Foruma hoş geldin, Ziyaretçi

Forum içeriğine ve tüm hizmetlerimize erişim sağlamak için foruma kayıt olmalı ya da giriş yapmalısınız. Foruma üye olmak tamamen ücretsizdir.

Log in Register now

USKO Panel <kocuce.com.tr> ÖZEL

Konu Bilgileri

Konu Hakkında Merhaba, tarihinde Web Dosyası Paylaşımları kategorisinde Admin  tarafından oluşturulan USKO Panel ÖZEL başlıklı konuyu okuyorsunuz. Bu konu şimdiye dek 7,647 kez görüntülenmiş, 20 yorum ve 2 tepki puanı almıştır...
Kategori Adı Web Dosyası Paylaşımları
Konu Başlığı USKO Panel ÖZEL
Thread starter Admin 
Start date
Replies
Views
First message reaction score
Son Mesaj Yazan ali19
Admin

Admin 

Kurucu Admin
Joined
Aug 6, 2019
Messages
1,004
Reaction score
380
Points
83
Website
www.kocuce.com.tr
Download

View hidden content is available for registered users!



RAR ŞİFRESİ : kocuce.com.tr

Code: 
güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir



SQL KODLARI

Code: 
USE [kn_online]

GO
/****** Object:  Table [dbo].[_ASD]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_ASD](
    [cc] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BANKALAR]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BANKALAR](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [Banka] [varchar](250) NULL,
    [Sube] [varchar](250) NULL,
    [Hesap] [varchar](250) NULL,
    [Isim] [varchar](50) NULL,
    [IBAN] [varchar](250) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BASLANGIC_ITEMLERI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI](
    [Warrior] [varchar](255) NULL,
    [Rogue] [varchar](255) NULL,
    [Mage] [varchar](255) NULL,
    [Priest] [varchar](255) NULL,
    [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum]  DEFAULT ((0)),
    [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory]  DEFAULT ((0))
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BLOCK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BLOCK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](200) NULL,
    [titleen] [varchar](200) NULL,
    [contenttr] [text] NULL,
    [contenten] [text] NULL
) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CASHPAKETI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CASHPAKETI](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [CashPaketi] [varchar](50) NULL,
    [Fiyati] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CODEHISTORY]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CODEHISTORY](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [ESN] [varchar](50) NULL,
    [PASS] [varchar](50) NULL,
    [StrAccountID] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DESTEK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DESTEK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [StrUserID] [varchar](80) NULL,
    [StrTitle] [varchar](80) NULL,
    [StrSoru] [varchar](1500) NULL,
    [StrCevap] [varchar](1500) NULL,
    [StrCatID] [varchar](50) NULL,
    [StrDurum] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DOWNLOADS]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DOWNLOADS](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](250) NULL,
    [titleen] [varchar](250) NULL,
     [varchar](250) NULL,
    [tarih] [...NSERT [dbo].[TB_USER] ON


[/vfc_hh][/CODE]
 
A

ali1

Kayıtlı Üye
Joined
Oct 1, 2019
Messages
194
Reaction score
4
Points
0
Age
26
güzel paylaşım teşekkürler :)
 
G

groys

Kıdemli Üye
Joined
Sep 10, 2019
Messages
996
Reaction score
8
Points
18
Age
27
TEŞEKKÜRLERRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR
 
4

4Gost1s4

Kayıtlı Üye
Joined
Mar 25, 2020
Messages
30
Reaction score
1
Points
0
Age
32
Admin said:
Download

[Gizli içerik]


RAR ŞİFRESİ : kocuce.com.tr

Code: 
güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir



SQL KODLARI

Code: 
USE [kn_online]

GO
/****** Object:  Table [dbo].[_ASD]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_ASD](
    [cc] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BANKALAR]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BANKALAR](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [Banka] [varchar](250) NULL,
    [Sube] [varchar](250) NULL,
    [Hesap] [varchar](250) NULL,
    [Isim] [varchar](50) NULL,
    [IBAN] [varchar](250) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BASLANGIC_ITEMLERI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI](
    [Warrior] [varchar](255) NULL,
    [Rogue] [varchar](255) NULL,
    [Mage] [varchar](255) NULL,
    [Priest] [varchar](255) NULL,
    [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum]  DEFAULT ((0)),
    [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory]  DEFAULT ((0))
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BLOCK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BLOCK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](200) NULL,
    [titleen] [varchar](200) NULL,
    [contenttr] [text] NULL,
    [contenten] [text] NULL
) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CASHPAKETI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CASHPAKETI](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [CashPaketi] [varchar](50) NULL,
    [Fiyati] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CODEHISTORY]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CODEHISTORY](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [ESN] [varchar](50) NULL,
    [PASS] [varchar](50) NULL,
    [StrAccountID] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DESTEK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DESTEK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [StrUserID] [varchar](80) NULL,
    [StrTitle] [varchar](80) NULL,
    [StrSoru] [varchar](1500) NULL,
    [StrCevap] [varchar](1500) NULL,
    [StrCatID] [varchar](50) NULL,
    [StrDurum] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DOWNLOADS]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DOWNLOADS](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](250) NULL,
    [titleen] [varchar](250) NULL,
     [varchar](250) NULL,
    [tarih] [...NSERT [dbo].[TB_USER] ON


