• XSS.stack #1 – первый литературный журнал от юзеров форума

[web-hacking] Ваши вопросы

Отслеживать
Выручайте, как поднять права ...

echo shell_exec("id");
uid=48(apache) gid=48(apache) groups=48(apache)

echo exec("id");
uid=48(apache) gid=48(apache) groups=48(apache)

echo passthru("id");
uid=48(apache) gid=48(apache) groups=48(apache)

system("id");
uid=48(apache) gid=48(apache) groups=48(apache)

popen тоже самое выдает


echo get_current_user();
domains

как можно выполнить команды из под юзера domains ?
 
Последнее редактирование:
c0d3x сказал(а):
Скрытое содержимое
если руками куки вбить в реквест то запросы идут в верное место , в респонсах появляется строка P3P: CP="ALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC OTC"
 
nobody0 сказал(а):
если руками куки вбить в реквест
Где конкретно вбивать? Актуальные куки я поставил в мап, разумеется, только выходит так как написал выше.
 
Последнее редактирование:
c0d3x сказал(а):
Где конкретно вбивать? Актуальные куки я поставил в мап, разумеется, только выходит так как написал выше.
в мап в тхт файл . если через -r , если руками то через cookie. Куки там cupid phpsession и числовых штук 1-3 в зависимости от того сколько по сайту и где погулять. Окунь бьет туда же. 200 респонс с обраткой как выше указал, если через -v 5 смотреть. Но тело ответа - признаюсь не видел, может там та же хрень с prove you human. Если куки не верны то будет page comparsion в мапе через с string regex - значит не туда бьет.

Но один фиг не крутит , ни там , ни там - потому что пэйлоада такого у мапы нет, и значение на -1 она не изменит. ну и это всё приводит к вопросам выше. Из них думаю самое важное подобный пэйлоад воспроизвести через суфикс , префикс и подставив значение руками.. Я хз как иначе.


ps
https://frontveloper.tistory.com/7 это cafe24 hosting c моdsecurity
 
Последнее редактирование:
nobody0 сказал(а):
пробовал , и --test-filter под OR AND врубал
Исходя из тестов - это boolean based . включаем technique=B Сокращаемс реквесты, ваф рубит + куки нужно собрать , чтобы показали настоящий сайт , а не редирект. Не суть. Полезно же уметь делать пару точных тестов, вместо кучи.

string прописывал прям так. Не в url encode. Есть сомнение.
Насчет string - точно ли пэйлоад нужно там указывать, а не различия в страницах мол. Ибо мапа находит уязвимый параметр иногда с string="какая нибудь херь сайта, порой в иероглифах*
стэмпарм советовал иногда в таких случаях включать --invalid-logical, но мы выше видим в тестах что значения равны. а не 12321=55346 например...

Еще разок. товарищи, суфикс префикс как под это прописать? Хочу научиться . Все же работают с сканерами почти, они указывают вектор атаки - меньше запросов, быстрее. (хотя иногда мапа сама находит допом вектором атак, но это сколько реквестов на lvl5 risk3 ухх)
В --string надо указывать не пейлоад, а часть ответа, которая есть только в TRUE, и по которой можно определить что это именно TRUE, а не FALSE.
В --not-string аналогично ту строку, по которой определяешь, что FALSE, а не TRUE.
 
Нашел XSS, хочу получить куки админа.
Они HttpOnly, но secure - false, same site - none.
Сайт без https.
Есть ли какие-то сборники для пост эксплуатации найденных xss?

Еще хочу узнать что мне делать с jsp, хотелось бы до базы добраться.

И по пентесту django тоже нужна инфа.
 
Подскажите плиз , нашел реальный Ip сайта который спрятан за Cloudflare , но по нему дает зайти лишь в один раздел сайта , на остальные как будто закрыт доступ на вход по айпи, можно ли как то попасть на сайт именно по айпи?
 
merck88 сказал(а):
Подскажите плиз , нашел реальный Ip сайта который спрятан за Cloudflare , но по нему дает зайти лишь в один раздел сайта , на остальные как будто закрыт доступ на вход по айпи, можно ли как то попасть на сайт именно по айпи?

Попробуй добавить в hosts запись и после этого очистить кэш DNS на системе:
Код: 
#127.0.0.1 - реальный IP, site.com - домен сайта.

