Showing posts with label XSS. Show all posts
Showing posts with label XSS. Show all posts
Dec 18, 2011

0
SQL Injection Tools

Sqlninja ( http://sqlninja.sourceforge.net/ )
Supports only Microsoft SQL Server.

sqlmap ( http://sqlmap.sourceforge.net/ )
Full support: MySQL, Oracle, PostgreSQL and Microsoft SQL Server.
Partial support for: Microsoft Access, DB2, Informix, Sybase and Interbase.

Pangolin 3.2.3 free edition ( http://down3.nosec.org/pangolin_free_edition_3.2.3.1105.zip )
Your web applications using Access,DB2,Informix,Microsoft SQL Server 2000,Microsoft SQL Server 2005,Microsoft SQL Server 2008,MySQL,Oracle,PostgreSQL,Sqlite3,Sybase.
Features: Auto-analyzing keyword, HTTPS support, Pre-Login, Bypass firewall setting, Injection Digger, Data dumper, etc.

Havij v1.14 Advanced SQL Injection – free version ( http://www.itsecteam.com/files/havij/Havij1.14Free.rar )
SQL Power Injector ( http://www.sqlpowerinjector.com/ )
Supports: Microsoft SQL Server, Oracle, MySQL, Sybase / Adaptive Server and DB2.

SQLIer 0.8.2b  ( http://bcable.net/releases.php?sqlier )
SQLIer takes an SQL Injection vulnerable URL and attempts to determine all the necessary information to build and exploit an SQL Injection hole by itself, requiring no user interaction at all (unless it can’t guess the table/field names correctly). By doing so, SQLIer can build a UNION SELECT query designed to brute force passwords out of the database. This script also does not use quotes in the exploit to operate, meaning it will work for a wider range of sites.

bsqlbf-v2 ( http://code.google.com/p/bsqlbf-v2/ )
Supports: MySQL, Oracle, PostgreSQL and Microsoft SQL Server.

Marathon Tool ( http://www.codeplex.com/marathontool )
Supports: MySQL, Oracle, Microsoft SQL Server and Microsoft Access.

Absinthe ( http://www.0×90.org/…inthe/index.php )
Supports: Microsoft SQL Server, MSDE, Oracle, and Postgres.

pysqlin ( http://code.google.c…source/checkout )
Implemented: Oracle, MySQL and Microsoft SQL Server.

BSQL Hacker ( http://labs.portcull…on/bsql-hacker/ )
Implemented: Oracle and Microsoft SQL Server.
Available experimental support for MySQL.

SQID ( http://sqid.rubyforge.org/#download)
SQL Injection digger (SQLID) is a command line program that looks for SQL injections and common errors in websites. It can perform the follwing operations: look for SQL injection in a web pages and test submit forms for possible SQL injection vulnerabilities

WITOOL ( http://witool.sourceforge.nSQL, Oracle, Microsoft SQL Server and Microsoft Access.et/ )
Implemented: Oracle and Microsoft SQL Server.

sqlus ( http://sqlsus.sourceforge.net/ )
Supports only MySQL.

DarkMySQLi16.py ( http://vmw4r3.blogspot.com/ )
Supports only MySQL.

mySQLenum ( http://sourceforge.n…ects/mysqlenum/ )
Supports only MySQL.

PRIAMOS ( http://www.priamos-project.com/ )
Supports only Microsoft SQL Server.

FJ-Injector Framework ( http://sourceforge.net/projects/injection-fwk/files/)
FG-Injector is a free open source framework designed to help find SQL injection vulnerabilities in web applications. It includes a proxy feature for intercepting and modifying HTTP requests, and an interface for automating SQL injection exploitation

SFX-SQLi ( http://www.kachakil.com/ )
Supports only Microsoft SQL Server.

DarkMySQL ( http://vmw4r3.blogspot.com/ )
Supports only MySQL.

ProMSiD Premium ( http://forum.web-def…02&postcount=15 )
Supports only MySQL.

Acunetix WVS  ( http://www.acunetix.com/vulnerability-scanner/download.htm)
Automatically checks your web applications for SQL Injection, XSS & other web vulnerabilities.

yInjector ( http://y-osirys.com/…-softwares/id10 )
Supports only MySQL.

