PHP File Include Attack&Server Side Include

PENGERTIAN
PHP File Include
Digunakan untuk membuat fungsi, header, footer, atau elemen yang dapat digunakan pada banyak halaman.

File yang kita buat memiliki persamaan header, cukup membuat 1 File berisi header yang nantinya dapat dipanggil oleh halaman-halaman web yang lain. Ketika melakukan update, cukup mengubah satu halaman saja, maka otomatis halaman yang lain akan ikut merasakan perubahannya.
Contoh
Fungsi Require()
Digunakan untuk membuat fungsi, header, footer, atau elemen yang akan dapat digunakan kembali pada banyak halaman.
Code

PFI Vulnerability
PHP tidak memerlukan deklarasi variabel, sehingga seorang programer dapat dengan sengaja memungkinkan lubang keamanan untuk menyusup ke aplikasi Web.
Contoh :
Inputan yang tidak valid dari pengguna karena tidak adanya error handling.

Remote File Include PHP
RFI terjadi ketika penyerang bisa menyisipkan script atau kode ke dalam URL dan memerintah server untuk mengeksekusi kode jahat.
Kode jahat ter-upload melalui file persesi, atau melalui upload gambar.
Metode lain adalah penyisipan atau penempatan kode yang dipikir akan aman, seperti kompresi audio stream. Ini tidak diperiksa sebagaimana mestinya, dan memungkinkan akses ke remote resources.
Sebuah metode umum yang digunakan untuk mengambil input dari data permintaan POST.
Metode diatas menyoroti kebutuhan untuk arsitektur keamanan yang kuat, dan berhati-hati dalam menerima input pengguna pada situs.
Contoh RFI
Tidak selalu membutuhkan kode berat, serangan dapat terjadi hanya dengan menambahkan sedikit code di akhir URL permintaan halaman.

RFI DEFENSE
Serangan File Inklusi dapat diatasi dengan mematikan register_globals. Hal ini membuat variabel $page tidak diperlakukan sebagai variabel super global, sehingga tidak memungkinkan inklusi. Menon-aktifkan allow_url_fopen, memungkinkan PHP file_get_contents () mencegah pengguna mengambil semua data dari situs web.

SERVER SIDE INCLUDE
PENGERTIAN
Seorang penyerang dapat menggunakan injeksi Server Side Include (SSI) untuk mengirim kode untuk sebuah aplikasi web yang kemudian dijalankan oleh web server. Memungkinkan penyerang untuk mencapai hasil yang sama untuk Cross Site Scripting. Arahan SSI bukan tempat yang dekat sekuat bahasa scripting penuh. Meskipun demikian, penyerang bisa mendapatkan akses mudah ke file sensitif, seperti file password, dan menjalankan perintah shell. Dalam kasus apapun, serangan hanya akan berhasil jika web server mengizin eksekusi SSI tanpa validasi yang tepat.
CONTOH
Pertimbangkan situs yang memiliki host di server yang memungkinkan SSI seperti Apache dengan "Option Includes" diaktifkan. Ketika terjadi kesalahan, HTTP Headers dengan seluruh permintaan yang dicatat, yang kemudian dapat ditampilkan pada halaman yang memungkinkan review error, Seorang pengguna dapat menyuntikan SSI dalam permintaan HTTP Headers untuk membuat kesalahan. Ketika log tersebut akhirnya ditinjau, server memparsing SSI dan mengeksekusi include.

Model serangan SSI
Eval Injection
Setting Manipulation
Special Element Injection
Account Lockout Attack
Full Path Disclosure
Cross-user Defacement

Syarat serangan SSI
Sebuah Web server yang mendukung dan telah mengaktifkan SSI
Pengguna mengendalikan inputan yang dapat membawa tujuan include ke Web server

Vulnerability
Kemungkinan : sangat tinggi
Hal ini cukup mudah untuk menentukan apakah SSI diperbolehkan pada server target. Seorang penyerang berpotensi dapat memungut banyak informasi jika SSI Injeksi memungkinkan.

