document updated 15 years ago, on Nov 2, 2008
General methods for figuring these things out:
- Look for admins that have incorrectly installe the package. Easy: Just google for {intitle:"index of"}
- You can put YOUR OWN URLs in the redirector, and see what it translates them to in the HTTP response!
/streamrotator/out.php
/streamrotator/admin.php
- Confirm the title contains "Stream rotator" in it.
/streamrotator/out.php
- l=1.6.656.5600 (or something like that) — the FHG ID?
- u= — where we're redirecting to
/streamrotator/config/10.png
/streamrotator/in.php
- This should produce the same HTML as the TGP's homepage (i.e. it's mod_rewrited)
/cgi-bin/at3/out.cgi
/cgi-bin/at3/signup.cgi
- Confirm that the title contains "Arrow Trader Lite III".
/cgi-bin/at3/out.cgi
- u= — where we're redirecting to
/cgi-bin/at3/wmpage.cgi
- "No Post data received. Please fill out the form and try again."
/cgi-bin/at3/static/tracker.cgi
- Blank page, though "view source" reveals some javascript cookie-setting code.
/cgi-bin/atx/out.cgi
/cgi-bin/atx/signup.cgi
- confirm the title contains "Arrow Trader eXtreme"
/cgi-bin/atx/admin.cgi
- confirm the title contains "Arrow Trader eXtreme"
/st/st.php — equivalent to out.php
/st/admin/
- confirm the password popup-box says "SmartThumbs admin"
- BUT! If the webmaster is REALLY stupid, you won't get a password box. Hehe! Then, just go to /st/admin/rotator.php.
/st/servercheck.php?cmd=phpinfo
- gives a hukkuva lot of info, if they left it laying around
/st/img/header_logo.gif
/out.php
/pt/
- where the thumbs are stored
/trade.php
- confirm that "Proton TM" is in the title
/tgp.php
- confirm that "Proton TM" is in the title
/proton/
- confirm that the password popup says "Proton Admin"
/out.cgi
/signup.php
- confirm the title contains "TManager3"
/link.php — equivalent to out.php
/webmaster.php
- confirm the title contains "YawTM"
/thumbs/
/tgpx/click.php — equivalent to out.php
/tgpx/partner.php
/tgpx/submit.php
/tgpx/admin/
- confirm that the title contains "TGPX Administration"
/tgpx/templates/compiled/default-tgp.tpl