Atacar vulnerabilidades... diversion agria para mentes inquietas... Primer Caso practico

PHP Version 5.2.17

System Linux vl20612.dns-privadas.es 2.6.32-042stab068.8 #1 SMP Fri Dec 7 17:06:14 MSK 2012 x86_64
Build Date Jan 17 2013 21:58:34
Configure Command './configure' '--enable-bcmath' '--enable-calendar' '--enable-exif' '--enable-fastcgi' '--enable-ftp' '--enable-gd-native-ttf' '--enable-libxml' '--enable-magic-quotes' '--enable-mbstring' '--enable-pdo=shared' '--enable-soap' '--enable-sockets' '--enable-sysvsem' '--enable-wddx' '--enable-zend-multibyte' '--enable-zip' '--prefix=/usr' '--with-bz2' '--with-curl=/opt/curlssl/' '--with-curlwrappers' '--with-freetype-dir=/usr' '--with-gd' '--with-gettext' '--with-imap=/opt/php_with_imap_client/' '--with-imap-ssl=/usr' '--with-jpeg-dir=/usr' '--with-kerberos' '--with-libdir=lib64' '--with-libexpat-dir=/usr' '--with-libxml-dir=/opt/xml2' '--with-libxml-dir=/opt/xml2/' '--with-mcrypt=/opt/libmcrypt/' '--with-mhash=/opt/mhash/' '--with-mime-magic' '--with-mysql=/usr' '--with-mysql-sock=/var/lib/mysql/mysql.sock' '--with-mysqli=/usr/bin/mysql_config' '--with-openssl=/usr' '--with-openssl-dir=/usr' '--with-pcre-regex=/opt/pcre' '--with-pdo-mysql=shared' '--with-pdo-sqlite=shared' '--with-pgsql=/usr' '--with-pic' '--with-png-dir=/usr' '--with-pspell' '--with-sqlite=shared' '--with-ttf' '--with-xmlrpc' '--with-xpm-dir=/usr' '--with-xsl=/opt/xslt/' '--with-zlib' '--with-zlib-dir=/usr'
Server API CGI/FastCGI
Virtual Directory Support disabled
Configuration File (php.ini) Path /usr/lib
Loaded Configuration File /usr/local/lib/php.ini
Scan this dir for additional .ini files (none)
additional .ini files parsed (none)
PHP API 20041225
PHP Extension 20060613
Zend Extension 220060519
Debug Build no
Thread Safety disabled
Zend Memory Manager enabled
IPv6 Support enabled
Registered PHP Streams compress.zlib, compress.bzip2, dict, ftp, ftps, gopher, http, https, imap, imaps, pop3, pop3s, rtsp, smtp, smtps, telnet, tftp, php, file, data, zip
Registered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, sslv2, tls
Registered Stream Filters zlib.*, bzip2.*, convert.iconv.*, string.rot13, string.toupper, string.tolower, string.strip_tags, convert.*, consumed

This program makes use of the Zend Scripting Language Engine:
Zend Engine v2.2.0, Copyright (c) 1998-2010 Zend Technologies
with eAccelerator v0.9.6.1, Copyright (c) 2004-2010 eAccelerator, by eAccelerator
with the ionCube PHP Loader v4.2.2, Copyright (c) 2002-2012, by ionCube Ltd., and
with Zend Optimizer v3.3.9, Copyright (c) 1998-2009, by Zend Technologies



--------------------------------------------------------------------------------

PHP Credits

--------------------------------------------------------------------------------

Configuration
PHP Core
Directive Local Value Master Value
allow_call_time_pass_reference On On
allow_url_fopen On On
allow_url_include Off Off
always_populate_raw_post_data Off Off
arg_separator.input & &
arg_separator.output & &
asp_tags Off Off
auto_append_file no value no value
auto_globals_jit On On
auto_prepend_file no value no value
browscap no value no value
default_charset no value no value
default_mimetype text/html text/html
define_syslog_variables Off Off
detect_unicode On On
disable_classes no value no value
disable_functions no value no value
display_errors On On
display_startup_errors Off Off
doc_root no value no value
docref_ext no value no value
docref_root no value no value
enable_dl On On
error_append_string no value no value
error_log error_log error_log
error_prepend_string no value no value
error_reporting 6135 6135
expose_php On On
extension_dir /usr/local/lib/php/extensions/no-debug-non-zts-20060613 /usr/local/lib/php/extensions/no-debug-non-zts-20060613
file_uploads On On
highlight.bg #FFFFFF #FFFFFF
highlight.comment #FF8000 #FF8000
highlight.default #0000BB #0000BB
highlight.html #000000 #000000
highlight.keyword #007700 #007700
highlight.string #DD0000 #DD0000
html_errors On On
ignore_repeated_errors Off Off
ignore_repeated_source Off Off
ignore_user_abort Off Off
implicit_flush Off Off
include_path .:/usr/lib/php:/usr/local/lib/php .:/usr/lib/php:/usr/local/lib/php
log_errors On On
log_errors_max_len 1024 1024
magic_quotes_gpc On On
magic_quotes_runtime Off Off
magic_quotes_sybase Off Off
mail.force_extra_parameters no value no value
max_execution_time 180 180
max_file_uploads 20 20
max_input_nesting_level 64 64
max_input_time 180 180
max_input_vars 1000 1000
memory_limit 512M 512M
open_basedir no value no value
output_buffering no value no value
output_handler no value no value
post_max_size 94M 94M
precision 12 12
realpath_cache_size 16K 16K
realpath_cache_ttl 120 120
register_argc_argv On On
register_globals Off Off
register_long_arrays On On
report_memleaks On On
report_zend_debug On On
safe_mode Off Off
safe_mode_exec_dir no value no value
safe_mode_gid Off Off
safe_mode_include_dir no value no value
sendmail_from no value no value
sendmail_path /usr/sbin/sendmail -t -i /usr/sbin/sendmail -t -i
serialize_precision 100 100
short_open_tag On On
SMTP localhost localhost
smtp_port 25 25
sql.safe_mode Off Off
track_errors Off Off
unserialize_callback_func no value no value
upload_max_filesize 84M 84M
upload_tmp_dir no value no value
user_dir no value no value
variables_order EGPCS EGPCS
xmlrpc_error_number 0 0
xmlrpc_errors Off Off
y2k_compliance On On
zend.ze1_compatibility_mode Off Off


bcmath
BCMath support enabled


bz2
BZip2 Support Enabled
Stream Wrapper support compress.bz2://
Stream Filter support bzip2.decompress, bzip2.compress
BZip2 Version 1.0.3, 15-Feb-2005


calendar
Calendar support enabled


cgi-fcgi
Directive Local Value Master Value
cgi.check_shebang_line 1 1
cgi.fix_pathinfo 1 1
cgi.nph 0 0
cgi.rfc2616_headers 0 0
fastcgi.logging 1 1


ctype
ctype functions enabled


curl
cURL support enabled
cURL Information libcurl/7.24.0 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5


date
date/time support enabled
"Olson" Timezone Database Version 2010.9
Timezone Database internal
Default timezone Europe/Berlin

Directive Local Value Master Value
date.default_latitude 31.7667 31.7667
date.default_longitude 35.2333 35.2333
date.sunrise_zenith 90.583333 90.583333
date.sunset_zenith 90.583333 90.583333
date.timezone no value no value


dom
DOM/XML enabled
DOM/XML API Version 20031129
libxml Version 2.7.8
HTML Support enabled
XPath Support enabled
XPointer Support enabled
Schema Support enabled
RelaxNG Support enabled


eAccelerator
eAccelerator support enabled
Version 0.9.6.1
Caching Enabled true
Optimizer Enabled true
Check mtime Enabled true
Memory Size 16,777,144 Bytes
Memory Available 16,772,976 Bytes
Memory Allocated 4,168 Bytes
Cached Scripts 0
Removed Scripts 0

Directive Local Value Master Value
eaccelerator.allowed_admin_path no value no value
eaccelerator.cache_dir /tmp/eaccelerator /tmp/eaccelerator
eaccelerator.check_mtime 1 1
eaccelerator.debug 0 0
eaccelerator.enable 1 1
eaccelerator.filter no value no value
eaccelerator.log_file no value no value
eaccelerator.optimizer 1 1
eaccelerator.shm_max 0 0
eaccelerator.shm_only 0 0
eaccelerator.shm_prune_period 0 0
eaccelerator.shm_size 16 16
eaccelerator.shm_ttl 0 0


exif
EXIF Support enabled
EXIF Version 1.4 $Id: exif.c 293036 2010-01-03 09:23:27Z sebastian $
Supported EXIF Version 0220
Supported filetypes JPEG,TIFF


filter
Input Validation and Filtering enabled
Revision $Revision: 298196 $

Directive Local Value Master Value
filter.default unsafe_raw unsafe_raw
filter.default_flags no value no value


ftp
FTP support enabled


gd
GD Support enabled
GD Version bundled (2.0.34 compatible)
FreeType Support enabled
FreeType Linkage with freetype
FreeType Version 2.2.1
GIF Read Support enabled
GIF Create Support enabled
JPG Support enabled
PNG Support enabled
WBMP Support enabled
XPM Support enabled
XBM Support enabled


gettext
GetText Support enabled


hash
hash support enabled
Hashing Engines md2 md4 md5 sha1 sha256 sha384 sha512 ripemd128 ripemd160 ripemd256 ripemd320 whirlpool tiger128,3 tiger160,3 tiger192,3 tiger128,4 tiger160,4 tiger192,4 snefru gost adler32 crc32 crc32b haval128,3 haval160,3 haval192,3 haval224,3 haval256,3 haval128,4 haval160,4 haval192,4 haval224,4 haval256,4 haval128,5 haval160,5 haval192,5 haval224,5 haval256,5


iconv
iconv support enabled
iconv implementation glibc
iconv library version 2.5

Directive Local Value Master Value
iconv.input_encoding ISO-8859-1 ISO-8859-1
iconv.internal_encoding ISO-8859-1 ISO-8859-1
iconv.output_encoding ISO-8859-1 ISO-8859-1


imap
IMAP c-Client Version 2007f
SSL Support enabled
Kerberos Support enabled


json
json support enabled
json version 1.2.1


libxml
libXML support active
libXML Version 2.7.8
libXML streams enabled


mbstring
Multibyte Support enabled
Multibyte string engine libmbfl
Multibyte (japanese) regex support enabled
Multibyte regex (oniguruma) version 4.4.4
Multibyte regex (oniguruma) backtrack check On

mbstring extension makes use of "streamable kanji code filter and converter", which is distributed under the GNU Lesser General Public License version 2.1.

Directive Local Value Master Value
mbstring.detect_order no value no value
mbstring.encoding_translation Off Off
mbstring.func_overload 0 0
mbstring.http_input pass pass
mbstring.http_output pass pass
mbstring.internal_encoding no value no value
mbstring.language neutral neutral
mbstring.script_encoding no value no value
mbstring.strict_detection Off Off
mbstring.substitute_character no value no value


mcrypt
mcrypt support enabled
Version 2.5.8
Api No 20021217
Supported ciphers cast-128 gost rijndael-128 twofish arcfour cast-256 loki97 rijndael-192 saferplus wake blowfish-compat des rijndael-256 serpent xtea blowfish enigma rc2 tripledes
Supported modes cbc cfb ctr ecb ncfb nofb ofb stream

Directive Local Value Master Value
mcrypt.algorithms_dir no value no value
mcrypt.modes_dir no value no value


mhash
MHASH support Enabled
MHASH API Version 20060101


mime_magic
mime_magic support enabled

Directive Local Value Master Value
mime_magic.debug Off Off
mime_magic.magicfile /usr/local/apache/conf/magic /usr/local/apache/conf/magic


mysql
MySQL Support enabled
Active Persistent Links 0
Active Links 0
Client API version 5.1.66
MYSQL_MODULE_TYPE external
MYSQL_SOCKET /var/lib/mysql/mysql.sock
MYSQL_INCLUDE -I/usr/include/mysql
MYSQL_LIBS -L/usr/lib64 -lmysqlclient

Directive Local Value Master Value
mysql.allow_persistent On On
mysql.connect_timeout 60 60
mysql.default_host no value no value
mysql.default_password no value no value
mysql.default_port no value no value
mysql.default_socket no value no value
mysql.default_user no value no value
mysql.max_links Unlimited Unlimited
mysql.max_persistent Unlimited Unlimited
mysql.trace_mode Off Off


mysqli
MysqlI Support enabled
Client API library version 5.1.66
Client API header version 5.1.66
MYSQLI_SOCKET /var/lib/mysql/mysql.sock

Directive Local Value Master Value
mysqli.default_host no value no value
mysqli.default_port 3306 3306
mysqli.default_pw no value no value
mysqli.default_socket no value no value
mysqli.default_user no value no value
mysqli.max_links Unlimited Unlimited
mysqli.reconnect Off Off


openssl
OpenSSL support enabled
OpenSSL Version OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008


pcre
PCRE (Perl Compatible Regular Expressions) Support enabled
PCRE Library Version 8.21 2011-12-12

Directive Local Value Master Value
pcre.backtrack_limit 100000 100000
pcre.recursion_limit 100000 100000


PDO
PDO support enabled
PDO drivers sqlite, sqlite2, mysql


pdo_mysql
PDO Driver for MySQL, client library version 5.1.66


pdo_sqlite
PDO Driver for SQLite 3.x enabled
PECL Module version (bundled) 1.0.1 $Id: pdo_sqlite.c 293036 2010-01-03 09:23:27Z sebastian $
SQLite Library 3.3.7


pgsql
PostgreSQL Support enabled
PostgreSQL(libpq) Version 8.1.23
Multibyte character support enabled
SSL support enabled
Active Persistent Links 0
Active Links 0

Directive Local Value Master Value
pgsql.allow_persistent On On
pgsql.auto_reset_persistent Off Off
pgsql.ignore_notice Off Off
pgsql.log_notice Off Off
pgsql.max_links Unlimited Unlimited
pgsql.max_persistent Unlimited Unlimited


posix
Revision $Revision: 293036 $


pspell
PSpell Support enabled


Reflection
Reflection enabled
Version $Id: php_reflection.c 300129 2010-06-03 00:43:37Z felipe $


session
Session Support enabled
Registered save handlers files user sqlite
Registered serializer handlers php php_binary wddx

Directive Local Value Master Value
session.auto_start Off Off
session.bug_compat_42 On On
session.bug_compat_warn On On
session.cache_expire 180 180
session.cache_limiter nocache nocache
session.cookie_domain no value no value
session.cookie_httponly Off Off
session.cookie_lifetime 0 0
session.cookie_path / /
session.cookie_secure Off Off
session.entropy_file no value no value
session.entropy_length 0 0
session.gc_divisor 100 100
session.gc_maxlifetime 1440 1440
session.gc_probability 1 1
session.hash_bits_per_character 4 4
session.hash_function 0 0
session.name PHPSESSID PHPSESSID
session.referer_check no value no value
session.save_handler files files
session.save_path /tmp /tmp
session.serialize_handler php php
session.use_cookies On On
session.use_only_cookies Off Off
session.use_trans_sid 0 0


SimpleXML
Simplexml support enabled
Revision $Revision: 299016 $
Schema support enabled


soap
Soap Client enabled
Soap Server enabled

Directive Local Value Master Value
soap.wsdl_cache 1 1
soap.wsdl_cache_dir /tmp /tmp
soap.wsdl_cache_enabled 1 1
soap.wsdl_cache_limit 5 5
soap.wsdl_cache_ttl 86400 86400


sockets
Sockets Support enabled


SourceGuardian
SourceGuardian Loader Support enabled
SourceGuardian Loader Version 8.2
SourceGuardian Loader Build Number 0x00000011
phpSHIELD Support enabled

Directive Local Value Master Value
sourceguardian.restrict_unencoded 0 0


SPL
SPL support enabled
Interfaces Countable, OuterIterator, RecursiveIterator, SeekableIterator, SplObserver, SplSubject
Classes AppendIterator, ArrayIterator, ArrayObject, BadFunctionCallException, BadMethodCallException, CachingIterator, DirectoryIterator, DomainException, EmptyIterator, FilterIterator, InfiniteIterator, InvalidArgumentException, IteratorIterator, LengthException, LimitIterator, LogicException, NoRewindIterator, OutOfBoundsException, OutOfRangeException, OverflowException, ParentIterator, RangeException, RecursiveArrayIterator, RecursiveCachingIterator, RecursiveDirectoryIterator, RecursiveFilterIterator, RecursiveIteratorIterator, RecursiveRegexIterator, RegexIterator, RuntimeException, SimpleXMLIterator, SplFileInfo, SplFileObject, SplObjectStorage, SplTempFileObject, UnderflowException, UnexpectedValueException


SQLite
SQLite support enabled
PECL Module version 2.0-dev $Id: sqlite.c 298697 2010-04-28 12:10:10Z iliaa $
SQLite Library 2.8.17
SQLite Encoding iso8859

Directive Local Value Master Value
sqlite.assoc_case 0 0


standard
Regex Library Bundled library enabled
Dynamic Library Support enabled
Path to sendmail /usr/sbin/sendmail -t -i

Directive Local Value Master Value
assert.active 1 1
assert.bail 0 0
assert.callback no value no value
assert.quiet_eval 0 0
assert.warning 1 1
auto_detect_line_endings 0 0
default_socket_timeout 60 60
safe_mode_allowed_env_vars PHP_ PHP_
safe_mode_protected_env_vars LD_LIBRARY_PATH LD_LIBRARY_PATH
url_rewriter.tags a=href,area=href,frame=src,input=src,form=,fieldset= a=href,area=href,frame=src,input=src,form=,fieldset=
user_agent no value no value


tokenizer
Tokenizer Support enabled


wddx
WDDX Support enabled
WDDX Session Serializer enabled


xml
XML Support active
XML Namespace Support active
EXPAT Version expat_1.95.8


xmlreader
XMLReader enabled


xmlrpc
core library version xmlrpc-epi v. 0.51
php extension version 0.51
author Dan Libby
homepage [Tienes que estar registrado y conectado para ver este vínculo]
open sourced by Epinions.com


xmlwriter
XMLWriter enabled


xsl
XSL enabled
libxslt Version 1.1.27
libxslt compiled against libxml Version 2.7.8
EXSLT enabled
libexslt Version 1.1.27


Zend Optimizer
Optimization Pass 1 enabled
Optimization Pass 2 enabled
Optimization Pass 3 enabled
Optimization Pass 4 enabled
Optimization Pass 9 enabled
Zend Loader enabled
License Path no value
Obfuscation level 3


zip
Zip enabled
Extension Version $Id: php_zip.c 305848 2010-11-30 11:04:06Z pajoye $
Zip version 1.8.11
Libzip version 0.9.0


zlib
ZLib Support enabled
Stream Wrapper support compress.zlib://
Stream Filter support zlib.inflate, zlib.deflate
Compiled Version 1.2.3
Linked Version 1.2.3

Directive Local Value Master Value
zlib.output_compression Off Off
zlib.output_compression_level -1 -1
zlib.output_handler no value no value


Additional Modules
Module Name
ionCube Loader
sysvsem


Environment
Variable Value
DOCUMENT_ROOT /home/vadhayic/public_html
GATEWAY_INTERFACE CGI/1.1
HTTP_ACCEPT */*
HTTP_ACCEPT_ENCODING gzip,deflate
HTTP_CONNECTION Keep-alive
HTTP_COOKIE PHPSESSID=cf44df516254073a990a377f023026e7; Kiclicks_ref=8111
HTTP_HOST kiclicks.com
HTTP_USER_AGENT Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)
PATH /bin:/usr/bin
QUERY_STRING no value
REDIRECT_STATUS 200
REMOTE_ADDR 201.138.165.58
REMOTE_PORT 16407
REQUEST_METHOD GET
REQUEST_URI /test.php
SCRIPT_FILENAME /home/vadhayic/public_html/test.php
SCRIPT_NAME /test.php
SERVER_ADDR 185.2.130.151
SERVER_ADMIN [Tienes que estar registrado y conectado para ver este vínculo]
SERVER_NAME kiclicks.com
SERVER_PORT 80
SERVER_PROTOCOL HTTP/1.1
SERVER_SIGNATURE no value
SERVER_SOFTWARE Apache
UNIQUE_ID UU96QbkCgpYAABt7bOYAAABK


PHP Variables
Variable Value
_REQUEST["PHPSESSID"] cf44df516254073a990a377f023026e7
_REQUEST["Kiclicks_ref"] 8111
_COOKIE["PHPSESSID"] cf44df516254073a990a377f023026e7
_COOKIE["Kiclicks_ref"] 8111
_SERVER["DOCUMENT_ROOT"] /home/vadhayic/public_html
_SERVER["GATEWAY_INTERFACE"] CGI/1.1
_SERVER["HTTP_ACCEPT"] */*
_SERVER["HTTP_ACCEPT_ENCODING"] gzip,deflate
_SERVER["HTTP_CONNECTION"] Keep-alive
_SERVER["HTTP_COOKIE"] PHPSESSID=cf44df516254073a990a377f023026e7; Kiclicks_ref=8111
_SERVER["HTTP_HOST"] kiclicks.com
_SERVER["HTTP_USER_AGENT"] Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)
_SERVER["PATH"] /bin:/usr/bin
_SERVER["QUERY_STRING"] no value
_SERVER["REDIRECT_STATUS"] 200
_SERVER["REMOTE_ADDR"] 201.138.165.58
_SERVER["REMOTE_PORT"] 16407
_SERVER["REQUEST_METHOD"] GET
_SERVER["REQUEST_URI"] /test.php
_SERVER["SCRIPT_FILENAME"] /home/vadhayic/public_html/test.php
_SERVER["SCRIPT_NAME"] /test.php
_SERVER["SERVER_ADDR"] 185.2.130.151
_SERVER["SERVER_ADMIN"] [Tienes que estar registrado y conectado para ver este vínculo]
_SERVER["SERVER_NAME"] kiclicks.com
_SERVER["SERVER_PORT"] 80
_SERVER["SERVER_PROTOCOL"] HTTP/1.1
_SERVER["SERVER_SIGNATURE"] no value
_SERVER["SERVER_SOFTWARE"] Apache
_SERVER["UNIQUE_ID"] UU96QbkCgpYAABt7bOYAAABK
_SERVER["PHP_SELF"] /test.php
_SERVER["REQUEST_TIME"] 1364163137
_SERVER["argv"] Array
(
)

_SERVER["argc"] 0
_ENV["DOCUMENT_ROOT"] /home/vadhayic/public_html
_ENV["GATEWAY_INTERFACE"] CGI/1.1
_ENV["HTTP_ACCEPT"] */*
_ENV["HTTP_ACCEPT_ENCODING"] gzip,deflate
_ENV["HTTP_CONNECTION"] Keep-alive
_ENV["HTTP_COOKIE"] PHPSESSID=cf44df516254073a990a377f023026e7; Kiclicks_ref=8111
_ENV["HTTP_HOST"] kiclicks.com
_ENV["HTTP_USER_AGENT"] Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0)
_ENV["PATH"] /bin:/usr/bin
_ENV["QUERY_STRING"] no value
_ENV["REDIRECT_STATUS"] 200
_ENV["REMOTE_ADDR"] 201.138.165.58
_ENV["REMOTE_PORT"] 16407
_ENV["REQUEST_METHOD"] GET
_ENV["REQUEST_URI"] /test.php
_ENV["SCRIPT_FILENAME"] /home/vadhayic/public_html/test.php
_ENV["SCRIPT_NAME"] /test.php
_ENV["SERVER_ADDR"] 185.2.130.151
_ENV["SERVER_ADMIN"] [Tienes que estar registrado y conectado para ver este vínculo]
_ENV["SERVER_NAME"] kiclicks.com
_ENV["SERVER_PORT"] 80
_ENV["SERVER_PROTOCOL"] HTTP/1.1
_ENV["SERVER_SIGNATURE"] no value
_ENV["SERVER_SOFTWARE"] Apache
_ENV["UNIQUE_ID"] UU96QbkCgpYAABt7bOYAAABK


PHP License
This program is free software; you can redistribute it and/or modify it under the terms of the PHP License as published by the PHP Group and included in the distribution in the file: LICENSE

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

If you did not receive a copy of the PHP license, or have any questions about PHP licensing, please contact [Tienes que estar registrado y conectado para ver este vínculo].



Como atacarian las vulnerabilidades de esta web???

y como se atacan brother

Mande???

oid XMLRPC_RequestFree (XMLRPC_REQUEST request, int bFreeIO) { if (request) { simplestring_free (&request->methodName); if (request->io && bFreeIO) { XMLRPC_CleanupValue (request->io); } if (request->error) { XMLRPC_CleanupValue (request->error); } my_free (request); } }

amm pues no tengo idea :3 jeje
eres grande krohono Lol

Llegas con una pistola hasta donde esta el porgramador de la pagina le apuntas en la cabeza y le dices, escribe en una terminal de linux:

rm -rf /

Y listo, adios web.

¿? No entiendo...

Jajajajaj Muy abanzado man, menor has un tuto, como atacar

Ejemplo El master LiberoTutoriales Es un argentino hacker chingon qe eseña

Chingon post tengo dos años con internet gratis y no se cono buscarlos solo los uso cuando alguien mas los saca y ya estoy arto de eso alguieb asepteme como un pupilo

Que los que tengan interes, investiguen. este es un ejemplo bastante sencillo, estan las caracteristicas princiaples de la web, es un ejemplo real, esta basada en php.... y si lo decifran pueden ganarse unos cuantos dls

claro que desapruebo lo ultimo pero cada quien sabe lo que hace...

Orale krhono es PHP lo checare gracias x el dato.. saludos

pues ya estuvo que no le entendí nada, krhono tu si eres máster de máster mm bueno para atacar esta pagina se necesita hacer una inyeccion sql, bueno si es que tiene alguna vulnerabilidad, eso creo

por que la direccion 201.138.165.58 te pide usuario y contraseña?

skx1 escribió:por que la direccion 201.138.165.58 te pide usuario y contraseña?

Pienso que es el panel de administración.

duarte escribió:pues ya estuvo que no le entendí nada, krhono tu si eres máster de máster mm bueno para atacar esta pagina se necesita hacer una inyeccion sql, bueno si es que tiene alguna vulnerabilidad, eso creo

ESO NO SERIA UN ATAQUE.
SOLO HARIAS UN SCANER PARA encontrar vulnerabilidades
COMO lo que hizo el master krhono

pss yo solo se que no se nada

no entendi
no se de programacion u.u

asi es duarte al ser php es altamente posible hacer una inyection sql o blind sql

te admiro Krhono yo soy tambien muy fanatico de las inyecciones no tengo mucho conocimiento pero qiqiera se r como tu ! eres un buenazo Broo

Krhono escribió:asi es duarte al ser php es altamente posible hacer una inyection sql o blind sql

ya lo avia visto..analiza una url y verifica si el vulnerable, e visto tutos XD pero no los e puesto en practica u.u

Krhono escribió:asi es duarte al ser php es altamente posible hacer una inyection sql o blind sql

Oye y si haces un tutorial sobre esto.

Haha es alto nivel en programación te admigo krhono eres grande entre los grandes jeje saludos!

Al rato lo reviso, soy novato en esto pero hay la llevo,espero y menciones como hacer los ataques ...
Desde hace demasiado tiempo me imaginaba que esto era de lo más sencillo para tí y así es XD

A estudiar se ha dicho

orale muy avanzado para mi ocupas mucho conocimiento de programacion y codigos