Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TypeError: 'NoneType' object is not subscriptable #10

Closed
ArpitKubadia opened this issue Dec 21, 2020 · 4 comments
Closed

TypeError: 'NoneType' object is not subscriptable #10

ArpitKubadia opened this issue Dec 21, 2020 · 4 comments

Comments

@ArpitKubadia
Copy link

Traceback (most recent call last): File "C:\Users\hi\Desktop\CVE-2019-18935\CVE-2019-18935.py", line 202, in <module> filename_remote_actual = upload( File "C:\Users\hi\Desktop\CVE-2019-18935\CVE-2019-18935.py", line 121, in upload if filename_remote != result['metaData']['TempFileName']: TypeError: 'NoneType' object is not subscriptable

I have managed to compile the payload, and have shortlisted the version of Telerik to be 2019.1.215 (based on the last modified date on /WebResource). What could be the possible reason for this error?

The command I ran was python .\CVE-2019-18935.py -v 2019.1.215 -u HOSTNAME/Telerik.Web.UI.WebResource.axd?type=rau -p .\payloads\sleep-2020122117174156-amd64.dll -f 'C:\Windows\Temp'

@Phoenix1112
Copy link

same problem...please help...

  File "CVE-2019-18935.py", line 207, in <module>
    args.url
  File "CVE-2019-18935.py", line 121, in upload
    if filename_remote != result['metaData']['TempFileName']:
TypeError: 'NoneType' object is not subscriptable```

@ArpitKubadia
Copy link
Author

@Phoenix1112 Hey I am not the original author of this repository, but I realised that commenting out the if block that starts at line 121 of CVE-2019-18935.py would solve the issue.

@Phoenix1112
Copy link

thanks

@noperator
Copy link
Owner

Seems like you're running into a situation where result['metaData'] == None, which causes the TypeError: 'NoneType' object is not subscriptable when you try to "subscript" (i.e., access the elements of) metaData when getting its TempFileName field.

I added a check to try to prevent this from happening.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants