+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: 10 SSI Injection vulnerable sites. (/showthread.php?tid=2603780)
Pages: Pages
1
2
10 SSI Injection vulnerable sites. - bckslsh - Jun 20, 2012
You can use these for practicing, or writing guides.
To get a shell up, just wget the shellcode and make the output something such as "shell.txt".
http://www.cgibackgrounds.com/Dan.txt is an example. Not shellcode, though.
Code
http://www.glasshouseimages.com/user/login.shtml
http://www.wppionlinecontest.com/user/login.shtml
www.cgibackgrounds.com/user/login.shtml
www.getstock.com/user/login.shtml
www.estostock.com/user/login.shtml
http://www.blendimages.com/user/login.shtml
http://www.pdnthelook.com/user/login.shtml
http://iloveimages.com/user/login.shtml
http://www.win-initiative.com/user/login.shtml (view source to see output)
http://thegatheringsphotocontest.com/user/login.shtml* - RIPPER - Jun 20, 2012
Great tut mate..Keep up the good work...will see how this shit works today
* - sl4sh3rz - Jun 20, 2012
i check this thread when im wake up later.xD
* - bowhunter - Jun 21, 2012
hey havent been anywhere the computer scene for many years and getting un-rusty since the past year, re-visiting programming knowlege and all. i was still on dial-up the last time i was really into it to give you an idea. im now amazed by the wealth of information/websites available nowadays.
Anyway going to the point. while reading the code is no problem, i have a few questions:
- Why use a php shell? I mean you can run the shell commands from the login/pass fields. is it only because its just easier to do so from the shell or are there additional advantages? (but thanks to ITsecTEam for having one readily available)
- was this vulnerability only available because of the "bin/Cklb"? are these login vulnerabilities still common?
* - Suved - Jun 21, 2012
Thanks ๖ۣۜDan for SSI Injection vulnerable sites.
* - Phizo - Jun 21, 2012
While this is nice and all; I don't see why this should be posted in the SQL Injection Attacks category as it is irrelevant to SQL injection.
* - bckslsh - Jun 22, 2012
(Jun 21, 2012 10:37 PM)Phizo Wrote: While this is nice and all; I don't see why this should be posted in the SQL Injection Attacks category as it is irrelevant to SQL injection.
I know it is irrelevant. This was originally posted in the website and forum hacking section, but got moved..
* - BlackRoas - Jun 22, 2012
Thanks ๖ۣۜDan for SSI Injection vulnerable sites I like it
* - Zixem - Jun 22, 2012
Thank you ๖ۣۜDan !
~*Zixem 🤝
* - fobber - Jun 22, 2012
(Jun 21, 2012 10:37 PM)Phizo Wrote: While this is nice and all; I don't see why this should be posted in the SQL Injection Attacks category as it is irrelevant to SQL injection.Well. The description to this sub-forum is:
For help and tutorials on SQL injection attacks or other code injection techniques enter this forum.
So it really isn't that wrong, is it?
Thanks for the list, Dan. I'll go practice now! ^.^
* - Phizo - Jun 22, 2012
(Jun 22, 2012 05:56 AM)fobber Wrote: Well. The description to this sub-forum is:
For help and tutorials on SQL injection attacks or other code injection techniques enter this forum.
So it really isn't that wrong, is it?
Thanks for the list, Dan. I'll go practice now! ^.^
I suppose so, it got moved here for a reason after all.
* - TheExclusive - Jun 22, 2012
The most of the time <pre><!--#exec cmd="ls -a" --></pre><!--#exec cmd="ls -a" --></pre>
succeed but when i try to inject my shell i fails.
Do you know what i am doing wrong ?
* - Th3PonyWizard - Jun 22, 2012
(Jun 22, 2012 09:11 AM)TheExclusive Wrote: The most of the time <pre><!--#exec cmd="ls -a" --></pre><!--#exec cmd="ls -a" --></pre>How would anyone know what's you're doing wrong without knowing what are you doing? :\
succeed but when i try to inject my shell i fails.
Do you know what i am doing wrong ?
Syntax?
* - P3rF3cT - Jun 23, 2012
can we wget our shell.txt from dropbox also??
Because i am not able to download my shell.txt on any of these websites.
* - DirgofCeberus - Aug 8, 2012
Thanks a lot Ðan! .... I learned from your tutorial