127.0.0.1 site.com

Или обращаться к IP с хидером Host:
Код: 
GET http://ip_сайта/ HTTP/1.1
Host: домен_сайта.ком
 
Это можно раскрутить в инъекцию?
SQL: 
MySQL Error:
Invalid SQL: SELECT a.absnum, a.title, a.header, a.body, a.category, a.adate, a.alias FROM articles a WHERE a.approved='1' and match(title,header) against ('1\' in boolean mode) and a.category not in(1,1000,3774,2996,2997,2998,101,101,101,2,3,404,103,5,5,5,6,6,6,7,7,7,9,9,9,11,11,11,1,15,15,15,16,16,16,17,17,17,1785,19,19,19,20,20,20,21,21,21,22,22,22,23,23,23,24,24,24,1007,1007,1007,1128,1128,1128,1129,1129,1129,1130,1130,1130,1177,1177,1177,1179,1179,1179,1672,1672,1672,1674,1674,1674,1675,1675,1675,1676,1676,1676,1677,1677,1677,1679,1679,1679,102,102,102,1692,1692,1692,1686,1686,1686,1785,1785,104,104,104,4,4,4,1706,1706,1706,1709,1709,1709,1723,1729,1730,1731,1731,1731,1000,1000,2041,2041,2041,29,29,29,28,28,28,27,27,27,103,103,1,404,404,2,2,3,3,1737,1737,1738,1738,1738,1739,1739,1739,1755,1755,1755,1756,1756,1756,1757,1757,1757,1758,1758,1758,1761,1761,1761,1786,1786,1786,1845,1849,1849,1849,1850,1851,1853,1857,1858,1915,1922,1927,1927,1928,1928,1929,1929,1960,1986,1986,30,30,2000,2000,2002,2002,26,25,25,26,2009,2010,2011,2015,2015,2017,2018,2021,2022,5,6,9,11,17,20,22,23,24,1007,1128,1129,1130,1177,1179,1672,1674,1675,1686,1731,1755,1756,1757,1849,7,21,1676,1677,1679,102,1692,1785,104,4,1706,1709,1000,103,1,404,2,3,1738,1739,1758,1761,1786,15,16,19,101,29,28,27,1,27,29,104,28,404,103,102,101,1000,15,16,17,19,20,21,22,7,23,1676,1786,1706,1677,1675,1679,1686,5,6,9,11,24,1007,1128,1179,1672,1849,1674,1692,3,2,4,1129,1130,1177,1757,1756,1755,1761,1785,1731,1709,1738,1739,1758,2011,1858,1858,2000,2000,1986,1986,1853,1853,1960,1960,2010,2010,25,25,1851,1851,1850,1850,2002,2002,1929,1929,1928,1928,1927,1927,1915,1915,2022,2022,2021,2021,2018,2018,1845,1845,2017,2017,2015,2015,2009,2009,2011,1922,1922,30,30,26,26,1857,1857,2191,2193,3005,3009,2198,2199,2200,2203,2204,2207,3012,2285,2208,2210,2211,2212,2213,3850,2215,2216,2217,2218,2219,2220,2221,2280,2278,2277,2230,2232,2233,2234,2235,2236,2237,2238,2239,2240,2241,2242,2243,2244,2246,2247,2248,2249,2250,2251,2252,2253,3000,3003,10000146,2257,2258,2259,2260,2261,2262,2263,2264,2265,2467,2271,2466,2274,2275,2276,2283,2284,2286,2287,2288,2289,2290,2291,2294,2293,2295,2296,2297,2298,2299,2300,2301,2302,2303,2304,2305,2306,2310,2314,2316,2317,2318,2322,2323,2324,2329,2331,2332,2333,2334,2335,2336,2337,2338,2339,2340,2341,2342,2343,2344,2345,2346,2347,2351,2995,2999,2354,2356,2357,2358,2359,2360,2361,2362,2368,2375,2373,2452,2475,2374,2473,2453,2437,2438,2434,2435,2426,2446,2447,2449,2450,2410,2411,2412,2409,2425,2414,2415,2417,2418,2396,2402,2385,2386,2387,2388,2389,2390,2391,2392,2393,2395,2394,2383,2384,2380,2460,2461,2462,2463,2464,2465,2458,2459,2469,2470,2471,2472,2436,2429,2431,2442,2443,2444,2445,2432,2440,2478,2479,2480,2483,2484,2485,2493,2486,2487,2492,2490,2494,2495,2496,2497,2498,2499,2503,2505,2506,2504,2507,2508,2509,2510,2512,2513,2514,2515,2516,2522,2521,2525,2529,2532,2533,2537,2527,2539,2549,2540,2541,2542,2543,2545,2584,2578,2579,2582,2583,2576,2567,2570,2572,2575,2562,2563,2564,2565,2554,2555,2558,2561,2551,2577,2552,2553,2548,2588,2587,2592,2598,2601,2602,2609,2626,2624,2593,2603,2605,2606,2607,2623,2618,2619,2620,2621,2622,2611,2612,2614,2615,2616,2610,2625,2627,2628,2629,2631,2632,2633,2634,2635,2637,2638,2639,2642,2651,2643,2644,2645,2646,2647,2648,2649,2650,2652,2654,2655,2656,2667,2668,2669,2677,2