prasad-1808 / tool-29489

This Tool is used to check for CVE-2023-29489 Vulnerability in the provided URL with the set of payloads available

Tool-29489

Overview 🔍:

• This tool is used to identify URLs with CVE-2023-29489 vulnerability.
• The tool uses payloads to identify the bug.
• Help menu of tool-29489:
  • python main.py [help] [URL] [inputfile] [outputfile]
  • -h or --help : To display help options.
  • -u or --url : To input URL to check.
  • -i or --input : To give the input file.
  • -o or --output : To give the output file.

About CVE-2023-29489 🔍:

• CVE Description:-

  • An issue was discovered in cPanel before 11.109.9999.116. Cross-site scripting can occur on the cpsrvd error page via an invalid webcall ID.

• Description:-

  • Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise users' interactions with a vulnerable application. It allows an attacker to circumvent the same origin policy, which is designed to segregate different websites from each other. Cross-site scripting vulnerabilities normally allow an attacker to masquerade as a victim user, carry out any actions that the user can perform, and access any of the user's data. If the victim user has privileged access within the application, then the attacker might gain full control over all of the application's functionality and data.

• Reference:-

  • https://forums.cpanel.net/threads/cpanel-tsr-2023-0001-full-disclosure.708949/
  • https://nvd.nist.gov/vuln/detail/CVE-2023-29489
  • https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/

• More Details:

  • KarthiTheHacker
  • GitHub:
    • https://github.com/karthi-the-hacker
    • https://github.com/cappriciosec

More features:

• This tool is available in pip for easier access.

• To install:

  • pip install -i https://test.pypi.org/simple/ tool-29489==2.0.1

• To use tool-29489:

  • tool-29489 --help

• Reference images are attached below:

  

Supported Operating System 🖥️

Tools needed ⚙️

Connect with me 📱