[HELP needed] POST injection script

system · June 4, 2011, 10:08am

Hello, i’m trying to do a script which have to :

login into a POST session on a distant server
include a php file of this server, using the POST injected informations

but i’m a begginer :S
(NB : it’s not a hack : i’m an ogame player and i try to allow the view of stats into a forum using my own login/password informations >.<’

This is the code of the login page :

[code]

n00b - OGSpy 3.05

<td>

Login :
Paramètres de connexion
Mot de passe :

OGSpy is a Kyser Software © 2007
v 3.05

			<i>Temps de génération 0 sec (<b>PHP</b> : 0 / <b>SQL</b> : 0)<br /></i>
		</font>
	</center>
</td>

[/code]

And the code of my script :
[php]<?php

$data = ‘action=’.urlencode(‘login web’).’&goto=’.urlencode(’’).’&login=’.urlencode(‘karoubb’).’&password=’.urlencode(‘MYAWSOMEPASSWORD’).’&id=’.$id_session;

$message = “POST http://n00b.galaxy-spy.net/index.php HTTP/1.0\r\n”;
$message .= “Content-type: application/x-www-form-urlencoded\r\n”;
$message .= “Content-length: “.strlen( $data ).”\r\n”;
$message .= “\r\n”;
$message .= $data."\r\n";

$fd = fsockopen( “http://n00b.galaxy-spy.net”, 80 );
fputs($fd,$message);
fclose($fd);

include(‘http://n00b.galaxy-spy.net/index.php?action=graphic_pie&values=3241_x_2535_x_2459_x_1680_x_1575_x_960_x_795_x_780&legend=karoubb_x_fownzu_x_Bel-Riose%20_x_Mric29_x_Ciseur_x_mamix_x_aly_x_vinoc&title=Proportion%20de%20mises%20�%20jour%20par%20utilisateurs’);

?>[/php]

… When i try to use it, it print this on the forum :

Prévisualisation
$data = ‘action=’.urlencode(‘login web’).’&goto=’.urlencode(’’).’&login=’.urlencode(‘karoubb’).’&password=’.urlencode(‘anarchie’).’&id=’.$id_session;

$message = “POST http://n00b.galaxy-spy.net/index.php HTTP/1.0\r\n”;
$message .= “Content-type: application/x-www-form-urlencoded\r\n”;
$message .= “Content-length: “.strlen( $data ).”\r\n”;
$message .= “\r\n”;
$message .= $data."\r\n";

$fd = fsockopen( “http://n00b.galaxy-spy.net”, 80 );
fputs($fd,$message);
fclose($fd);

include(‘http://n00b.galaxy-spy.net/index.php?action=graphic_pie&values=3241_x_2535_x_2459_x_1680_x_1575_x_960_x_795_x_780&legend=karoubb_x_fownzu_x_Bel-Riose%20_x_Mric29_x_Ciseur_x_mamix_x_aly_x_vinoc&title=Proportion%20de%20mises%20�%20jour%20par%20utilisateurs’);

?>

Can you help me plse