690,2680,2682,2684,2687,2689,2691,2692,2693,2696,2697,2698,2699,2700,2701,2702,2703,2704,2705,2706,2707,2708,2709,2711,2712,2713,2715,2718,2719,2720,2721,2722,2723,2724,2725,2726,2727,2728,2729,2730,2731,2732,2798,2734,2736,2737,2739,2741,2743,2744,2745,2746,2748,2749,2750,2751,2752,2753,2755,2756,2757,2758,2759,2760,2761,2762,2763,2765,2766,2767,2768,2769,2770,2771,2772,2773,2774,2775,2776,2777,2778,2779,2780,2781,2782,2783,2784,2785,2786,2787,2788,2789,2790,2791,2792,2794,2797,2796,2803,2799,2802,2805,2808,2809,2830,2816,2817,2814,2811,2812,2813,2810,2827,2818,2819,2820,2821,2824,2825,2829,2833,2832,2854,2834,2836,2837,2838,2839,2844,2850,2851,2852,2853,2856,2867,2859,2913,2860,2861,3206,3207,3208,3209,3210,3211,3213,2865,2884,2868,2870,2871,2872,2873,2875,2877,2878,2879,2880,2882,2883,2895,2886,2887,2888,2889,2901,2891,2893,2894,2897,2909,2910,2911,2914,2916,2917,2952,2918,2920,2923,2924,2925,2926,2927,2928,2929,10000145,2900,2902,2903,2899,2906,2907,2930,3011,2934,2937,2938,2939,2940,2941,2943,2945,2946,2947,2949,2950,2951,2953,2954,2955,2956,2957,2958,2959,2969,2970,2971,2972,3010,2973,2974,2976,2977,2979,2981,2982,2983,2984,2985,2986,2987,2989,2991,2993,2994,3015,3017,3018,3019,3021,3025,3024,3027,3028,3029,3030,3032,3033,3036,3039,3042,3041,3043,3044,3045,3048,3050,3051,3052,10000147,3053,3054,10000148,10000149,10000150,10000151,10000152,10000153,10000154,10000155,10000156,10000157,3055,3057,3059,3060,3061,3062,3065,3064,3066,3067,3070,3071,3074,3076,3077,3078,3079,3080,3081,3083,3084,3086,3087,3088,3091,3089,3092,3776,3779,3780,3095,3098,3102,3103,3104,3105,3107,3117,3118,3112,3116,3119,3120,3121,3122,3123,3124,3126,3127,3128,3129,3130,3134,3136,10000158,10000159,10000160,10000161,10000162,10000163,10000164,10000165,10000166,10000167,10000168,10000169,10000170,10000171,10000172,10000173,10000174,10000175,10000176,10000177,10000178,10000179,10000180,10000181,10000182,10000183,10000184,10000185,10000186,10000187,10000188,10000189,10000190,10000191,10000192,10000193,10000194,10000195,10000196,10000197,10000198,10000199,3137,10000200,10000201,10000202,10000203,3139,3140,3141,3142,3143,10000204,3145,3146,10000205,3148,10000206,10000207,10000208,10000209,10000210,10000211,3150,3153,3154,3155,3156,3157,3158,3159,3161,3162,3163,3168,3167,3166,3169,3170,3171,3172,3173,3174,3175,3176,3177,3178,3179,3183,3182,3184,3185,3186,3188,3187,3190,3192,3193,3194,3196,3195,3197,3198,3199,3200,3202,3205,3215,3216,3217,3218,3219,3220,3221,3222,3223,3224,3225,3226,3227,3228,3229,3230,3231,3232,3233,3234,3235,3236,3237,3238,3239,3240,3241,3242,3243,3244,3245,3246,3247,3248,3249,3250,3251,3252,3253,3254,3255,3256,3257,3258,3259,3260,3261,3262,3263,3264,3265,3266,3267,3268,3269,3270,3271,3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,3282,3283,3284,3285,3286,3287,3288,3289,3290,3291,3292,3293,3294,3295,3296,3297,3298,3299,3300,3301,3302,3303,3304,3305,3306,3307,3308,3309,3310,3311,3312,3313,3314,3315,3316,3317,3318,3319,3320,3321,3322,3323,3324,3325,3326,3327,3328,3329,3330,3331,3332,3333,3334,3335,3336,3337,3338,3339,3340,3341,3342,3343,3344,3345,3346,3347,3348,3349,3350,3351,3352,3353,3354,3355,3356,3357,3358,3359,3360,3361,3362,3363,3364,3365,3366,3367,3368,3369,3370,3371,3372,3373,3374,3375,3376,3377,3378,3379,3380,3381,3382,3383,3384,3385,3386,3387,3388,3389,3390,3391,3392,3393,3394,3395,3396,3397,3398,3399,3400,3401,3402,3403,3404,3405,3406,3407,3408,3409,3410,3411,3412,3413,3414,3415,3416,3417,3418,3419,3420,3421,3422,3423,3424,3425,