Bobcat SQL Injection Tool ( http://www.northern-…pub/bobcat.html )

Safe3 Sql Injector ( http://sourceforge.net/projects/safe3si/)
Supports: http, https website, Basic, Digest, NTLM http authentications,GET, Post, Cookie sql injection.
Databases: MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, SQLite, Firebird, Sybase and SAP MaxDB database management systems.
SQL injection techniques: blind, error-based, UNION query and force guess.

ExploitMyUnion ( http://sourceforge.n…exploitmyunion/ )
Laudanum ( http://sourceforge.n…jects/laudanum/ )

Hexjector ( http://sourceforge.n…ects/hexjector/ )

WebRaider ( http://code.google.com/p/webraider/ )
Supports only Microsoft SQL Server.  Designed to execute commands on the server (reverse shell).

Toolza 1.0 ( http://bug-track.ru/prog/toolza1.0.rar )
SQL injection supported DB: Mysql, Mssql, Sybase, Postgresql, Access, Oracle, Firebird / Interbase

SCRT Mini-MySqlat0r (http://www.scrt.ch/attaque/telechargements/mini-mysqlat0r)
A multi-platform application used to audit web sites in order to discover and exploit SQL injection vulnerabilities. It is written in Java and is used through a user-friendly GUI that contains three distinct modules” (Crawler, Tester & Exploiter).

post on comments other sql injection tools that u know 
Posted by FlashcRew at 23:10
Labels: , , , , , , ,
Sep 4, 2011

0
XSSploit

XSSploit is a multi-platform Cross-Site Scripting scanner and exploiter written in Python. It has been developed to help discovery and exploitation of XSS vulnerabilities in penetration testing missions.
When used against a website, XSSploit first crawls the whole website and identifies encountered forms. It then analyses these forms to automatically detect existing XSS vulnerabilities as well as their main characteristics.
XSSploit
The vulnerabilities that have been discovered can then be exploited using the exploit generation engine of XSSploit. This extensible functionality allows choosing the desired exploit behaviour and automatically generates the corresponding HTML link embedding the exploit payload.
A video is available to explain how to use of XSSploit.

Requirements

The following elements are required by XSSploit:

Downloads

version 0.5
Multi-platform Xssploit-0.5.tar.gz


Posted by FlashcRew at 17:08
Labels: ,

0
Webshag

Webshag is a multi-threaded, multi-platform web server audit tool. Written in Python, it gathers commonly useful functionalities for web server auditing like website crawling, URL scanning or file fuzzing.
Webshag can be used to scan a web server in HTTP or HTTPS, through a proxy and using HTTP authentication (Basic and Digest). In addition to that it proposes innovative IDS evasion functionalities aimed at making correlation between request more complicated (e.g. use a different random per request HTTP proxy server).
WebShag

It also provides innovative functionalities like the capability of retrieving the list of domain names hosted on a target machine and file fuzzing using dynamically generated filenames (in addition to common list-based fuzzing).

Webshag URL scanner and file fuzzer are aimed at reducing the number of false positives and thus producing cleaner result sets. For this purpose, webshag implements a web page fingerprinting mechanism resistant to content changes. This fingerprinting mechanism is then used in a false positive removal algorithm specially aimed at dealing with "soft 404" server responses.
Webshag provides a full featured and intuitive graphical user interface as well as a text-based command line interface and is available for Linux and Windows platforms

Requirements

To be fully functional, webshag requires the following elements:
  • Python 2.5/2.6 (NOT compatible with Python 3.0)
  • wxPython 2.8.9.0 or greater GUI toolkit
  • Nmap port scanner (for port scanning module only)
  • A valid Live Search AppID (for domain information module only)
Note: to use installer on Windows Vista, please refer to user manual.

Downloads

version 1.10
Linux (tarball) ws110.tar.gz
Windows (ZIP archive) ws110.zip
Windows (installer) ws110_win32installer.zip
User manual (EN) ws110_manual.pdf

Posted by FlashcRew at 17:06
Labels: , , , , , , ,

0
Mini MySqlat0r

Mini MySqlat0r is a multi-platform application used to audit web sites in order to discover and exploit SQL injection vulnerabilities. It is written in Java and is used through a user-friendly GUI that contains three distinct modules.