Keterampilan atau Pengetahuan yang diperlukan penyerang
Ketrampilan atau Pengetahuan Tingkat: Menengah
Penyerang harus sadar teknologi SSI
Menentukan sifat injeksi dan dapat menyusun inputan yang menghasilkan dalam eksekusi SSI
Penyerang dapat melakukan probing untuk mengaktifkan SSI dengan menginjeksikan konten yang dapat ditafsirkan sebagai petunjuk SSI dan melihat output halaman

신데렐라맨 / Cinderella Man

Genre: Romance
Episodes: 16
Broadcast network: MBC
Broadcast period: 2009-Apr-15 to 2009-Jun-04
Air time: Wednesday & Thursday 21:55

A story of a rich man (Lee Joon Hee) who switches lives with a man who looks identical to him only the difference between them is the other man is poor (Oh Dae San). Seo Yeo Jin is a girl who studies at fashion design school in Paris but returns to Korea after her life is turned upside down when her father dies.

DOWNLOAD

Episode 01
Episode 02
Episode 03
Episode 04
Episode 05
Episode 06
Episode 07
Episode 08
Episode 09
Episode 10
Episode 11
Episode 12
Episode 13
Episode 14
Episode 15
Episode 16

Vampire Diaries

Welcome
This are the Vampire Diaries Original Soundtracks.
I love this drama so much and I hope you guys will like it. enjoy :)



SEASON I
EPISODE 1 “Pilot”
1. Silversun Pickups - Sort Of [Brooke and Darren in the car]
2. Mat Kearney - Here We Go [In the Gilbert house with Elena, Jeremy, and Jenna]
3. The Raconteurs - Consoler of the Lonely [Jeremy with Vicki and Tyler at school]
4. One Republic - Say (All I Need) [Elena in the graveyard]
5. Stars - Take Me to the Riot [In the Mystic Grill with Matt, Vicki, and Tyler]
6. Katy Perry - Thinking of You [Matt and Bonnie talking in the Mystic Grill]
7. MGMT - Kids [Elena, Stefan, Caroline, and Bonnie talking in the Mystic Grill]
8. Placebo - Running Up That Hill [In the boarding house with Stefan and Zach]
9. White Lies - Death [Stefan arrives at the party]
10. The All American Rejects - Back to Me [Matt corners Elena at the party]
11. Bat For Lashes - Siren Song [Bonnie and Caroline in the Grill/In the hospital room with Matt and Vicki]
12. The Fray - Never Say Never [Closing montage]

EPISODE 2 “Night of the Comet”
1. Metric - Help I’m Alive [Couple camping in the woods]
2. Mat Kearney - Closer to Love [Elena and Jenna talk, Jeremy visits Vicki in the hospital]
3. The Dead Weather - Hang You from the Heavens [Jeremy confronts Tyler]
4. The Gossip - Heavy Cross [Elena, Bonnie and Caroline talking in front of the Mystic Grill]
5. Neko Case - I’m An Animal [Elena and Jenna chat, Jenna threatens to ground Jeremy]
6. Dragonette - I Get Around [Elena and Bonnie handing out flyers, Caroline spots Damon]
7. We Were Promised Jetpacks - Conductor [Vicki and Jeremy in the Mystic Grill, lighting candles in the square]
8. Peaches - Mud [Vicki missing and heated discussion about her in the Mystic Grill]
9. Earlimart - Interloper [Matt thanking Stefan, Stefan talking to Bonnie and Caroline in the Mystic Grill]
10. Sara Bareilles - Gravity [Elena and Stefan reconcile and share their first kiss]

EPISODE 3 “Friday Night Bites”
1. The Bravery “Slow Poison”
2. Darker My Love “Blue Day”
3. 3OH!3 “Starstrukk”
4. The Black Keys “Strange Times”
5. Oh Mercy “Can’t Fight It”
6. Sea Wolf “You’re a Wolf”
7. Moby “Temptation"

EPISODE 4 “Family Ties”
1. Union of Knives “Opposite Direction”
2. Santigold “I’m a Lady”
3. Carolina Liar “I’m Not Over”
4. Thievery Corporation “Shadows of Ourselves”
5. VV Brown “Back in Time”
6. Sofi Bonde “Fallout”
7. Glass Pear “Wild Place”
8. Matt Nathanson “All We Are”
9. The Submarines “Brightest Hour (Morgan Page Remix)”
10. Viva Voce “Believer”