3426,3427,3428,3429,3430,3431,3432,3433,3434,3435,3436,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,3447,3448,3449,3450,3451,3452,3453,3454,3455,3456,3457,3458,3459,3460,3461,3462,3463,3464,3465,3466,3467,3468,3469,3470,3471,3472,3473,3474,3475,3476,3477,3478,3479,3480,3481,3482,3483,3484,3485,3486,3487,3488,3489,3490,3491,3492,3493,3494,3495,3496,3497,3498,3499,3500,3501,3502,3503,3504,3505,3506,3507,3508,3509,3510,3511,3512,3513,3514,3515,3516,3517,3518,3519,3520,3521,3522,3523,3524,3525,3526,3527,3528,3529,3530,3531,3532,3533,3534,3535,3536,3537,3538,3539,3540,3541,3542,3543,3544,3545,3546,3547,3548,3549,3550,3551,3552,3553,3554,3555,3556,3557,3558,3559,3560,3561,3562,3563,3564,3565,3566,3567,3568,3569,3570,3571,3572,3573,3574,3575,3576,3577,3578,3579,3580,3581,3582,3583,3584,3585,3586,3587,3588,3589,3590,3591,3592,3593,3594,3595,3596,3597,3598,3599,3600,3601,3602,3603,3604,3605,3606,3607,3608,3609,3610,3611,3612,3613,3614,3615,3616,3617,3618,3619,3620,3621,3622,3623,3624,3625,3626,3627,3628,3629,3630,3631,3632,3633,3634,3635,3636,3637,3638,3639,3640,3641,3642,3643,3644,3645,3646,3647,3648,3649,3650,3651,3652,3653,3654,3655,3656,3657,3658,3659,3660,3661,3662,3663,3664,3665,3666,3667,3668,3669,3670,3671,3672,3673,3674,3675,3676,3677,3678,3679,3680,3681,3682,3683,3684,3685,3686,3687,3688,3689,3690,3691,3692,3693,3694,3695,3696,3697,3698,3699,3700,3701,3702,3703,3704,3705,3706,3707,3708,3709,3710,3711,3712,3713,3714,3715,3716,3717,3718,3719,3720,3721,3722,3723,3724,3725,3726,3727,3728,3729,3730,3731,3732,3733,3734,3735,3736,3737,3738,3739,3740,3741,3742,3743,3744,3745,3746,3747,3748,3749,3750,3751,3752,3753,3754,3755,3756,3757,3758,3759,3760,3761,3762,3763,3764,3765,3766,3767,3768,3769,3770,3771,3772,3773,3775,3782,3783,3784,3785,3786,3787,3788,3789,3795,3790,3791,3792,10000001,10000002,10000003,10000004,10000005,10000006,3797,3808,3809,3810,3811,3812,3813,3814,3815,3816,3817,3819,3821,3827,10000007,3828,10000008,10000009,10000010,10000011,10000012,10000013,10000014,10000015,10000016,3832,3833,3834,3835,3836,3837,3838,3839,3840,10000017,10000018,10000019,3842,10000020,3843,3844,3845,3848,3849,3851,3852,3853,3854,3855,3856,3857,3858,3859,10000021,10000022,10000023,10000024,10000025,10000026,10000027,10000028,3860,10000029,10000030,10000031,10000032,3867,3861,3862,3863,3864,3865,3866,3868,3869,3870,3871,3872,3873,3874,3875,3876,3877,3878,3879,3880,3881,3882,3883,3884,3885,3886,3888,3889,3890,3891,3893,3894,3895,3896,3897,3898,3899,3900,3901,3902,3903,3904,3905,3906,3907,3908,3909,3910,3911,3912,3914,3915,3916,3918,3923,3925,3926,3929,3931,3932,3933,3934,3935,3936,3937,3938,3939,3940,3941,3942,3943,3944,3945,3946,3947,3948,3949,3950,3951,3952,3953,3954,3955,3956,3959,3960,3961,3962,3963,3964,3965,3966,3967,3968,3969,3970,3971,3972,3973,3974,3975,3976,3977,3978,3979,3980,3981,3983,3987,3985,3986,3988,3989,3990,3991,3992,3993,3994,3995,3996,3997,3998,3999,4000,4001,4002,4003,4004,4005,4006,4008,4009,4010,4011,4012,4014,4015,4016,4017,4018,4019,4020,4022,4023,4024,4025,4026,4027,4028,4029,4030,4031,4032,4033,4034,4035,4036,4037,4038,4039,4040,4041,4042,4043,4044,4045,4046,4047,4048,4049,4050,4051,4053,4054,4055,4056,4057,4058,4059,4060,4061,4062,4063,4064,4065,4067,4068,4069,4070,4071,4072,4073,4074,4075,4076,4077,4078,4079,4081,4082,4083,4086,4087,4088,4089,4090,4091,4092,4093,4095,4096,4097,4098,4099,4100,4101,4102,4103,4104,4105,4106,4107,4109,4110,4111,4112,4113,4114,4115) ORDER BY /* title_relevance DESC, */ a.adate DESC

