Exploit Help

Please help me.

exemple
www.site.com/cgi-bin/pennywize.cgi
/cgi-bin/pennywize.cgi
msg site ERROR: Pennywize was called incorrectly.

www.site.com/cgi-bin/ccPass.pl
/cgi-bin/ccPass.pl
msg site
Error: Internal -- invalid request method
Use your browser's back button to make any required changes and then re-submit

Please

friends know the command I to add to user using HTTP to debuguer?
http adress www.site.com/cgi-bin/ccPass.pl
post data ?

http adress www.site.com/cgi-bin/pennywize.cgi
post data ?

Please friends help me.

pennywize.cgi is a plugin counter of pennywize.com to protect sites (avoid brute force)
(you can read more here: http://pennywize.com/index2.htm)

About ccPass.pl
http://www.tools4webmasters.com/ccpass/readme.html

Maybe no help cant find by me, so still wait and someone will help you...:D

[daemon.azazel]

you think pennywize is some type of vuln scrit? LOL

ccpass.pl is ancient one, you could exploit this one.

Originally Posted by daemon.azazel

you think pennywize is some type of vuln scrit? LOL

ccpass.pl is ancient one, you could exploit this one.

ccpass.pl is ancient one, you could exploit this one. Please help me friend

[slysnake]

Nope. You got turned down at securibox why do you think we would help you here?

[sPlico]

Just to explain for others aswel.

Pennywise.cgi is/was never voulnerable as a script itself. It's a script from Pennywise that is used for tracking logins etc etc. Problem with this script was that there were some exploiters that injected the code inside it, which made it voulnerable, and then they posted that as shells on boards. Many "great" exploiters, great as they are, didn't understand this, and started scanning for pennywise.cgi because they actually thought it was bugd. Same with phpinfo, whereami.cgi....