OPFuckMohammad

OPFuckMohammad

Greetings from th3inf1d3l - we will post any vulns found in Middle East countries until these protests stop and until Obama stops trying to placate to the violent muslim masses by making the US weak

1) Additional SQLi in the government websites of Middle East Countries - stop burning our Flag. Most of these do not reveal anything of interest, a few admin logins with hashed passwords.

SITE                    PATH
psf.gov.pk              www.psf.gov.pk/staffdetail.php?id=10
commerce.gov.pk         www.commerce.gov.pk/ptmaview.php?ID=31
urbanunit.gov.pk        www.urbanunit.gov.pk/irisMaps/floods/bhu.asp?id=6
presidentofpakistan.gov www.presidentofpakistan.gov.pk/index.php?lang=en&opc=3&sel=3&id=763 (id)
pdma.gov.pk             www.pdma.gov.pk/newsArchive.php?ID=74
pakistanarmy.gov.pk     www.pakistanarmy.gov.pk/modules/shuhadascorner/embed_shuhada_detail.aspx?id=1668
ncsw.gov.pk             www.ncsw.gov.pk/news-details.php?id=35
mof.gov.ye              www.mof.gov.ye/pfmp/index.php?option=com_phocadownload&view=category&download=4:organizational-chart&id=1:documents&Itemid=242 (download)
mahneshan.gov.ir        www.mahneshan.gov.ir/index.php?option=com_content&view=section&id=2&Itemid=67 (id)
lhc.gov.pk              www.lhc.gov.pk/judges/jbiodata.php?id=187
governorsindh.gov.pk    www.governorsindh.gov.pk/latest-news/news.asp?id=2959
ajkpsc.gov.pk           www.ajkpsc.gov.pk/home/download.asp?id=91
tpportsudan.gov.sd      tpportsudan.gov.sd/chancesbody.asp?field=chance&id=7 (id)
dpea.moc.gov.ir         dpea.moc.gov.ir/Barnamerizi-quaries.asp?id=5&number=1 (id)

2) Others that have already been released or do not pertain to the govt per se.
afghanislamicpress.com did cough up a list of members, logins and their plaintext passwords but nothing was really gained by logging in under any of them. afghanislamicpress.com is interesting in that Qari Yosuf signed up for a membership account under the email zabiullahmujahid@gmail.com. Supposedly Zabiullah Mujahid and Qari Yosuf are Taliban spokesman but there is some speculation that they are in fact the same person.

iec.org                 www.iec.org.af/eng/content.php?id=4&cnid=53 (id)
goeic.gov               www.goeic.gov.eg/en/ex_newrecindex.asp?id=16
rrcc.af                 rrcc.af/index-4.php?id=13
afghanislmicpress.com   www.afghanislamicpress.com/site/home/detail.asp?iData=52922