Wednesday, October 04, 2006

perl & php exploit template.....

Pretty neat perl exploit template ripped from ezine...

#!/usr/bin/perl

use strict;
use other_modu;

my($host, $port,$shell) = @_;

sub usage{
print "bunch usage";
exit();
}

sub exploit{
}

sub thread{
for my $i(1..MAX_THREAD){
print ".";
my $thread= new Thread \&exploit, $host, $port, $shell
}
}
if(@ARGV < num_argv) {&usage;}else {&exploit;}

and another php exploit template from rgod(i guess)

#!/usr/bin/php -q -d short_open_tag=on; error_reporting(0); //turn off error_reporting, E_ALL when doing debugging ini_set("max_execution_time",0); //execute the script rite away ini_set("default_socket",5); function quick_dump($string){ $result=' ';$eax=' ';$cont= 0; for($i=0;$i<=32 | ord($string[$i] >=126){
{$result.=" .";}
}
else{ $result.=" ".$string[i];}
if(strlen(dechex(ord($string[$i]))==2){
$eax.=" ".dechex(ord($string[$i]));
}
else{
{$exa.=" 0".dechex(ord($string[$i]));}
$cont++;if ($cont==15) {$cont=0; $result.="\r\n"; $exa.="\r\n";}
}
return $exa."\r\n".$result;
}

$proxy_regex = '(\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{1,5}\b)';
function sendpacketii($packet)
{
global $proxy, $host, $port, $html, $proxy_regex;
if ($proxy=='') {
$ock=fsockopen(gethostbyname($host),$port);
if (!$ock) {
echo 'No response from '.$host.':'.$port; die;
}
}
else {
$c = preg_match($proxy_regex,$proxy);
if (!$c) {
echo 'Not a valid proxy...';die;
}
$parts=explode(':',$proxy);
echo "Connecting to ".$parts[0].":".$parts[1]." proxy...\r\n";
$ock=fsockopen($parts[0],$parts[1]);
if (!$ock) {
echo 'No response from proxy...';die;
}
}
fputs($ock,$packet);
if ($proxy=='') {
$html='';
while (!feof($ock)) {
$html.=fgets($ock);
}
}
else {
$html='';
while ((!feof($ock)) or (!eregi(chr(0x0d).chr(0x0a).chr(0x0d).chr(0x0a),$html))) {
$html.=fread($ock,1);
}
}
fclose($ock);
#debug
#echo "\r\n".$html;
}

$url = " ";
$packet="POST ".$url HTTP/1.0\r\n";
$packet.="Content-Type: application/x-www-form-urlencoded\r\n";
$packet.="Host: ".$host."\r\n";
$packet.="Content-Length: ".strlen($data)."\r\n";
$packet.="Connection: Close\r\n\r\n";
$packet.=$data;
sendpacketii($packet);

No comments: