[Amin_Mansouri]

چند راه داری یکی درک هست عبارتهای زیر رو تو گوگل سرچ کن پیدا شد بدان باگ lfi داره
درک ها :

کد:

manager/pages/DeleteInvoicePage.class.php?base_path=
/manager/pages/DeleteProductPage.class.php?base_path=
/manager/pages/DeleteServerPage.class.php?base_path=
/manager/pages/DomainServicesPage.class.php?base_path=
/manager/pages/DomainsPage.class.php?base_path=
/manager/pages/EditAccountPage.class.php?base_path=
/manager/pages/EditDomainPage.class.php?base_path=
/manager/pages/EditDomainServicePage.class.php?base_path=
/manager/pages/EditHostingServicePage.class.php?base_path=
/manager/pages/EditPaymentPage.class.php?base_path=
/manager/pages/EditProductPage.class.php?base_path=
/manager/pages/EditServerPage.class.php?base_path=
/manager/pages/EmailInvoicePage.class.php?base_path=
/manager/pages/ExecuteOrderPage.class.php?base_path=
/manager/pages/ExpiredDomainsPage.class.php?base_path=
/manager/pages/FulfilledOrdersPage.class.php?base_path=
/manager/pages/GenerateInvoicesPage.class.php?base_path=
/manager/pages/HomePage.class.php?base_path=  
inurl:/_functions.php?prefix=

inurl:/cpcommerce/_functions.php?prefix=

inurl:/modules/coppermine/themes/default/theme.php?theme_dir=

inurl:/modules/agendax/addevent.inc.php?agendax_path=

inurl:/ashnews.php?pathtoashnews=

inurl:/eblog/blog.inc.php?xoopsconfig[xoops_url]=

inurl:/pm/lib.inc.php?pm_path=

inurl:/b2-tools/gm-2-b2.php?b2inc=

inurl:/modules/mod_mainmenu.php?mosconfig_absolute_path=

inurl:/modules/agendax/addevent.inc.php?agendax_path=

inurl:/includes/include_once.php?include_file=

inurl:/e107/e107_handlers/secure_img_render.php?p=

inurl:/shoutbox/expanded.php?conf=

inurl:/main.php?x=

inurl:/myphpcalendar/admin.php?cal_dir=

inurl:/index.php/main.php?x=

inurl:/index.php?include=

inurl:/index.php?x=

inurl:/index.php?open=

inurl:/index.php?visualizar=

inurl:/template.php?pagina=

inurl:/index.php?pagina=

inurl:/index.php?inc=

inurl:/includes/include_onde.php?include_file=

inurl:/index.php?page=

inurl:/index.php?pg=

inurl:/index.php?show=

inurl:/index.php?cat=

inurl:/index.php?file=

inurl:/db.php?path_local=

inurl:/index.php?site=

inurl:/htmltonuke.php?filnavn=

inurl:/livehelp/inc/pipe.php?hcl_path=

inurl:/hcl/inc/pipe.php?hcl_path=

inurl:/inc/pipe.php?hcl_path=

inurl:/support/faq/inc/pipe.php?hcl_path=

inurl:/help/faq/inc/pipe.php?hcl_path=

inurl:/helpcenter/inc/pipe.php?hcl_path=

inurl:/live-support/inc/pipe.php?hcl_path=

inurl:/gnu3/index.php?doc=

inurl:/gnu/index.php?doc=

inurl:/phpgwapi/setup/tables_update.inc.php?appdir=

inurl:/forum/install.php?phpbb_root_dir=

inurl:/includes/calendar.php?phpc_root_path=

inurl:/includes/setup.php?phpc_root_path=

inurl:/inc/authform.inc.php?path_pre=

inurl:/include/authform.inc.php?path_pre=

inurl:index.php?nic=

inurl:index.php?sec=

inurl:index.php?content=

inurl:index.php?link=

inurl:index.php?filename=

inurl:index.php?dir=

inurl:index.php?document=

inurl:index.php?view=

inurl:*.php?sel=

inurl:*.php?session=&content=

inurl:*.php?locate=

inurl:*.php?place=

inurl:*.php?layout=

inurl:*.php?go=

inurl:*.php?catch=

inurl:*.php?mode=

inurl:*.php?name=

inurl:*.php?loc=

inurl:*.php?f=

inurl:*.php?inf=

inurl:*.php?pg=

inurl:*.php?load=

inurl:*.php?naam=

allinurl:/index.php?page= site:*.il

allinurl:/index.php?file= site:*.il

راه بعدی اگر یک سایت رو بخوای اسکن کنی اسکنر Acunetix هست که توی فروم هست دانلودش کن وسایت مورد نظر رو اسکن کن

همچنین برای دانلود فایل اموزشی ایننجا کلیک کنید روش نفوذ از طریق باگ lfi

download

همچنین نیار به فایرفاکس و شل و افزونه temper data داری کافی با فایرفاکس به ادرس زیر بری و افزونه رو نصب کنی
لینک :
https://addons.mozilla.org/en-us/firefox...tn-primary
موفق باشید