(1064) You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ''1\' in boolean mode) and a.category not in(...' at line 8
 
corax сказал(а):
Это можно раскрутить в инъекцию?
SQL: 
MySQL Error:
Invalid SQL: SELECT a.absnum, a.title, a.header, a.body, a.category, a.adate, a.alias FROM articles a WHERE a.approved='1' and match(title,header) against ('1\' in boolean mode) and a.category not in(1,1000,3774,2996,2997,2998,101,101,101,2,3,404,103,5,5,5,6,6,6,7,7,7,9,9,9,11,11,11,1,15,15,15,16,16,16,17,17,17,1785,19,19,19,20,20,20,21,21,21,22,22,22,23,23,23,24,24,24,1007,1007,1007,1128,1128,1128,1129,1129,1129,1130,1130,1130,1177,1177,1177,1179,1179,1179,1672,1672,1672,1674,1674,1674,1675,1675,1675,1676,1676,1676,1677,1677,1677,1679,1679,1679,102,102,102,1692,1692,1692,1686,1686,1686,1785,1785,104,104,104,4,4,4,1706,1706,1706,1709,1709,1709,1723,1729,1730,1731,1731,1731,1000,1000,2041,2041,2041,29,29,29,28,28,28,27,27,27,103,103,1,404,404,2,2,3,3,1737,1737,1738,1738,1738,1739,1739,1739,1755,1755,1755,1756,1756,1756,1757,1757,1757,1758,1758,1758,1761,1761,1761,1786,1786,1786,1845,1849,1849,1849,1850,1851,1853,1857,1858,1915,1922,1927,1927,1928,1928,1929,1929,1960,1986,1986,30,30,2000,2000,2002,2002,26,25,25,26,2009,2010,2011,2015,2015,2017,2018,2021,2022,5,6,9,11,17,20,22,23,24,1007,1128,1129,1130,1177,1179,1672,1674,1675,1686,1731,1755,1756,1757,1849,7,21,1676,1677,1679,102,1692,1785,104,4,1706,1709,1000,103,1,404,2,3,1738,1739,1758,1761,1786,15,16,19,101,29,28,27,1,27,29,104,28,404,103,102,101,1000,15,16,17,19,20,21,22,7,23,1676,1786,1706,1677,1675,1679,1686,5,6,9,11,24,1007,1128,1179,1672,1849,1674,1692,3,2,4,1129,1130,1177,1757,1756,1755,1761,1785,1731,1709,1738,1739,1758,2011,1858,1858,2000,2000,1986,1986,1853,1853,1960,1960,2010,2010,25,25,1851,1851,1850,1850,2002,2002,1929,1929,1928,1928,1927,1927,1915,1915,2022,2022,2021,2021,2018,2018,1845,1845,2017,2017,2015,2015,2009,2009,2011,1922,1922,30,30,26,26,1857,1857,2191,2193,3005,3009,2198,2199,2200,2203,2204,2207,3012,2285,2208,2210,2211,2212,2213,3850,2215,2216,2217,2218,2219,2220,2221,2280,2278,2277,2230,2232,2233,2234,2235,2236,2237,2238,2239,2240,2241,2242,2243,2244,2246,2247,2248,2249,2250,2251,2252,2253,3000,3003,10000146,2257,2258,2259,2260,2261,2262,2263,2264,2265,2467,2271,2466,2274,2275,2276,2283,2284,2286,2287,2288,2289,2290,2291,2294,2293,2295,2296,2297,2298,2299,2300,2301,2302,2303,2304,2305,2306,2310,2314,2316,2317,2318,2322,2323,2324,2329,2331,2332,2333,2334,2335,2336,2337,2338,2339,2340,2341,2342,2343,2344,2345,2346,2347,2351,2995,2999,2354,2356,2357,2358,2359,2360,2361,2362,2368,2375,2373,2452,2475,2374,2473,2453,2437,2438,2434,2435,2426,2446,2447,2449,2450,2410,2411,2412,2409,2425,2414,2415,2417,2418,2396,2402,2385,2386,2387,2388,2389,2390,2391,2392,2393,2395,2394,2383,2384,2380,2460,2461,2462,2463,2464,2465,2458,2459,2469,2470,2471,2472,2436,2429,2431,2442,2443,2444,2445,2432,2440,2478,2479,2480,2483,2484,2485,2493,2486,2487,2492,2490,2494,2495,2496,2497,2498,2499,2503,2505,2506,2504,2507,2508,2509,2510,2512,2513,2514,2515,2516,2522,2521,2525,2529,2532,2533,2537,2527,2539,2549,2540,2541,2542,2543,2545,2584,2578,2579,2582,2583,2576,2567,2570,2572,2575,2562,2563,2564,2565,2554,2555,2558,2561,2551,2577,2552,2553,2548,2588,2587,2592,2598,2601,2602,2609,2626,2624,2593,2603,2605,2606,2607,2623,2618,2619,2620,2621,2622,2611,2612,2614,2615,2616,2610,2625,2627,2628,2629,2631,2632,2633,2634,2635,2637,2638,2639,2642,2651,2643,2644,2645,2646,2647,2648,2649,2650,2652,2654,2655,2656,