Tin Học Và Những Điều Cần Biết: Share Egyptian Shell Team

Sunday, May 24, 2015

Share Egyptian Shell Team

  1. السلام عليكم ورحمة الله وبركاتة
  2. ---------------------------
  3. الهدف : http://www.hamdeensabahy.com/
  4. نوع السكربت : wordpress
  5. لوحة التحكم : http://www.hamdeensabahy.com/wp-login.php
  6. ------------------------------------------------------------
  7. نتيجة الفحص
  8. الموقع مركب هذه االاضافات :
  9. sahifa 
  10. tubepress      
  11. 1000grad-epaper
  12. wpgform
  13. autoGrid       
  14. facebook-popup-box     
  15. hupso-share-buttons-for-twitter-facebook-google
  16. related-youtube-videos 
  17. wp-polls       
  18. youtube-channel
  19. seo-facebook-comments  
  20. embedly
  21. --------------------------------------------------------------
  22. بعد فحص الاضافات
  23. هذه الاضافه يوجد بها ثغرة
  24. wp-polls
  25. http://www.hamdeensabahy.com/wp-content/plugins/wp-polls/wp-polls.php
  26. http://www.exploit-db.com/exploits/10256/
  27. --------------------------------------------------------------
  28. ايضا بعد فحص الثيم :
  29. اسم الثيم: WordPress theme in use: sahifa
  30.  | Name: sahifa
  31.  | http://www.hamdeensabahy.com/wp-content/themes/sahifa/
  32.  |
  33.  | * Title: Sahifa 2.4.0 - Multiple Script Path Disclosure Direct Request Path Disclosure
  34.  | * Reference: http://packetstormsecurity.com/files/119191/
  35.  | * Reference: http://www.securityfocus.com/bid/57109
  36.  | * Reference: http://osvdb.org/88926
  37.  |   ========================================================
  38.  |    يوجد بهذا الثيم ثغرة :
  39.  |   Exploit : Site Setting Reset CSRF Sahifa 2.4.0
  40.  | * Reference: http://packetstormsecurity.com/files/119191/
  41.  | * Reference: http://www.securityfocus.com/bid/57109
  42.  | * Reference: http://osvdb.org/88927
  43.  =============================================================
  44. نأتي لفحص البلاجنات :
  45. ----------------------
  46. اولا الموقع به 43 بلاجن
  47. ---------------------
  48. اسماء جميع البلاجنات
  49. =-=-=-=-==-=-=-=-=-
  50. 1-jquery-photo-gallery-slideshow-flash
  51. Location: http://www.hamdeensabahy.com/wp-content/plugins/1-jquery-photo-gallery-slideshow-flash/
  52. ----------------------------------------------------------------------------
  53. Name: 1000grad-epaper v1.4.11
  54.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/1000grad-epaper/
  55.  ----------------------------------------------------------------------------
  56.  Name: akismet v2.6.0
  57.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/akismet/
  58. --------------------------------------------------------------------------------
  59.  Name: all-in-one-seo-pack
  60.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/all-in-one-seo-pack/
  61. --------------------------------------------------------------------------
  62. Name: autoGrid
  63.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/autoGrid/
  64. ----------------------------------------------------------------------------------
  65.  Name: better-wp-security v4.1.3
  66.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/better-wp-security/
  67. ------------------------------------------------------------------------------------
  68.  Name: embedly v3.1
  69.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/embedly/
  70. ---------------------------------------------------------------------------------
  71.  | Name: embedplus-for-wordpress v4.9
  72.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/embedplus-for-wordpress/
  73. -----------------------------------------------------------------------------------
  74.  | Name: facebook v1.5.5
  75.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/facebook/
  76. ------------------------------------------------------------------------------------
  77.  | Name: facebook-popup-box v1.3.1
  78.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/facebook-popup-box/
  79. -------------------------------------------------------------------------------------
  80.  | Name: fetch-tweets v2.3.3
  81.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/fetch-tweets/
  82. ------------------------------------------------------------------------------------
  83.  Name: gallery-plugin v4.2.0
  84.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/gallery-plugin/
  85. ------------------------------------------------------------------------------------
  86.   | Name: google-analytics-for-wordpress v4.3.5
  87.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/google-analytics-for-wordpress/
  88. -------------------------------------------------------------------------------------
  89.  | Name: google-sitemap-generator v4.0.3
