|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 74
Members: 0
Total: 74
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
|
K, thanks for the help guys.
PS. Actually a guy on hackforums PM'ed me some table.column values :O So it's maybe possible |
|
|
|
|
Hi, so I'm stuck at some point with MS SQL Injection. I started with adding ' at the end as usual. Site didn't change. Next I changed: the ?id=1' to ?id=-1'
Some values dissapeared, so it's a good si ... |
|
|
|
|
MD5 - d24a098c10d7133409670e9e5882d45e:
c8e168c36cba946a5894428cc7ec9a87
= inzaghi
Thank you |
|
|
|
|
1ee1f5c86c66948ae6b19098e3f148d1
d24a098c10d7133409670e9e5882d45e
Thanks for any help.
~abs |
|
|
|
|
YARO_GM:86b952d3ac9bcede5a3177cdd19c21106244b74b
JASKO_GM:e2c6d3160927b97422993b25847250f0dab29232
NEIJI3_GM:c3f0344c790374cb19c2b7e0b49dd066e1428732
SHILA_GM:6f1d6e1f3feb928889faff29bde8d22a774c59 ... |
|
|
|
|
Well, you must find the right number of columns in the database 1st. So add union all select 1,2,3,4-- and so on until the error dissapears. Then you should see some numbers on the web, that means you ... |
|
|
|
|
YARO_GM:86b952d3ac9bcede5a3177cdd19c21106244b74b
JASKO_GM:e2c6d3160927b97422993b25847250f0dab29232
NEIJI3_GM:c3f0344c790374cb19c2b7e0b49dd066e1428732
SHILA_GM:6f1d6e1f3feb928889faff29bde8d22a774c59 ... |
|
|
|
|
Some hashes:
4a735a70004d3e04
5bfdbf1607e066a8
7297e49d5a1f3a9c
05de49fd7ff2031f
3f5a3eaf6571b508
2c2166e3718bfba6
0ec9074160e15438
1956281c028a4660
6f414b761edde052
*2DB5B2CBAD8245A453FA2 ... |
|
|
|
|
I have the mysql_connect($host, $user, $password) and tried to connect to it with Navicat. First was root with some password, then I tried the other one I have. I always get 1045 - Access Denied error ... |
|
|
|
|
So yeah... I got MySQL password, I just have no idea whats the address to connect to the database via web or with program. Connected to that site's FTP, but I want the database. Do I have to know the ... |
|
|
|
|
*FA6C9C0D011FEB8F3A391D43D41B670DE195C034
*AFC8AC6B5FC28EB80B18C5763348FFF2BF6CA411
*E5CE66427FD5443749405392F61FABB8F93935B4
*7C24FE8099345BECCFC66F31CBC0CA3A04C10A11
Added some more |
|
|
|
|
root:*6320C7BFC2145E0B097BD80E1BD2C4BDC139FF37
Thanks for the help. |
|
|
Page 1 of 1 |
All times are GMT |
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|