{"uuid": "a7b0dde3-e1bf-4f19-9cfe-06cbd1a30d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19421", "type": "seen", "source": "https://t.me/hacking_Attack/29057", "content": "Kali Linux Tutorials\nFUSE : A Penetration Testing Tool For Finding File Upload Bugs\n\nFUSE is a penetration testing system designed to identify Unrestricted Executable File Upload (UEFU) vulnerabilities. The details of the testing strategy is in our\u00a0paper, \u201cFUSE: Finding File Upload Bugs via Penetration Testing\u201d, which appeared in NDSS 2020. To see how to configure and execute FUSE, see the followings.\n\nSetup\n\nInstall\n\nFUSE currently works on Ubuntu 18.04 and Python 2.7.15.\n\n* Install dependencies\n\n#apt-get install rabbitmq-server\n#apt-get install python-pip\n#apt-get install git\n\n* Clone and build FUSE\n\n$ git clone https://github.com/WSP-LAB/FUSE\n$ cd FUSE && pip install -r requirements.txt\n\nIf you plan to leverage headless browser verification using selenium, please install Chrome and Firefox web driver by refering selenium document.\n\nUsage\n\nConfiguration\n\n* FUSE uses a user-provided\u00a0configuration file\u00a0that specifies parameters for a target PHP application. The script must be filled out before testing a target Web application. You can check out\u00a0README\u00a0file and\u00a0example configuration files.\n* Configuration for File Monitor (Optional)\n\n$ vim filemonitor.py\n\u2026\n10 MONITOR_PATH=\u2019/var/www/html/\u2019 <-\n11 MONITOR_PORT=20174 <-\n12 EVENT_LIST_LIMITATION=8000 <-\n\u2026\n\nExecution\n\n* FUSE\n\n$ python framework.py [Path of configuration file]\n\nFile Monitor\n\n$ python filemonitor.py\n\n* Result\n* When FUSE completes the penetration testing, a [HOST] directory and a [HOST_report.txt] file are created.\n* A [HOST] folder stores files that have been attempted to upload.\n* A [HOST_report.txt] file contains test results and information related to files that trigger U(E)FU.\nCVEs\n\nIf you find UFU and UEFU bugs and get CVEs by running FUSE, please send a PR for\u00a0README.md\nApplicationCVEsElggCVE-2018-19172ECCube3CVE-2018-18637CMSMadeSimpleCVE-2018-19419, CVE-2018-18574CMSimpleCVE-2018-19062Concrete5CVE-2018-19146GetSimpleCMSCVE-2018-19420, CVE-2018-19421SubrionCVE-2018-19422OsCommerce2CVE-2018-18572, CVE-2018-18964, CVE-2018-18965, CVE-2018-18966MonstraCVE-2018-6383, CVE-2018-18694XEXEVE-2019-001 \n\nDownload", "creation_timestamp": "2026-09-02T01:02:37.699643Z"}