EPISODE 5 “You’re Undead to Me”
1. Imogen Heap “Wait It Out”
2. S.O.Stereo “When a Heart Breaks”
3. Howie Day “Be There”
4. 3OH!3 “Don’t Trust Me”
5. Gabrielle Cilmi “Save the Lies”
6. Anjulie “Boom”
7. Mads Langer “Beauty of the Dark”

EPISODE 6 “Lost Girls”
1. A Fine Frenzy “Stood Up”
2. Editors “Weight of the World”
3. The Temper Trap “Fader”
4. Anberlin “Enjoy the Silence”
5. Green Day “21 Guns”
6. Jason Walker “Down”

EPISODE 7 “Haunted”
1. Gary Go “Open Arms”
2. Final Flash “Fading Light” (Unavailable for download)
3. The Sounds “No One Sleeps When I’m Awake ”
4. White Lies “To Lose My Life”
5. The Longcut “Open Hearts”
6. The Dodos “Fables”
7. Bat For Lashes “Sleep Alone”
8. Sanders Bohlke “The Weight of Us”

EPISODE 8 “162 Candles”
1. The Birthday Massacre “Happy Birthday”
2. Pete Yorn “Thinking Of You”
3. Tiesto feat. Tegan & Sara “Feel It In My Bones”
4. Tiesto feat. CC Sheffield “Escape Me”
5. Telekinesis “Tokyo”
6. Mike Sheridan and Mads Langer “Too Close”
7. Fauxliage “All The World”
8. The Black Box Revelation “Love In Your Head”
9. Switchfoot “Yet”

EPISODE 9 “History Repeating”
1. Echo & The Bunnymen – “Think I Need It Too”
2. Pablo Sebastian – “Lies”
3. Idlewild – “Post Electric”
4. The Bravery – “The Spectator”
5. Great Northern – “Houses”
6. Barcelona – “Come Back When You Can”

EPISODE 10 “The Turning Point“
1. Five For Fighting – “Chances”
2. Telekinesis! – “Coast of Carolina”
3. The Features – “Off Track”
4. Plumb – “Cut”
5. Tyrone Wells – “This is Beautiful”

EPISODE 11 “Bloodlines”
1. Florence + The Machine – “Cosmic Love”
2. Editors – “An End Has A Start”
3. The Dandelions – “On A Mission”
4. Black Mustang – “Between the Devil and the Deep Blue Sea”
5. The Black Hollies – “Can’t Stop These Tears (From Falling)”
6. Hope Sandoval and the Warm Inventions – “Trouble”
7. The Steps – “Push” (Download from Amazon)
8. The Upsidedown – “Pepper Spray” (Donwload from Amazon)
9. The Stereotypes – “The Night Before” (Donwload from Amazon)
10. The Dig – “Look Inside”
11. Alex Band – “Only One”
12. Julian Casablancas – “Out Of The Blue”
13. The Bell – “Nothing Is Logical”

EPISODE 12 “Unpleasantville”
1. We Barbarians – There’s This There’s That (Download from iTunes)
2. Systems Officer – Pacer (Download from Amazon)
3. The Misfits – This Magic Moment
4. Rogue Wave – Everyday (Download from Amazon)
5. Jef Scot – Dreams Are For The Lucky (Unavailable for download)
6. U.S. Royalty – Keep It Cool (Bo Flex Remix) (Download from Amazon)
7. The Misfits – Runaway
8. Autovaughn – Everybody
9. Jacko Marcellino – Slow Dance (listen on YouTube)
10. The Misfits – Great Balls Of Fire
11. The Raveonettes – My Boyfriend’s Back
12. St. Leonards – Now That We’ve Grown (Download from Amazon)
13. Oranger – Mr. Sandman


EPISODE 13 “Children of the Damned”
1. Kate Earl – “When You’re Ready”
2. Surfer Blood – “Floating Vibes” (Download from Amazon)
3. Elefant – “Goodbye” (Listen on YouTube)
4. Experimental Aircraft – “Stellar” (Download from Amazon)