[/vfc_hh][/CODE]
Click to expand...
İŞİMİZE YARA GİBİ
 
H

humanorck08

Kayıtlı Üye
Joined
Jun 27, 2022
Messages
41
Reaction score
0
Points
6
fds
Admin said:
Download

[Gizli içerik]


RAR ŞİFRESİ : kocuce.com.tr

Code: 
güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir



SQL KODLARI

Code: 
USE [kn_online]

GO
/****** Object:  Table [dbo].[_ASD]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_ASD](
    [cc] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BANKALAR]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BANKALAR](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [Banka] [varchar](250) NULL,
    [Sube] [varchar](250) NULL,
    [Hesap] [varchar](250) NULL,
    [Isim] [varchar](50) NULL,
    [IBAN] [varchar](250) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BASLANGIC_ITEMLERI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI](
    [Warrior] [varchar](255) NULL,
    [Rogue] [varchar](255) NULL,
    [Mage] [varchar](255) NULL,
    [Priest] [varchar](255) NULL,
    [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum]  DEFAULT ((0)),
    [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory]  DEFAULT ((0))
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BLOCK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BLOCK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](200) NULL,
    [titleen] [varchar](200) NULL,
    [contenttr] [text] NULL,
    [contenten] [text] NULL
) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CASHPAKETI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CASHPAKETI](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [CashPaketi] [varchar](50) NULL,
    [Fiyati] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CODEHISTORY]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CODEHISTORY](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [ESN] [varchar](50) NULL,
    [PASS] [varchar](50) NULL,
    [StrAccountID] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DESTEK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DESTEK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [StrUserID] [varchar](80) NULL,
    [StrTitle] [varchar](80) NULL,
    [StrSoru] [varchar](1500) NULL,
    [StrCevap] [varchar](1500) NULL,
    [StrCatID] [varchar](50) NULL,
    [StrDurum] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DOWNLOADS]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DOWNLOADS](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](250) NULL,
    [titleen] [varchar](250) NULL,
     [varchar](250) NULL,
    [tarih] [...NSERT [dbo].[TB_USER] ON


[/vfc_hh][/CODE]
Click to expand...
fsdsdf
 
A

abcan

Kayıtlı Üye
Joined
Sep 22, 2022
Messages
3
Reaction score
1
Points
1
Admin said:
Download

[Gizli içerik]


RAR ŞİFRESİ : kocuce.com.tr

Code: 
güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir



SQL KODLARI

Code: 
USE [kn_online]

GO
/****** Object:  Table [dbo].[_ASD]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_ASD](
    [cc] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BANKALAR]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BANKALAR](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [Banka] [varchar](250) NULL,
    [Sube] [varchar](250) NULL,
    [Hesap] [varchar](250) NULL,
    [Isim] [varchar](50) NULL,
    [IBAN] [varchar](250) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BASLANGIC_ITEMLERI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI](
    [Warrior] [varchar](255) NULL,
    [Rogue] [varchar](255) NULL,
    [Mage] [varchar](255) NULL,
    [Priest] [varchar](255) NULL,
    [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum]  DEFAULT ((0)),
    [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory]  DEFAULT ((0))
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BLOCK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BLOCK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](200) NULL,
    [titleen] [varchar](200) NULL,
    [contenttr] [text] NULL,
    [contenten] [text] NULL
) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CASHPAKETI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CASHPAKETI](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [CashPaketi] [varchar](50) NULL,
    [Fiyati] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CODEHISTORY]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CODEHISTORY](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [ESN] [varchar](50) NULL,
    [PASS] [varchar](50) NULL,
    [StrAccountID] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DESTEK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DESTEK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [StrUserID] [varchar](80) NULL,
    [StrTitle] [varchar](80) NULL,
    [StrSoru] [varchar](1500) NULL,
    [StrCevap] [varchar](1500) NULL,
    [StrCatID] [varchar](50) NULL,
    [StrDurum] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DOWNLOADS]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DOWNLOADS](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](250) NULL,
    [titleen] [varchar](250) NULL,
     [varchar](250) NULL,
    [tarih] [...NSERT [dbo].[TB_USER] ON