2667,2668,2669,2677,2690,2680,2682,2684,2687,2689,2691,2692,2693,2696,2697,2698,2699,2700,2701,2702,2703,2704,2705,2706,2707,2708,2709,2711,2712,2713,2715,2718,2719,2720,2721,2722,2723,2724,2725,2726,2727,2728,2729,2730,2731,2732,2798,2734,2736,2737,2739,2741,2743,2744,2745,2746,2748,2749,2750,2751,2752,2753,2755,2756,2757,2758,2759,2760,2761,2762,2763,2765,2766,2767,2768,2769,2770,2771,2772,2773,2774,2775,2776,2777,2778,2779,2780,2781,2782,2783,2784,2785,2786,2787,2788,2789,2790,2791,2792,2794,2797,2796,2803,2799,2802,2805,2808,2809,2830,2816,2817,2814,2811,2812,2813,2810,2827,2818,2819,2820,2821,2824,2825,2829,2833,2832,2854,2834,2836,2837,2838,2839,2844,2850,2851,2852,2853,2856,2867,2859,2913,2860,2861,3206,3207,3208,3209,3210,3211,3213,2865,2884,2868,2870,2871,2872,2873,2875,2877,2878,2879,2880,2882,2883,2895,2886,2887,2888,2889,2901,2891,2893,2894,2897,2909,2910,2911,2914,2916,2917,2952,2918,2920,2923,2924,2925,2926,2927,2928,2929,10000145,2900,2902,2903,2899,2906,2907,2930,3011,2934,2937,2938,2939,2940,2941,2943,2945,2946,2947,2949,2950,2951,2953,2954,2955,2956,2957,2958,2959,2969,2970,2971,2972,3010,2973,2974,2976,2977,2979,2981,2982,2983,2984,2985,2986,2987,2989,2991,2993,2994,3015,3017,3018,3019,3021,3025,3024,3027,3028,3029,3030,3032,3033,3036,3039,3042,3041,3043,3044,3045,3048,3050,3051,3052,10000147,3053,3054,10000148,10000149,10000150,10000151,10000152,10000153,10000154,10000155,10000156,10000157,3055,3057,3059,3060,3061,3062,3065,3064,3066,3067,3070,3071,3074,3076,3077,3078,3079,3080,3081,3083,3084,3086,3087,3088,3091,3089,3092,3776,3779,3780,3095,3098,3102,3103,3104,3105,3107,3117,3118,3112,3116,3119,3120,3121,3122,3123,3124,3126,3127,3128,3129,3130,3134,3136,10000158,10000159,10000160,10000161,10000162,10000163,10000164,10000165,10000166,10000167,10000168,10000169,10000170,10000171,10000172,10000173,10000174,10000175,10000176,10000177,10000178,10000179,10000180,10000181,10000182,10000183,10000184,10000185,10000186,10000187,10000188,10000189,10000190,10000191,10000192,10000193,10000194,10000195,10000196,10000197,10000198,10000199,3137,10000200,10000201,10000202,10000203,3139,3140,3141,3142,3143,10000204,3145,3146,10000205,3148,10000206,10000207,10000208,10000209,10000210,10000211,3150,3153,3154,3155,3156,3157,3158,3159,3161,3162,3163,3168,3167,3166,3169,3170,3171,3172,3173,3174,3175,3176,3177,3178,3179,3183,3182,3184,3185,3186,3188,3187,3190,3192,3193,3194,3196,3195,3197,3198,3199,3200,3202,3205,3215,3216,3217,3218,3219,3220,3221,3222,3223,3224,3225,3226,3227,3228,3229,3230,3231,3232,3233,3234,3235,3236,3237,3238,3239,3240,3241,3242,3243,3244,3245,3246,3247,3248,3249,3250,3251,3252,3253,3254,3255,3256,3257,3258,3259,3260,3261,3262,3263,3264,3265,3266,3267,3268,3269,3270,3271,3272,3273,3274,3275,3276,3277,3278,3279,3280,3281,3282,3283,3284,3285,3286,3287,3288,3289,3290,3291,3292,3293,3294,3295,3296,3297,3298,3299,3300,3301,3302,3303,3304,3305,3306,3307,3308,3309,3310,3311,3312,3313,3314,3315,3316,3317,3318,3319,3320,3321,3322,3323,3324,3325,3326,3327,3328,3329,3330,3331,3332,3333,3334,3335,3336,3337,3338,3339,3340,3341,3342,3343,3344,3345,3346,3347,3348,3349,3350,3351,3352,3353,3354,3355,3356,3357,3358,3359,3360,3361,3362,3363,3364,3365,3366,3367,3368,3369,3370,3371,3372,3373,3374,3375,3376,3377,3378,3379,3380,3381,3382,3383,3384,3385,3386,3387,3388,3389,3390,3391,3392,3393,3394,3395,3396,3397,3398,3399,3400,3401,3402,3403,3404,3405,3406,3407,3408,3409,3410,3411,3412,3413,3414,3415,3416,3417,3418,3419,3420,3421,3422,3423,3