The Crawler modules allows the user to view the web site structure and gather all tamperable parameters. These parameters are then sent to the Tester module that tests all parameters for SQL injection vulnerabilities. If any are found, they are then sent to the Exploiter module that can exploit the injections to gather data from the database. Mini MySQLat0r

Mini MySqlat0r can be used on any platform running the Java

Download Tool

Download Manual
Posted by FlashcRew at 17:02
Labels: , , , , ,
Aug 29, 2011

0
PhpBB2 Module "Custom Mass PM" Cross Site Scripting Vulnerability

Here also it's an another bug on one of most used Online boards system. Bug it's founded by my friend silic0n


-------------------------------------------------------------------------------
0                             | |              | |                      | |  TM
1   _______  _ __   ___ ______| |__   __ _  ___| | _____ _ __ _ __   ___| |_
0  |_  / _ \| '_ \ / _ \______| '_ \ / _` |/ __| |/ / _ \ '__| '_ \ / _ \ __|
1   / / (_) | | | |  __/      | | | | (_| | (__|   <  __/ | _| | | |  __/ |_
0  /___\___/|_| |_|\___|      |_| |_|\__,_|\___|_|\_\___|_|(_)_| |_|\___|\__|
1                         0xPrivate 0xSecurity 0xTeam
0       ++++++++++++++++++++++++++++++++++++++++++++++++++++
1                      A Placec Of 0days  
------------------------------------------------------------------------------

^ Exploit title: PhpBB2 Module "Custom Mass PM" Cross Site Scripting Vulnerability
^ Author     : Silic0n (science_media017[At]yahoo.com)
^ MOD Title: Custom mass PM 
^ MOD Description: Add mass PM functionnality to group members (or all forums members) for   authorized users. Add the   possibility for all users to send ordinary PM to multiple users   (usernames separated by a semi-colon)
^ MOD Version: 1.4.7 
^ Exploit Release: 8/27/2011
^ Vulnearble script: privmsg.php
 
 
Read Full Exploit: Inj3ct0r 
 
Thanks to my bro Silic0n for this sharing :) And also to ZH-Team <3
Posted by FlashcRew at 21:52
Labels: ,

0
WordPress Public Bugs List

Hi to all WP Lovers ... Hope u don't have make a mistake with HP :p
Here are most of vulnerable public wordpress plugins .. so check first inside before u install any ...
 
Link here : ExploitDb
Posted by FlashcRew at 21:46
Labels: , , , , ,
Jul 5, 2011

0
vBulletin 4 CMS Recent Articles widget XSS Vulnerability 

#~ Title         : vBulletin 4 CMS Recent Articles widget XSS Vulnerability  
#~ Software      : http://www.vbulletin.com
#~ Tested on     : version 4.1.1
#~ Date          : 30/06/2011
#~ Discovered by : X-h4ck
#~ Site          : http://www.pirate.al  , http://theflashcrew.blogspot.com/ 
#~ Email         : mem001@live.com 
#~ Greetz        : Wulns~ - IllyrianWarrior - Danzel - Ace - M4yh3m - Saldeath - bi0 - Slimshaddy - d3trimentaL - Lekosta - Pretorian - CroSs - Rigon
Exploit Link










Posted by
FlashcRew


at
22:58


























Labels:
,
,
,
















          

        

        

      

Oct 29, 2010


        

      










0


Hexjector 1.0.7.4











Hexjector is an Opensource,Cross Platform PHP script to automate Site Pentest for SQL Injection Vulnerabilties.




Features:
  • 1.Check for SQL Injection Vulnerablities.
    • 

  • 2.Pentest SQL Injection Vulnerablities.
    • 

  • 3.Web Application Firewall Detector.
    • 

  • 4.Scan For Admin Page
    • 

  • 5.Manual Dump Function
    • 

  • 6.Browser
    • 

  • 7.SQL Injection Type Detection
    • 

  • 8.Search For Vulnerable Sites by using Google Dork
    • 

  • 9.MD5 Cracker
    • 

Download










Posted by
FlashcRew


at
23:24


























Labels:
,
,
,
,
















          

        

        

      

Oct 20, 2010


        

      










0


DarkJumper v5.7











Features:
  • scan sql injection, rfi, lfi, blind sql, rce injection
    • 

  • autosql injector
    • 

  • proxy support
    • 

  • verbocity added
    • 

  • autoftp bruteforcer
    • 

  • IP or Proxy checker and GeoIP
    • 



http://sourceforge.net/projects/darkjumper/files/darkjumper.v5.7.tar.gz/download 










Posted by
FlashcRew


at
12:12


























Labels:
,
,
,
,
,
,
,
















          

        

        

      

Oct 19, 2010


        

      










0


CoLLeCTioN Off g00gl3 d0rk's











CoLLeCTioN Off g00gl3 d0rk's  By Danzel



Can use with .asp , .cfm , etc. ..