[/vfc_hh][/CODE]
Click to expand...
teşekkürler
 
T

TRMoskito02

Kayıtlı Üye
Joined
May 24, 2022
Messages
11
Reaction score
0
Points
1
Admin said:
Download

[Gizli içerik]


RAR ŞİFRESİ : kocuce.com.tr

Code: 
güvenliğiniz için;

/cgi-bin/printenv.pl
/phpinfo.php

bu dosyaları silin

string değişkenlere addslashes uygulansa bile sql açığından faydalanılabilir, ve daha bir çok yerde sql koruması eksik,
/core/destek-cevap.php de
PHP- Kodu:
<?php
$ticketid=$_GET["tid"];
$tickets = odbc_exec($conn,"select AccountID from TICKET_CENTER where ID='".$ticketid."'");
benzeri

PHP- Kodu:
function sql_injection_check(){
    $badwords = Array("--",";","'",'"',"INSERT", "DROP", "SELECT", "UPDATE", "DELETE", "drop", "insert", "select", "update", "delete", "WHERE", "where","exec","EXEC","procedure","PROCEDURE");

    foreach($_REQUEST as $value) {
        foreach($badwords as $word) {
            if(substr_count($value, $word)) {
                exit();
            }
        }
    }
}
sql_injection_check();
bunu da /config/db.php

en alta ekleyin

ne olur demeyin bir shell yüklenmesi sunucunuza direkt erişim sağlayabilir ve dosyalarınızın çalınmasına sebep olabilir



SQL KODLARI

Code: 
USE [kn_online]

GO
/****** Object:  Table [dbo].[_ASD]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_ASD](
    [cc] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BANKALAR]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BANKALAR](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [Banka] [varchar](250) NULL,
    [Sube] [varchar](250) NULL,
    [Hesap] [varchar](250) NULL,
    [Isim] [varchar](50) NULL,
    [IBAN] [varchar](250) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BASLANGIC_ITEMLERI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BASLANGIC_ITEMLERI](
    [Warrior] [varchar](255) NULL,
    [Rogue] [varchar](255) NULL,
    [Mage] [varchar](255) NULL,
    [Priest] [varchar](255) NULL,
    [durum] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_durum]  DEFAULT ((0)),
    [inventory] [int] NULL CONSTRAINT [DF__BASLANGIC_ITEMLERI_inventory]  DEFAULT ((0))
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_BLOCK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_BLOCK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](200) NULL,
    [titleen] [varchar](200) NULL,
    [contenttr] [text] NULL,
    [contenten] [text] NULL
) ON [PRIMARY] TEXTIMAGE_ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CASHPAKETI]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CASHPAKETI](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [CashPaketi] [varchar](50) NULL,
    [Fiyati] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_CODEHISTORY]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_CODEHISTORY](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [ESN] [varchar](50) NULL,
    [PASS] [varchar](50) NULL,
    [StrAccountID] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DESTEK]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DESTEK](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [StrUserID] [varchar](80) NULL,
    [StrTitle] [varchar](80) NULL,
    [StrSoru] [varchar](1500) NULL,
    [StrCevap] [varchar](1500) NULL,
    [StrCatID] [varchar](50) NULL,
    [StrDurum] [varchar](50) NULL
) ON [PRIMARY]

GO
SET ANSI_PADDING OFF
GO
/****** Object:  Table [dbo].[_DOWNLOADS]    Script Date: 25.01.2017 00:45:24 ******/
SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
SET ANSI_PADDING ON
GO
CREATE TABLE [dbo].[_DOWNLOADS](
    [id] [int] IDENTITY(1,1) NOT FOR REPLICATION NOT NULL,
    [titletr] [varchar](250) NULL,
    [titleen] [varchar](250) NULL,
     [varchar](250) NULL,
    [tarih] [...NSERT [dbo].[TB_USER] ON


[/vfc_hh][/CODE]
Click to expand...
 
You must log in or register to reply here.

Forumdan daha fazla yararlanmak için giriş yapın yada üye olun!

Forumdan daha fazla yararlanmak için giriş yapın veya kayıt olun!

Register

Forumda bir hesap oluşturmak tamamen ücretsizdir.

Register now
Log in

Eğer bir hesabınız var ise lütfen giriş yapın

Log in
+++---yyzzhhe tarzı Yorum Yazanlar Ko cuce Yönetimi Tarafından Ban Atılacaktır

Users who are viewing this thread

Total: 2 (members: 0, guests: 2)