424,3425,3426,3427,3428,3429,3430,3431,3432,3433,3434,3435,3436,3437,3438,3439,3440,3441,3442,3443,3444,3445,3446,3447,3448,3449,3450,3451,3452,3453,3454,3455,3456,3457,3458,3459,3460,3461,3462,3463,3464,3465,3466,3467,3468,3469,3470,3471,3472,3473,3474,3475,3476,3477,3478,3479,3480,3481,3482,3483,3484,3485,3486,3487,3488,3489,3490,3491,3492,3493,3494,3495,3496,3497,3498,3499,3500,3501,3502,3503,3504,3505,3506,3507,3508,3509,3510,3511,3512,3513,3514,3515,3516,3517,3518,3519,3520,3521,3522,3523,3524,3525,3526,3527,3528,3529,3530,3531,3532,3533,3534,3535,3536,3537,3538,3539,3540,3541,3542,3543,3544,3545,3546,3547,3548,3549,3550,3551,3552,3553,3554,3555,3556,3557,3558,3559,3560,3561,3562,3563,3564,3565,3566,3567,3568,3569,3570,3571,3572,3573,3574,3575,3576,3577,3578,3579,3580,3581,3582,3583,3584,3585,3586,3587,3588,3589,3590,3591,3592,3593,3594,3595,3596,3597,3598,3599,3600,3601,3602,3603,3604,3605,3606,3607,3608,3609,3610,3611,3612,3613,3614,3615,3616,3617,3618,3619,3620,3621,3622,3623,3624,3625,3626,3627,3628,3629,3630,3631,3632,3633,3634,3635,3636,3637,3638,3639,3640,3641,3642,3643,3644,3645,3646,3647,3648,3649,3650,3651,3652,3653,3654,3655,3656,3657,3658,3659,3660,3661,3662,3663,3664,3665,3666,3667,3668,3669,3670,3671,3672,3673,3674,3675,3676,3677,3678,3679,3680,3681,3682,3683,3684,3685,3686,3687,3688,3689,3690,3691,3692,3693,3694,3695,3696,3697,3698,3699,3700,3701,3702,3703,3704,3705,3706,3707,3708,3709,3710,3711,3712,3713,3714,3715,3716,3717,3718,3719,3720,3721,3722,3723,3724,3725,3726,3727,3728,3729,3730,3731,3732,3733,3734,3735,3736,3737,3738,3739,3740,3741,3742,3743,3744,3745,3746,3747,3748,3749,3750,3751,3752,3753,3754,3755,3756,3757,3758,3759,3760,3761,3762,3763,3764,3765,3766,3767,3768,3769,3770,3771,3772,3773,3775,3782,3783,3784,3785,3786,3787,3788,3789,3795,3790,3791,3792,10000001,10000002,10000003,10000004,10000005,10000006,3797,3808,3809,3810,3811,3812,3813,3814,3815,3816,3817,3819,3821,3827,10000007,3828,10000008,10000009,10000010,10000011,10000012,10000013,10000014,10000015,10000016,3832,3833,3834,3835,3836,3837,3838,3839,3840,10000017,10000018,10000019,3842,10000020,3843,3844,3845,3848,3849,3851,3852,3853,3854,3855,3856,3857,3858,3859,10000021,10000022,10000023,10000024,10000025,10000026,10000027,10000028,3860,10000029,10000030,10000031,10000032,3867,3861,3862,3863,3864,3865,3866,3868,3869,3870,3871,3872,3873,3874,3875,3876,3877,3878,3879,3880,3881,3882,3883,3884,3885,3886,3888,3889,3890,3891,3893,3894,3895,3896,3897,3898,3899,3900,3901,3902,3903,3904,3905,3906,3907,3908,3909,3910,3911,3912,3914,3915,3916,3918,3923,3925,3926,3929,3931,3932,3933,3934,3935,3936,3937,3938,3939,3940,3941,3942,3943,3944,3945,3946,3947,3948,3949,3950,3951,3952,3953,3954,3955,3956,3959,3960,3961,3962,3963,3964,3965,3966,3967,3968,3969,3970,3971,3972,3973,3974,3975,3976,3977,3978,3979,3980,3981,3983,3987,3985,3986,3988,3989,3990,3991,3992,3993,3994,3995,3996,3997,3998,3999,4000,4001,4002,4003,4004,4005,4006,4008,4009,4010,4011,4012,4014,4015,4016,4017,4018,4019,4020,4022,4023,4024,4025,4026,4027,4028,4029,4030,4031,4032,4033,4034,4035,4036,4037,4038,4039,4040,4041,4042,4043,4044,4045,4046,4047,4048,4049,4050,4051,4053,4054,4055,4056,4057,4058,4059,4060,4061,4062,4063,4064,4065,4067,4068,4069,4070,4071,4072,4073,4074,4075,4076,4077,4078,4079,4081,4082,4083,4086,4087,4088,4089,4090,4091,4092,4093,4095,4096,4097,4098,4099,4100,4101,4102,4103,4104,4105,4106,4107,4109,4110,4111,4112,4113,4114,4115) ORDER BY /* title_relevance DESC, */ a.adate DESC

