im-hanzou / fubucker

Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder < 3.6.2 - Unauthenticated SSRF

Fubucker | CVE-2022-1386 - Fusion Builder

Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder < 3.6.2 - Unauthenticated SSRF
Using GNU Parallel. You must have parallel for running this tool
If you found error like "$'\r': command not found" just do "dos2unix fubucker.sh"

Install Parallel

Linux :
command
# apt-get install parallel -y
Windows :
You can install WSL (windows subsystem linux) then do install like linux
if you want use windows, install GitBash
command
# curl pi.dk/3/ > install.sh
# sha1sum install.sh | grep 12345678
# md5sum install.sh
# sha512sum install.sh
# bash install.sh

Install JQ

Linux :
command
# apt-get install jq -y
Windows :
For WSL just do install like linux, For gitbash you can do this command
command
# curl -L -o C:/Program\ Files/Git/usr/bin/jq.exe https://github.com/stedolan/jq/releases/latest/download/jq-win64.exe

How To Use

bash fubucker.sh yourlist.txt thread

Reference

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1386
https://wpscan.com/vulnerability/bf7034ab-24c4-461f-a709-3f73988b536b
projectdiscovery/nuclei-templates#4892
https://github.com/ardzz/CVE-2022-1386