [
      "command"
    ],
    "preset": {
      "mode": "run_command"
    }
  },
  {
    "name": "Read file (read_file)",
    "description": "Make the target read/write a local file path.",
    "options": [
      "file",
      "minify"
    ],
    "requiredOptions": [
      "file"
    ],
    "preset": {
      "mode": "read_file"
    }
  },
  {
    "name": "Write file (write_file)",
    "description": "Pull a URL and write it to a file on the target.",
    "options": [
      "file",
      "url",
      "minify"
    ],
    "requiredOptions": [
      "file",
      "url"
    ],
    "preset": {
      "mode": "write_file"
    }
  }
]

Credit: discovered by Oleksandr Mirosh and Alvaro Munoz, implemented by Alvaro Munoz, tested by @GlitchWitch

All modules · Full catalog JSON