Code:
By intext:  inurl:".php?id=" intext:"View cart" inurl:".php?id=" intext:"Buy Now" inurl:".php?id=" intext:"add to cart" inurl:".php?id=" intext:"shopping" inurl:".php?id=" intext:"boutique" inurl:".php?id=" intext:"/store/" inurl:".php?id=" intext:"/shop/" inurl:".php?id=" intext:"toys"  inurl:".php?cid=" inurl:".php?cid=" intext:"shopping" inurl:".php?cid=" intext:"add to cart" inurl:".php?cid=" intext:"Buy Now" inurl:".php?cid=" intext:"View cart" inurl:".php?cid=" intext:"boutique" inurl:".php?cid=" intext:"/store/" inurl:".php?cid=" intext:"/shop/" inurl:".php?cid=" intext:"Toys"  inurl:".php?cat=" inurl:".php?cat=" intext:"shopping" inurl:".php?cat=" intext:"add to cart" inurl:".php?cat=" intext:"Buy Now" inurl:".php?cat=" intext:"View cart" inurl:".php?cat=" intext:"boutique" inurl:".php?cat=" intext:"/store/" inurl:".php?cat=" intext:"/shop/" inurl:".php?cat=" intext:"Toys"  inurl:".php?catid=" inurl:".php?catid=" intext:"View cart" inurl:".php?catid=" intext:"Buy Now" inurl:".php?catid=" intext:"add to cart" inurl:".php?catid=" intext:"shopping" inurl:".php?catid=" intext:"boutique" inurl:".php?catid=" intext:"/store/" inurl:".php?catid=" intext:"/shop/" inurl:".php?catid=" intext:"Toys"  inurl:".php?categoryid=" inurl:".php?categoryid=" intext:"View cart" inurl:".php?categoryid=" intext:"Buy Now" inurl:".php?categoryid=" intext:"add to cart" inurl:".php?categoryid=" intext:"shopping" inurl:".php?categoryid=" intext:"boutique" inurl:".php?categoryid=" intext:"/store/" inurl:".php?categoryid=" intext:"/shop/" inurl:".php?categoryid=" intext:"Toys"  inurl:".php?pid=" inurl:".php?pid=" intext:"shopping" inurl:".php?pid=" intext:"add to cart" inurl:".php?pid=" intext:"Buy Now" inurl:".php?pid=" intext:"View cart" inurl:".php?pid=" intext:"boutique" inurl:".php?pid=" intext:"/store/" inurl:".php?pid=" intext:"/shop/" inurl:".php?pid=" intext:"toys"  inurl:".php?prodid= inurl:".php?prodid=" intext:"shopping" inurl:".php?prodid=" intext:"add to cart" inurl:".php?prodid=" intext:"Buy Now" inurl:".php?prodid=" intext:"View cart" inurl:".php?prodid=" intext:"boutique" inurl:".php?prodid=" intext:"/store/" inurl:".php?prodid=" intext:"/shop/" inurl:".php?prodid=" intext:"toys"  inurl:".php?productid=' inurl:".php?productid=" intext:"shopping" inurl:".php?productid=" intext:"add to cart" inurl:".php?productid=" intext:"Buy Now" inurl:".php?productid=" intext:"View cart" inurl:".php?productid=" intext:"boutique" inurl:".php?productid=" intext:"/store/" inurl:".php?productid=" intext:"/shop/" inurl:".php?productid=" intext:"Toys"  inurl:".php?product=" inurl:".php?product=" intext:"shopping" inurl:".php?product=" intext:"add to cart" inurl:".php?product=" intext:"Buy Now" inurl:".php?product=" intext:"View cart" inurl:".php?product=" intext:"boutique" inurl:".php?product=" intext:"/store/" inurl:".php?product=" intext:"/shop/" inurl:".php?product=" intext:"toys" inurl:".php?product=" intext:"DVD"  inurl:".php?products=" inurl:".php?products=" intext:"shopping" inurl:".php?products=" intext:"add to cart" inurl:".php?products=" intext:"Buy Now" inurl:".php?products=" intext:"View