Affichage des articles dont le libellé est PHP. Afficher tous les articles
Affichage des articles dont le libellé est PHP. Afficher tous les articles

[PHP] Metasploit Pro (Trial) License Grabber








You must be tired of submitting pro (trial) license key every week just to get the full feature of metasploit right? Don't worry, we have the solution for you. This grabber doesn't belong to any of our members, i found it on GitHub and i decided to share it.

You just need to run these script and wait for a few minutes, it will generate pro (trial) key for you. It's using Fake Name Generator and Fake Email Generator to fetch the information to register.

Environment


  • Linux:
  • Windows
    • XAMPP 1.8.2
    • [Windows] XP Professional Service Pack 3 x86


Installation:

Linux

# clone the script by using git directly. 
root@kali-linux:~# git clone https://github.com/skiddie/metasploit-pro-trial-grabber.git  
# install the project dependencies 
root@kali-linux:~# cd metasploit-pro-trial-grabber && php composer.phar install 
# OPTIONAL: execute the command below if you get the exception message 'cURL library is not loaded'. 
root@kali-linux:~# apt-get install php5-curl

 Windows

# download the script and unzip it by yourself, path `C:\` for example.

 C:\Documents and Settings\Chris>cd C:\metasploit-pro-trial-grabber-master && C:\xampp\php\php.exe composer.phar install

Execution

Linux

# the environment mentioned above is tested by author and work functionally. 
root@kali-linux:~# php execute.php

Windows

C:\metasploit-pro-trial-grabber-master>C:\xampp\php\php.exe execute.php

Output

[+] defining the pre-required constants .. DONE !
[+] loading the 3rd-party libraries .. DONE !
[+] creating all classes' instance .. DONE !
[+] checking all mail domains from provider: Spambog are valid or not ..
  [-] parsing all the available domains from response .. DONE !
    [*] parsing the profile fields from response .. DONE !
    [*] parsing the additional info from response .. DONE !
  [-] extracting from all the available domains .. 
    [*] checking the mail address: habing@spambog.com is valid or not .. ILLEGAL
    [*] checking the mail address: habing@spambog.de is valid or not .. ILLEGAL
    [*] checking the mail address: habing@discardmail.com is valid or not .. ILLEGAL
    [*] checking the mail address: habing@discardmail.de is valid or not .. ILLEGAL
    [*] checking the mail address: habing@spambog.ru is valid or not .. ILLEGAL
    [*] checking the mail address: habing@0815.ru is valid or not .. ILLEGAL
    [*] checking the mail address: habing@s0ny.net is valid or not .. ILLEGAL
    [*] checking the mail address: habing@hulapla.de is valid or not .. ILLEGAL
    [*] checking the mail address: habing@bund.us is valid or not .. VALID !
    [*] checking the mail address: habing@teewars.org is valid or not .. ILLEGAL
    [*] checking the mail address: habing@brennendesreich.de is valid or not .. VALID !
    [*] checking the mail address: habing@ama-trans.de is valid or not .. ILLEGAL
    [*] checking the mail address: habing@ama-trade.de is valid or not .. ILLEGAL
    [*] checking the mail address: habing@malahov.de is valid or not .. ILLEGAL
    [*] checking the mail address: habing@e-postkasten.eu is valid or not .. VALID !
    [*] checking the mail address: habing@lags.us is valid or not .. VALID !
    [*] checking the mail address: habing@6ip.us is valid or not .. VALID !
    [*] checking the mail address: habing@e-postkasten.info is valid or not .. VALID !
    [*] checking the mail address: habing@e-postkasten.de is valid or not .. VALID !
    [*] checking the mail address: habing@e-postkasten.com is valid or not .. VALID !
  [-] ALL DONE !
[+] ALL DONE !
[+] choosing a valid domain and generating an email address .. DONE !

[+] READY TO FIRE !

[+] submitting the trial request to metasploit ..
  [-] parsing the hidden filds' value from response ..
    [*] field: custparamleadsource has value: 443597
    [*] field: submitted has value: 
    [*] field: custparamreturnpath has value: https://localhost:3790/setup/activation
    [*] field: custparamproduct_key has value: 
    [*] field: custparamproductaxscode has value: msY5CIoVGr
    [*] field: custparamthisIP has value: 103.245.222.133
  [-] ALL DONE !
  [-] preparing the registration payload .. DONE !
  [-] sending the registration data to online form .. DONE !
[+] ALL DONE !
[+] looping to retrieve the trial mail content ..
  [-] checking the trial confirmation mail has delivered to inbox or not ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] waiting for trial mail delivered to inbox: http://www.spambog.com/rss/habing@brennendesreich.de ..
    [*] BINGO ! the mail just delivered, parsing it .. DONE !
  [-] ALL DONE !
[+] ALL DONE !

Your 7-days pro trial key: CRDJ-09P8-EG4K-EQS4

 Screenshots
  


Source: https://github.com/skiddie/metasploit-pro-trial-grabber
Read more

by Malik korrich ~ vendredi 25 juillet 2014 0 commentaires

PHP Remote - File Uploading Vulnerability

Dork:
inurl:”cadastro.php?TipodeConta=
Choose any sites... This form will be appeared :


Type as this form:
Nome de usuário: a
Senha: a
Repita a senha : a
Nome: a
Sobrenome: a
Telefone: 0987654321 
 E-mail: 123@gmail.com
Then press Enviar.

You will be redirected to login site then type as this form again:
Nome de usuário: a
 Senha: a

I'll take an example:
http://www.amiltonimoveis.com.br/index.php
When got .../index.php => .../perfil.php then you'll get this: 
http://www.amiltonimoveis.com.br/perfil.php
Fill in the form all "a"... Press "Upload" to upload your file... :D

You will go to this site:
http://www.marlenefestasrs.com/sobre_mim.php?id=71


Then you will see your index or your files :D

Have a nice day...

./ NEXUS
Read more

by Malik korrich ~ mardi 24 juin 2014 0 commentaires

« Articles plus anciens