(1064) You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ''1\' in boolean mode) and a.category not in(...' at line 8
По идее можно, только addslashes обойти как то нужно :)
 
corax сказал(а):
unmagicquotes не помог.
Надо ручками чекать, unmagicquotes давно устарел в этом плане и не работает практически в 100% случаях. Скинь в личку таргет, если хочешь, попробую поковырять и поэкспериментировать. Не всегда удается обойти, например на последних версиях bitrix обойти вообще нереально.
 
Подскажите плз по Acunetix, а конкретно по Git
Git files found at : /.git/config
Как можно вытянуть файллы оттуда?
git clone https://site.com/.git - не работает
Так же подскажите как Acunetix получает список файлов из git
 
mmaker сказал(а):
Подскажите плз по Acunetix, а конкретно по Git
Git files found at : /.git/config
Как можно вытянуть файллы оттуда?
git clone https://site.com/.git - не работает
Так же подскажите как Acunetix получает список файлов из git
Пробуй wget , и чекни папку если 403 то там гит есть, не удалось получить через wget , получи хеш объектов и склонируй , вся инфа в Гугле есть .
 
Alonebalone сказал(а):
Пробуй wget , и чекни папку если 403 то там гит есть, не удалось получить через wget , получи хеш объектов и склонируй , вся инфа в Гугле есть .

mmaker сказал(а):
Подскажите плз по Acunetix, а конкретно по Git
Git files found at : /.git/config
Как можно вытянуть файллы оттуда?
git clone https://site.com/.git - не работает
Так же подскажите как Acunetix получает список файлов из git
https://hackware.ru/?p=7567

Но это не всегда работает , ждём что ответит сторожила темы c0d3x
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх