Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IndexError: list index out of range - False positive? No IPS. #18

Closed
LiquidSnowSurfer opened this issue Jul 25, 2016 · 2 comments
Closed

Comments

@LiquidSnowSurfer
Copy link

Hello,
Suggestions? I saw the other list index out of range issue. Figured this is probably the same. Is code actually being uploaded? But not able to connect back to the reverse shell?

I'm running this externally and internally.

@Version: 1.0.11

  • Checking for updates in: http://joaomatosf.com/rnp/releases.txt **
    ** Checking Host: xxx.xxx.xxx.xxx:xxxxx **
  • Checking admin-console: [ EXPOSED ]
  • Checking web-console: [ VULNERABLE ]
  • Checking jmx-console: [ VULNERABLE ]
  • Checking JMXInvokerServlet: [ VULNERABLE ]
  • Do you want to try to run an automated exploitation via "jmx-console" ?
    This operation will provide a simple command shell to execute commands on the server..
    Continue only if you have permission!
    yes/NO ? yes
  • Sending exploit code to xxx.xxx.xxx.xxx:xxxxx Please wait...
  • Successfully deployed code! Starting command shell. Please wait...
    • - - - - - - - - - - - - - - - - - - - LOL - - - - - - - - - - - - - - - - - - - - *
  • xxx.xxx.xxx.xxx:xxxxx:

Traceback (most recent call last):
File "./jexboss.py", line 532, in
main()
File "./jexboss.py", line 381, in main
auto_exploit(url, i)
File "./jexboss.py", line 230, in auto_exploit
shell_http(url, exploit_type)
File "./jexboss.py", line 271, in shell_http
resp += " " + str(r.data).split(">")[1]
IndexError: list index out of range

@joaomatosf
Copy link
Owner

Hello Friend,

    Apparently it's a false positive. I'll add an exception handler in this lines of code.

   Please send me the result of the following request:

curl -I http://IP

   If you wish, you can tell me the IP address in private so I take a look.

@joaomatosf
Copy link
Owner

Hello friends,

I made an update to avoid some false positives. Please check if the new version solved the problem.

Thanks for feeback.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants