USKO Panel <kocuce.com.tr> ÖZEL

Admin · 25 Eyl 2019

Download

Gizli içeriği görüntüleme özelliği kayıtlı kullanıcılar için mevcuttur!

RAR ŞİFRESİ : kocuce.com.tr

Kod:

güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir

SQL KODLARI

Kod:

USE [kn_online] GO /****** Object: Table [dbo].[_ASD] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_ASD]( [cc] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BANKALAR] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BANKALAR]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [Banka] [varchar](250) NULL, [Sube] [varchar](250) NULL, [Hesap] [varchar](250) NULL, [Isim] [varchar](50) NULL, [IBAN] [varchar](250) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BASLANGIC_ITEMLERI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI]( [Warrior] [varchar](255) NULL, [Rogue] [varchar](255) NULL, [Mage] [varchar](255) NULL, [Priest] [varchar](255) NULL, [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum] DEFAULT ((0)), [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory] DEFAULT ((0)) ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BLOCK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BLOCK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](200) NULL, [titleen] [varchar](200) NULL, [contenttr] [text] NULL, [contenten] [text] NULL ) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CASHPAKETI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CASHPAKETI]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [CashPaketi] [varchar](50) NULL, [Fiyati] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CODEHISTORY] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CODEHISTORY]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [ESN] [varchar](50) NULL, [PASS] [varchar](50) NULL, [StrAccountID] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DESTEK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DESTEK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [StrUserID] [varchar](80) NULL, [StrTitle] [varchar](80) NULL, [StrSoru] [varchar](1500) NULL, [StrCevap] [varchar](1500) NULL, [StrCatID] [varchar](50) NULL, [StrDurum] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DOWNLOADS] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DOWNLOADS]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](250) NULL, [titleen] [varchar](250) NULL, [varchar](250) NULL, [tarih] [...NSERT [dbo].[TB_USER] ON

[/vfc_hh][/CODE]

Kaiser · 7 Eki 2019

sağol kardeşim

Selcuk55760 · 10 Eki 2019

güzel işşşşşşşşşşşş

ali1 · 15 Eki 2019

güzel paylaşım teşekkürler

groys · 17 Eki 2019

TEŞEKKÜRLERRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR

PainS · 7 Kas 2019

teşekkürler

asdqasd123 · 23 Mar 2020

qweqwdqwdas

spiketr · 23 Mar 2020

eyw hocam

apolye666 · 28 Mar 2020

sağoalsın kardeş

4Gost1s4 · 29 Mar 2020

Admin' Alıntı:

Download

[Gizli içerik]

RAR ŞİFRESİ : kocuce.com.tr

Kod:

güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir

SQL KODLARI

Kod:

USE [kn_online] GO /****** Object: Table [dbo].[_ASD] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_ASD]( [cc] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BANKALAR] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BANKALAR]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [Banka] [varchar](250) NULL, [Sube] [varchar](250) NULL, [Hesap] [varchar](250) NULL, [Isim] [varchar](50) NULL, [IBAN] [varchar](250) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BASLANGIC_ITEMLERI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI]( [Warrior] [varchar](255) NULL, [Rogue] [varchar](255) NULL, [Mage] [varchar](255) NULL, [Priest] [varchar](255) NULL, [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum] DEFAULT ((0)), [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory] DEFAULT ((0)) ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BLOCK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BLOCK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](200) NULL, [titleen] [varchar](200) NULL, [contenttr] [text] NULL, [contenten] [text] NULL ) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CASHPAKETI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CASHPAKETI]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [CashPaketi] [varchar](50) NULL, [Fiyati] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CODEHISTORY] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CODEHISTORY]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [ESN] [varchar](50) NULL, [PASS] [varchar](50) NULL, [StrAccountID] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DESTEK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DESTEK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [StrUserID] [varchar](80) NULL, [StrTitle] [varchar](80) NULL, [StrSoru] [varchar](1500) NULL, [StrCevap] [varchar](1500) NULL, [StrCatID] [varchar](50) NULL, [StrDurum] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DOWNLOADS] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DOWNLOADS]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](250) NULL, [titleen] [varchar](250) NULL, [varchar](250) NULL, [tarih] [...NSERT [dbo].[TB_USER] ON

[/vfc_hh][/CODE]

İŞİMİZE YARA GİBİ

nympadora · 19 Tem 2020

halimizduman33 · 11 Kas 2020

link kırık

doljan1 · 25 Ara 2020

tyyyyyyyyyyyyyy

lcalypso · 7 Şub 2021

harika

pryan182 · 14 Mar 2021

thank you

humanorck08 · 11 Ağu 2022

fds

Admin' Alıntı:

Download

[Gizli içerik]

RAR ŞİFRESİ : kocuce.com.tr

Kod:

güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir

SQL KODLARI

Kod:

USE [kn_online] GO /****** Object: Table [dbo].[_ASD] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_ASD]( [cc] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BANKALAR] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BANKALAR]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [Banka] [varchar](250) NULL, [Sube] [varchar](250) NULL, [Hesap] [varchar](250) NULL, [Isim] [varchar](50) NULL, [IBAN] [varchar](250) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BASLANGIC_ITEMLERI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI]( [Warrior] [varchar](255) NULL, [Rogue] [varchar](255) NULL, [Mage] [varchar](255) NULL, [Priest] [varchar](255) NULL, [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum] DEFAULT ((0)), [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory] DEFAULT ((0)) ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BLOCK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BLOCK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](200) NULL, [titleen] [varchar](200) NULL, [contenttr] [text] NULL, [contenten] [text] NULL ) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CASHPAKETI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CASHPAKETI]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [CashPaketi] [varchar](50) NULL, [Fiyati] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CODEHISTORY] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CODEHISTORY]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [ESN] [varchar](50) NULL, [PASS] [varchar](50) NULL, [StrAccountID] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DESTEK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DESTEK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [StrUserID] [varchar](80) NULL, [StrTitle] [varchar](80) NULL, [StrSoru] [varchar](1500) NULL, [StrCevap] [varchar](1500) NULL, [StrCatID] [varchar](50) NULL, [StrDurum] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DOWNLOADS] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DOWNLOADS]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](250) NULL, [titleen] [varchar](250) NULL, [varchar](250) NULL, [tarih] [...NSERT [dbo].[TB_USER] ON

[/vfc_hh][/CODE]

fsdsdf

baekje · 19 Eyl 2022

eywwww

abcan · 22 Eyl 2022

Admin' Alıntı:

Download

[Gizli içerik]

RAR ŞİFRESİ : kocuce.com.tr

Kod:

güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir

SQL KODLARI

Kod:

USE [kn_online] GO /****** Object: Table [dbo].[_ASD] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_ASD]( [cc] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BANKALAR] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BANKALAR]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [Banka] [varchar](250) NULL, [Sube] [varchar](250) NULL, [Hesap] [varchar](250) NULL, [Isim] [varchar](50) NULL, [IBAN] [varchar](250) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BASLANGIC_ITEMLERI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI]( [Warrior] [varchar](255) NULL, [Rogue] [varchar](255) NULL, [Mage] [varchar](255) NULL, [Priest] [varchar](255) NULL, [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum] DEFAULT ((0)), [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory] DEFAULT ((0)) ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BLOCK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BLOCK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](200) NULL, [titleen] [varchar](200) NULL, [contenttr] [text] NULL, [contenten] [text] NULL ) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CASHPAKETI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CASHPAKETI]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [CashPaketi] [varchar](50) NULL, [Fiyati] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CODEHISTORY] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CODEHISTORY]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [ESN] [varchar](50) NULL, [PASS] [varchar](50) NULL, [StrAccountID] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DESTEK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DESTEK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [StrUserID] [varchar](80) NULL, [StrTitle] [varchar](80) NULL, [StrSoru] [varchar](1500) NULL, [StrCevap] [varchar](1500) NULL, [StrCatID] [varchar](50) NULL, [StrDurum] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DOWNLOADS] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DOWNLOADS]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](250) NULL, [titleen] [varchar](250) NULL, [varchar](250) NULL, [tarih] [...NSERT [dbo].[TB_USER] ON

[/vfc_hh][/CODE]

teşekkürler

TRMoskito02 · 15 May 2023

Admin' Alıntı:

Download

[Gizli içerik]

RAR ŞİFRESİ : kocuce.com.tr

Kod:

güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir

SQL KODLARI

Kod:

USE [kn_online] GO /****** Object: Table [dbo].[_ASD] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_ASD]( [cc] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BANKALAR] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BANKALAR]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [Banka] [varchar](250) NULL, [Sube] [varchar](250) NULL, [Hesap] [varchar](250) NULL, [Isim] [varchar](50) NULL, [IBAN] [varchar](250) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BASLANGIC_ITEMLERI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI]( [Warrior] [varchar](255) NULL, [Rogue] [varchar](255) NULL, [Mage] [varchar](255) NULL, [Priest] [varchar](255) NULL, [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum] DEFAULT ((0)), [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory] DEFAULT ((0)) ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_BLOCK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_BLOCK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](200) NULL, [titleen] [varchar](200) NULL, [contenttr] [text] NULL, [contenten] [text] NULL ) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CASHPAKETI] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CASHPAKETI]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [CashPaketi] [varchar](50) NULL, [Fiyati] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_CODEHISTORY] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_CODEHISTORY]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [ESN] [varchar](50) NULL, [PASS] [varchar](50) NULL, [StrAccountID] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DESTEK] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DESTEK]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [StrUserID] [varchar](80) NULL, [StrTitle] [varchar](80) NULL, [StrSoru] [varchar](1500) NULL, [StrCevap] [varchar](1500) NULL, [StrCatID] [varchar](50) NULL, [StrDurum] [varchar](50) NULL ) ON [PRIMARY] GO SET ANSI_PADDING OFF GO /****** Object: Table [dbo].[_DOWNLOADS] Script Date: 25.01.2017 00:45:24 ******/ SET ANSI_NULLS ON GO SET QUOTED_IDENTIFIER ON GO SET ANSI_PADDING ON GO CREATE TABLE [dbo].[_DOWNLOADS]( [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL, [titletr] [varchar](250) NULL, [titleen] [varchar](250) NULL, [varchar](250) NULL, [tarih] [...NSERT [dbo].[TB_USER] ON

[/vfc_hh][/CODE]

TRMoskito02 · 20 May 2023

abcan' Alıntı:
teşekkürler

Foruma hoş geldin, Ziyaretçi

USKO Panel <kocuce.com.tr> ÖZEL

[XFB] Konu Bilgileri

Daha fazla seçenek

Admin

İstediğiniz templateyi k.o panel sistemine giydirebilirim

kocuce Full Paralı Satilan HTML + PSD [ Kopanele Tema Giydir] Ko Cüce Farkı

K2D USKO PANEL [ FLASH ] [Görsel Tasarım ] | Ko Cuce

[kocuce.com.tr) ÖZEL]PUS USKO v2 ORJINAL VE API SISTEMI

Kaiser

Selcuk55760

ali1

groys

PainS

asdqasd123

spiketr

apolye666

4Gost1s4

nympadora

halimizduman33

doljan1

lcalypso

pryan182

humanorck08

baekje

abcan

TRMoskito02

TRMoskito02

Forumdan daha fazla yararlanmak için giriş yapın yada üye olun!

Dikkat

Konuyu görüntüleyenler