CVE-2017-9506

This repository contains a Python script that scans multiple Jira instances for CVE-2017-9506, an SSRF vulnerability in the Atlassian OAuth Plugin. The script checks for the presence of a specific response pattern to determine vulnerability.

The repository provides a Nuclei template for scanning JIRA instances vulnerable to CVE-2017-9506, an SSRF vulnerability. It includes a Google dork for identifying potential targets but lacks actual exploit code.

The repository contains a Python script that scans for Jira instances vulnerable to CVE-2017-9506, an SSRF and XSS vulnerability in the Atlassian OAuth Plugin. The script uses the Shodan API to find potential targets and checks for the presence of the vulnerable endpoint.

This PoC exploits CVE-2017-9506, an SSRF vulnerability in Atlassian OAuth Plugin, allowing attackers to access internal network resources via the IconUriServlet. The script checks for vulnerability by sending a crafted request to the target and verifying the response.