cart" inurl:".php?products=" intext:"boutique" inurl:".php?products=" intext:"/store/" inurl:".php?products=" intext:"/shop/" inurl:".php?products=" intext:"toys" inurl:".php?products=" intext:"DVD"  inurl:".php?proid=" inurl:".php?proid=" intext:"shopping" inurl:".php?proid=" intext:"add to cart" inurl:".php?proid=" intext:"Buy Now" inurl:".php?proid=" intext:"View cart" inurl:".php?proid=" intext:"boutique" inurl:".php?proid=" intext:"/store/" inurl:".php?proid=" intext:"/shop/" inurl:".php?proid=" intext:"toys"  inurl:".php?shopid=" inurl:".php?shopid=" intext:"shopping" inurl:".php?shopid=" intext:"add to cart" inurl:".php?shopid=" intext:"Buy Now" inurl:".php?shopid=" intext:"View cart" inurl:".php?shopid=" intext:"boutique" inurl:".php?shopid=" intext:"/store/" inurl:".php?shopid=" intext:"/shop/" inurl:".php?shopid=" intext:"Toys"  inurl:".php?itemid=" inurl:".php?itemid=" intext:"shopping" inurl:".php?itemid=" intext:"add to cart" inurl:".php?itemid=" intext:"Buy Now" inurl:".php?itemid=" intext:"View cart" inurl:".php?itemid=" intext:"boutique" inurl:".php?itemid=" intext:"/shop/" inurl:".php?itemid=" intext:"/store/" inurl:".php?itemid=" intext:"Toys"  inurl:".php?orderid=" inurl:".php?orderid=" intext:"shopping" inurl:".php?orderid=" intext:"add to cart" inurl:".php?orderid=" intext:"Buy Now" inurl:".php?orderid=" intext:"View cart" inurl:".php?orderid=" intext:"boutique" inurl:".php?orderid=" intext:"/shop/" inurl:".php?orderid=" intext:"/store/" inurl:".php?orderid=" intext:"Toys"   inurl:".php?catalogId=" inurl:".php?catalogId=" intext:"shopping" inurl:".php?catalogId=" intext:"add to cart" inurl:".php?catalogId=" intext:"Buy Now" inurl:".php?catalogId=" intext:"View cart" inurl:".php?catalogId=" intext:"boutique" inurl:".php?catalogId=" intext:"/shop/" inurl:".php?catalogId=" intext:"/store/" inurl:".php?catalogId=" intext:"Toys"  inurl:".php?aid=" inurl:".php?aid=" intext:"shopping" inurl:".php?aid=" intext:"add to cart" inurl:".php?aid=" intext:"Buy Now" inurl:".php?aid=" intext:"View cart" inurl:".php?aid=" intext:"boutique" inurl:".php?aid=" intext:"/shop/" inurl:".php?aid=" intext:"/store/" inurl:".php?aid=" intext:"toys"  inurl:".php?artid=" inurl:".php?artid=" intext:"shopping" inurl:".php?artid=" intext:"add to cart" inurl:".php?artid=" intext:"Buy Now" inurl:".php?artid=" intext:"View cart" inurl:".php?artid=" intext:"boutique" inurl:".php?artid=" intext:"/shop/" inurl:".php?artid=" intext:"/store/" inurl:".php?artid=" intext:"toys"   inurl:".php?articleid=" inurl:".php?articleid=" intext:"shopping" inurl:".php?articleid=" intext:"add to cart" inurl:".php?articleid=" intext:"Buy Now" inurl:".php?articleid=" intext:"View cart" inurl:".php?articleid=" intext:"boutique" inurl:".php?articleid=" intext:"/shop/" inurl:".php?articleid=" intext:"/store/" inurl:".php?articleid=" intext:"toys"  ### By State  inurl:".php?id=" site:.uk inurl:".php?id=" site:.au inurl:".php?id=" site:.de inurl:".php?id=" site:.at inurl:".php?id=" site:.ca inurl:".php?id=" site:.eu inurl:".php?id=" site:.us inurl:".php?id=" site:.fr  inurl:".php?cid=" site:.uk inurl:".php?cid=" site:.au inurl:".php?cid=" site:.de inurl:".php?cid=" site:.at inurl:".php?cid=" site:.ca inurl:".php?cid=" site:.eu inurl:".php?cid=" site:.us