EPISODE 14 “Fool Me Once”
1. Oh Mercy – Can’t Fight It
2. Earlimart – “Before It Gets Better” (Download from Amazon)
3. The Soft Pack – “Answer To Yourself” (Free download from Amazon)
4. Tokyo Police Club – “In a Cave”
5. U.S. Royalty – “Every Summer” ( Download from Amazon)
6. The Steps – Out Tonight (Unavailable for Download)
7. Black Rebel Motorcycle Club – “All You Do Is Talk”
8. Leona Lewis – “Run”
Club – “All You Do Is Talk”

EPISODE 15 “A Few Good Men”
1. Jet – “Black Hearts (On Fire)”
2. The Alternate Routes – “Time Is A Runaway”
3. Sound Team – “Your Eyes Are Liars” (Download from Amazon)
4. Above The Golden State – “Real You”
5. Sweet Thing – “Winter Night”
6. Free Energy – “Something In Common”
7. Sounds Under Radio – “Portrait Of A Summer Thief”

EPISODE 16 “There Goes the Neighborhood”
1. Keane – “Better Than This”
2. In-Flight Safety – “CloudHead”
3. Tegan & Sara – “The Ocean” (Download from Amazon)
4. Marianas Trench – “Cross My Heart”
5. The Constellations – “Perfect Day” (Live performance on YouTube)
6. In-Flight Safety – “Crash / Land”
7. Erin McCarley – “Lovesick Mistake”
8. Parachute – “The Mess I Made”

EPISODE 17 “Let the Right One In”
1. Class Actress – “Let Me Take You Out” (Download from Amazon)
2. The Morning Benders – “I Was Wrong”
3. The Silent League – “Resignation Studies” (Purchase on iTunes)
4. The Black Angels – “Young Men Dead”
5. Lights On – “Boy” (Download from Amazon)
6. Love Grenades – “Young Lovers (Sam Sparrow Mix)”
7. Systems Officer – “East” (Download from Amazon)
8. Black Rebel Motorcycle Club – “Conscience Killer”
9. Sounds Under Radio – “All You Wanted”

EPISODE 18 “Under Control”
1. Black Mustang – “You and I” (Download on iTunes)
2. The Golden Dogs – “Yeah!”
3. Phoenix – “1901
4. The Postelles – “White Night”
5. Katy Perry – “Use Your Love”
6. Paramore – “Brick By Boring Brick”
7. The Virgins – “Hey Hey Girl”
8. The Airborne Toxic Event – “Does This Mean You’re Moving On?”
9. The Morning After Girls – "To Be Your Loss” (Download on iTunes)


EPISODE 19 “Miss Mystic Falls”
1. Faber Drive- “Never Coming Down”
2. Johann Strauss Jr. – “On The Beautiful Blue Danube”
3. Vitamin String Quartet – “Yellow” (The String Quartet Tribute To Coldplay)
4. Vitamin String Quartet – “Clocks” (The String Quartet Tribute To Coldplay)
5. Luigi Boccherini – “Menuet Célèbre”
6. Within Temptation – “All I Need” (Elena and Damon dance scene)

EPISODE 20 “Blood Brothers”
1. Timbaland with One Republic – “Marchin On (Timbo Version)”
2. Little Boots – “Click”
3. Robert Skoro – “In Line” (Download on iTunes)
4. Jamie McDonald – “I’ll Be Thinking of You”
5. Aron Wright – “Song for the Waiting”
6. We The Kings – “We’ll Be A Dream”

EPISODE 21 “Isobel”
1. Vampire Weekend – “Giving Up The Gun”
2. Anya Marina – “All The Same To Me”
3. Neon Trees – “Our War”
4. Sounds Under Radio – “Sing”
5. Cage The Elephant – “Ain’t No Rest For The Wicked”
6. The Cribs – “We Share The Same Skies” (Download from Amazon)
7. Band Of Horses – “Laredo” (Download from Amazon)

EPISODE 22 “Founder's Day”
1. Ellie Goulding “Every Time You Go”
2. Sia “You’ve Changed” (Download from iTunes)
3. Lifehouse “It Is What It Is”
4. Anberlin “True Faith”
5. Stateless “Bloodstream” (TVD Mix)