Ne-am mutat pe xhackers.4umer.com
Ne-am mutat pe xhackers.4umer.com
|
Nou pe simpatie:
bruneta_mara
 | Femeie
24 ani
Ialomita
cauta Barbat
27 - 64 ani |
|
|
Ne-am mutat pe xhackers.4umer.comReguliInregistrareLoginPozeNu sunteti logat. Lista Forumurilor Pe Tematici
|
| #1 |
|
|
Buna X-HackersTeam , astazi am sa va prezint un scurt tutorial SQLi la servere`le private de Metin.
Deseori cand intrati pe un Metin , puteti observa cand dati pe Clasament puteti selecta un anumit player pt. a`i vedea datele (Nivel , Grad , Exp etc.)
Bun , un exemplu aici : http://m2substil.in/index.php?s=player&char=KoBbRa
Deci , acest link il bagam in Havij http://m2substil.in/index.php?s=player&char=KoBbRa si asteptam sa gaseasca date ... De cele mai multe ori gaseste "Player" , selectam Player si ne va aparea ID / PASSWORD / EMAIL ETC... Bun , selecta doar ID si PASS... Asteptam sa gaseasca conturi
IMPORTANT!!! Unele parole vor fi criptate (MD5) , unele vor fi decriptabile , iar altele fara speranta , doar daca exista anumite modalitati de a sparge o parola criptata...
Asa puteti face rost de conturi
RECOMAND SA FACTI SQL MANUAL!
_______________________________________
We are Anonymous!
We are legion!
Wait for us!
We X-HackersTeam!
We have the power!
We want respect!
X-HackersTeam is Anonymous
EXPECT US !
|
|
| |
|
| #2 |
|
|
nu merge siteul merge da nu gaseste data base
|
|
| |
|
| #3 |
|
|
meduza2010 a scris:
nu merge siteul merge da nu gaseste data base |
Nu merge la toate...
_______________________________________
We are Anonymous!
We are legion!
Wait for us!
We X-HackersTeam!
We have the power!
We want respect!
X-HackersTeam is Anonymous
EXPECT US !
|
|
| |
|
| #4 |
|
|
Uitati raportul...
Havij 1.15 Pro!
Analyzing http://m2substil.in/index.php?s=player&char=KoBbRa
Host IP: 31.170.160.160
Web Server: Apache
Powered-by: PHP/5.2.17
Keyword Found: 3353
I guess injection type is Integer?! If injection failed, retry with a manual keyword.
Can't find db server type! But maybe there be some chances! [-o<
Trying another method using keyword for finding columns count
Finding columns count(MySQL,MsSQL 2005): 10
Cracking hash: http://m2substil.in/index.php?s=player&char=KoBbRa
Findig columns count for MySQL failed! It seems that DB server is not MySQL
Cannot find column count!
Testing for MySQL error based injection method
MySQL error based injection method cant be used!
MsSQL time based injection method can't be used
MySQL time based injection method can't be used
It seems that input parameter is not effective! Check the following:
Are you sure input parameter really exist?!
Are you sure the input value 'KoBbRa' is valid?
Are you sure the 'GET' method is correct?
E normal sa faca asa ?:(
Am mai incercat pe mai multe metine , la toate imi facea la fel!
Help :(
|
|
| |
|
| #5 |
|
|
Samo a scris:
Uitati raportul...
Havij 1.15 Pro!
Analyzing http://m2substil.in/index.php?s=player&char=KoBbRa
Host IP: 31.170.160.160
Web Server: Apache
Powered-by: PHP/5.2.17
Keyword Found: 3353
I guess injection type is Integer?! If injection failed, retry with a manual keyword.
Can't find db server type! But maybe there be some chances! [-o<
Trying another method using keyword for finding columns count
Finding columns count(MySQL,MsSQL 2005): 10
Cracking hash: http://m2substil.in/index.php?s=player&char=KoBbRa
Findig columns count for MySQL failed! It seems that DB server is not MySQL
Cannot find column count!
Testing for MySQL error based injection method
MySQL error based injection method cant be used!
MsSQL time based injection method can't be used
MySQL time based injection method can't be used
It seems that input parameter is not effective! Check the following:
Are you sure input parameter really exist?!
Are you sure the input value 'KoBbRa' is valid?
Are you sure the 'GET' method is correct?
E normal sa faca asa ?:(
Am mai incercat pe mai multe metine , la toate imi facea la fel!
Help :( |
Crezi ca merge la toate?
Trebuie sa ai bulan!
Nu sunt multe servere vulnerabile, dar sunt server care sunt vulnerabile, eu am gasit unul la propriu!
_______________________________________
We are Anonymous!
We are legion!
Wait for us!
We X-HackersTeam!
We have the power!
We want respect!
X-HackersTeam is Anonymous
EXPECT US !
|
|
| |
|
| #6 |
|
|
Aaaaaa....ma gandeam ca e de la mine :zzz:
Multumesc mult.
|
|
| |
|
| #7 |
|
|
Poti sa imi arati un ex pls sau sa-imi spui ce sa scriu la manual Keyword.
|
|
| |
|