inurl:".php?cid=" site:.fr  inurl:".php?catid=" site:.uk inurl:".php?catid=" site:.au inurl:".php?catid=" site:.de inurl:".php?catid=" site:.at inurl:".php?catid=" site:.ca inurl:".php?catid=" site:.eu inurl:".php?catid=" site:.us inurl:".php?catid=" site:.fr  inurl:".php?categoryid=" site:.uk inurl:".php?categoryid=" site:.au inurl:".php?categoryid=" site:.de inurl:".php?categoryid=" site:.at inurl:".php?categoryid=" site:.ca inurl:".php?categoryid=" site:.eu inurl:".php?categoryid=" site:.us inurl:".php?categoryid=" site:.fr  inurl:".php?pid=" site:.uk inurl:".php?pid=" site:.au inurl:".php?pid=" site:.de inurl:".php?pid=" site:.at inurl:".php?pid=" site:.ca inurl:".php?pid=" site:.eu inurl:".php?pid=" site:.us inurl:".php?pid=" site:.fr  inurl:".php?prodid=" site:.uk inurl:".php?prodid=" site:.au inurl:".php?prodid=" site:.de inurl:".php?prodid=" site:.at inurl:".php?prodid=" site:.ca inurl:".php?prodid=" site:.eu inurl:".php?prodid=" site:.us inurl:".php?prodid=" site:.fr  inurl:".php?productid=" site:.uk inurl:".php?productid=" site:.au inurl:".php?productid=" site:.de inurl:".php?productid=" site:.at inurl:".php?productid=" site:.ca inurl:".php?productid=" site:.eu inurl:".php?productid=" site:.us inurl:".php?productid=" site:.fr  inurl:".php?shopid=" site:.uk inurl:".php?shopid=" site:.ca inurl:".php?shopid=" site:.at inurl:".php?shopid=" site:.au inurl:".php?shopid=" site:.de inurl:".php?shopid=" site:.eu inurl:".php?shopid=" site:.us inurl:".php?shopid=" site:.fr  inurl:".php?itemid=" site:.uk inurl:".php?itemid=" site:.ca inurl:".php?itemid=" site:.at inurl:".php?itemid=" site:.au inurl:".php?itemid=" site:.de inurl:".php?itemid=" site:.eu inurl:".php?itemid=" site:.us inurl:".php?itemid=" site:.fr  inurl:".php?orderid=" site:.uk inurl:".php?orderid=" site:.ca inurl:".php?orderid=" site:.at inurl:".php?orderid=" site:.au inurl:".php?orderid=" site:.de inurl:".php?orderid=" site:.eu inurl:".php?orderid=" site:.us inurl:".php?orderid=" site:.fr  inurl:".php?catalogId=" site:.uk inurl:".php?catalogId=" site:.ca inurl:".php?catalogId=" site:.at inurl:".php?catalogId=" site:.au inurl:".php?catalogId=" site:.de inurl:".php?catalogId=" site:.eu inurl:".php?catalogId=" site:.us inurl:".php?catalogId=" site:.fr  inurl:".php?aid=" site:.uk inurl:".php?aid=" site:.ca inurl:".php?aid=" site:.at inurl:".php?aid=" site:.au inurl:".php?aid=" site:.de inurl:".php?aid=" site:.eu inurl:".php?aid=" site:.us inurl:".php?aid=" site:.fr  inurl:".php?artid=" site:.uk inurl:".php?artid=" site:.ca inurl:".php?artid=" site:.at inurl:".php?artid=" site:.au inurl:".php?artid=" site:.de inurl:".php?artid=" site:.eu inurl:".php?artid=" site:.us inurl:".php?artid=" site:.fr  inurl:".php?articleid=" site:.uk inurl:".php?articleid=" site:.ca inurl:".php?articleid=" site:.at inurl:".php?articleid=" site:.au inurl:".php?articleid=" site:.de inurl:".php?articleid=" site:.eu inurl:".php?articleid=" site:.us inurl:".php?articleid=" site:.fr  ##############################
__________________










Posted by
FlashcRew


at
18:38


























Labels:
,
,
















      

    










Subscribe to:
Posts (Atom)












 












FlashcRew Blog