  90.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/google-sitemap-generator/
  91. -----------------------------------------------------------------------------------
  92.  | Name: google-xml-sitemaps-v3-for-qtranslate v3.3.1
  93.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/google-xml-sitemaps-v3-for-qtranslate/
  94. -------------------------------------------------------------------------------------
  95.  | Name: googleanalytics v1.0.5
  96.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/googleanalytics/
  97. --------------------------------------------------------------------------------------
  98.  | Name: groupdocs-viewer
  99.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/groupdocs-viewer/
  100. --------------------------------------------------------------------------------------
  101.  | Name: hupso-share-buttons-for-twitter-facebook-google v3.9.24
  102.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/hupso-share-buttons-for-twitter-facebook-google/
  103. --------------------------------------------------------------------------------------
  104.  | Name: issuu-pdf-sync v2.2.6
  105.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/issuu-pdf-sync/
  106. --------------------------------------------------------------------------------------
  107.  | Name: jetpack v2.9.2
  108.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/jetpack/
  109. --------------------------------------------------------------------------------------
  110.  | Name: meteor-slides v1.5.1
  111.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/meteor-slides/
  112. --------------------------------------------------------------------------------------
  113.   | Name: qtranslate v2.5.39
  114.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/qtranslate/
  115. --------------------------------------------------------------------------------------
  116.   Name: really-simple-captcha v1.8
  117.  Location: http://www.hamdeensabahy.com/wp-content/plugins/really-simple-captcha/
  118. --------------------------------------------------------------------------------------
  119.  Name: related-youtube-videos v1.6.3
  120.  --------------------------------------------------------------------------------------
  121.  Name: rv-embed-pdf
  122.  Location: http://www.hamdeensabahy.com/wp-content/plugins/rv-embed-pdf/
  123. --------------------------------------------------------------------------------------
  124.  Name: seo-automatic-links
  125.  Location: http://www.hamdeensabahy.com/wp-content/plugins/seo-automatic-links/
  126. --------------------------------------------------------------------------------------
  127.  Name: seo-data-transporter v0.9.9
  128.  Location: http://www.hamdeensabahy.com/wp-content/plugins/seo-data-transporter/
  129. --------------------------------------------------------------------------------------
  130.  Name: seo-facebook-comments v1.5.2
  131.  Location: http://www.hamdeensabahy.com/wp-content/plugins/seo-facebook-comments/
  132. --------------------------------------------------------------------------------------
  133.  Name: seo-ultimate v7.6.3.1
  134.  Location: http://www.hamdeensabahy.com/wp-content/plugins/seo-ultimate/
  135. --------------------------------------------------------------------------------------
  136.  Name: simple-share-buttons-adder v4.2
  137.  Location: http://www.hamdeensabahy.com/wp-content/plugins/simple-share-buttons-adder/
  138. --------------------------------------------------------------------------------------
  139.  Name: social-media-feather
  140.  Location: http://www.hamdeensabahy.com/wp-content/plugins/social-media-feather/
  141. --------------------------------------------------------------------------------------
  142.  Name: tubepress v3.1.5
  143.  Location: http://www.hamdeensabahy.com/wp-content/plugins/tubepress/
  144. --------------------------------------------------------------------------------------
  145.  Name: twitter-widget-pro v2.6.0
  146.  Location: http://www.hamdeensabahy.com/wp-content/plugins/twitter-widget-pro/
  147. --------------------------------------------------------------------------------------
  148.  | Name: wordfence v5.0.5
  149.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/wordfence/
  150. --------------------------------------------------------------------------------------
  151.   | Name: wordpress-importer v0.6.1
  152.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/wordpress-importer/
  153. --------------------------------------------------------------------------------------
  154. Name: wordpress-seo v1.5.3.2
  155. Location: http://www.hamdeensabahy.com/wp-content/plugins/wordpress-seo/
  156. --------------------------------------------------------------------------------------
  157.  | Name: wordpress-social-ring v1.2.14
  158.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/wordpress-social-ring/
  159. --------------------------------------------------------------------------------------
  160.  | Name: wp-polls v2.65
  161.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/wp-polls/
  162. --------------------------------------------------------------------------------------
  163.  | Name: wp-twitter v4.2.2
  164.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/wp-twitter/
  165. --------------------------------------------------------------------------------------
  166.  | Name: wpgform v0.63
  167.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/wpgform/
  168. --------------------------------------------------------------------------------------
  169.  | Name: wptouch v3.3
  170.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/wptouch/
  171. --------------------------------------------------------------------------------------
  172.  | Name: xml-sitemap-feed v4.3.2
  173.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/xml-sitemap-feed/
  174. --------------------------------------------------------------------------------------
  175.  | Name: youtube-channel v2.2.0
  176.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/youtube-channel/
  177. --------------------------------------------------------------------------------------
  178. البلاجنات الي يوجد بها ثغرات في مواقع الثغرات
  179. وتم تطبيق الثغرات علي نفس بلاجنات الموقع
  180. وها هيا النتايج :
  181. =============================
  182.  Name: all-in-one-seo-pack
  183.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/all-in-one-seo-pack/
  184.  ================================================================================
  185. ========
  186.  Exploit
  187. ========
  188.  | * Title: All in One SEO Pack <= 2.0.3 - XSS Vulnerability
  189.  | * Reference: http://archives.neohapsis.com/archives/bugtraq/2013-10/0006.html
  190.  | * Reference: http://packetstormsecurity.com/files/123490/
  191.  | * Reference: http://www.securityfocus.com/bid/62784
  192.  | * Reference: http://seclists.org/bugtraq/2013/Oct/8
  193.  | * Reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5988
  194.  | * Reference: http://secunia.com/advisories/55133
  195.  | * Reference: http://osvdb.org/98023
  196.  
  197.  بعد الفحص : clean
  198. -----------------------------------------------------------------------------------------
  199.  Name: gallery-plugin v4.2.0
  200.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/gallery-plugin/
  201. ========
  202.  Exploit
  203. ========
  204.  | * Title: Gallery 3.06 - Arbitrary File Upload
  205.  | * Reference: http://www.exploit-db.com/exploits/18998/
  206.   بعد الفحص : clean
  207.  
  208. ----------------------------------------------------------------------------
  209.   | Name: qtranslate v2.5.39
  210.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/qtranslate/
  211. ========
  212. Exploit
  213. ========
  214.  | * Title: qTranslate - Cross-Site Request Forgery Vulnerability
  215.  | * Reference: http://secunia.com/advisories/53126
  216.  | * Reference: http://osvdb.org/93873
  217.  
  218.  بعد الفحص : clean
  219. ---------------------------------------------------------------------------
  220.  | Name: wordfence v5.0.5
  221.  | Location: http://www.hamdeensabahy.com/wp-content/plugins/wordfence/
  222. ========
  223. Exploit
  224. ========
  225. Title: Wordfence 3.3.5 - XSS and IAA
  226. Reference: http://seclists.org/fulldisclosure/2012/Oct/139
  227. Reference: http://secunia.com/advisories/51055
  228.  
  229. بعد الفحص : clean
  230. --------------------------------------------------------------------------------
  231. Name: wordpress-seo v1.5.3.2
  232. Location: http://www.hamdeensabahy.com/wp-content/plugins/wordpress-seo/
  233. ========
  234. Exploit
  235. ========
  236.  | * Title: WordPress SEO 1.14.15 - index.php s Parameter Reflected XSS
  237.  | * Reference: http://packetstormsecurity.com/files/123028/
  238.  | * Reference: http://osvdb.org/97885
  239.  |
  240.  | * Title: WordPress SEO 1.4.6 - Reset Settings Feature Access Restriction Bypass
  241.  | * Reference: http://secunia.com/advisories/52949
  242.  | * Reference: http://osvdb.org/92147
  243.  
  244.  بعد الفحص : clean
  245. --------------------------------------------------------------------------------
  246.  
Được đăng bởi vào lúc
Nhãn:

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)