Loading....
- Apocalipsa dupa Nemessis
- Cand dorinta de afirmare depaseste granitele bunului simt – PaxNwo un leecher ordinar
- Cum sa iti protejezi adresa e-mail si datele confidentiale din aceasta
- Mi s-a furat id-ul de messenger/adresa e-mail. Ce sa fac?
- Experiment social II – andimoisescu.ro
- Pentru posteritate
- In curand…
- “Hot” de id-uri messenger
- Chiar ca sunteti retardati
- Ce nu se invata la scoala – Vendetta (6)
Loading....
- Apocalipsa dupa Nemessis in (103 Visits)
- Ce servicii de mail folositi? in (42 Visits)
- This is the end in (28 Visits)
- Hackersblog.org is now blog.rstcenter.com in (27 Visits)
- Short news in (22 Visits)
- La multi ani România, la multi ani românilor in (22 Visits)
- Azi este ziua userilor hackersblog.org in (15 Visits)
- Raportare vulnerabilitati in (14 Visits)
- Inca o pierdere de timp in (14 Visits)
- Update in (11 Visits)
- Mi s-a furat id-ul de messenger/adresa e-mail. Ce sa fac? in (313 Visits)
- Hi5.com coders read this in (37 Visits)
- SMS scam (1) in (28 Visits)
- Phishing Bancpost in (12 Visits)
- Dezinformare sau proasta informare? in (10 Visits)
- Si tentativele de phishing pot fi amuzante in (9 Visits)
- Phishing Raiffeisen cu atasament html in (6 Visits)
- Cum sa iti protejezi adresa e-mail si datele confidentiale din aceasta in (95 Visits)
- [Utilitare] Suna gratis de pe internet sau de pe iPhone in (54 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/Hi5 (4) in (49 Visits)
- Despre CSRF, hi5.com, cum sa trisezi la concursuri s.a.m.d. in (42 Visits)
- Ce nu se invata la scoala - (D)DOS (5) in (34 Visits)
- Virusi in clipuri video [how to] in (32 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/mail (2) in (29 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam (1) in (24 Visits)
- Yahoo! redirects - a big issue (with video) in (14 Visits)
- Ca musca in... in (12 Visits)
- usa.kaspersky.com hacked ... full database acces , sql injection in (172 Visits)
- Simpatie.ro, matrimoniale3x.ro, apetisant.ro, deliciu.ro , etc Sql injection in (112 Visits)
- Yahoo! epic fail - permanent xss unleashed in (90 Visits)
- Telegraph.co.uk hacked, sql injection in (66 Visits)
- RedTube.com ... The Free Sex Video Community in (59 Visits)
- Kaspersky Thailand hacked by TinKode in (48 Visits)
- Conquiztador Hacked Again in (48 Visits)
- Telegraph.co.uk hacked - when will they learn? in (43 Visits)
- Simona Sensual si profilul ei de hi5 in (40 Visits)
- F-Secure.com - SQL Injection + Cross Site Scripting in (39 Visits)
- Wannabe Hackers [2] - cum sa faci un virus by sppy_hacker in (33 Visits)
- Wannabe Hackers [1] - Cum sa hack-uiesti RapidShare-ul in (29 Visits)
- Digital Photocopiers Loaded With Secrets in (26 Visits)
- Hacker Uses XSS and Google Street View Data to Determine Physical Location in (16 Visits)
- Oldies but goodies - Freedom Downtime - The Story of Kevin Mitnick in (11 Visits)
- OWASP Phishing demo in (9 Visits)
- Christopher "moot" Poole: The case for anonymity online in (9 Visits)
- [Video] The History Of Hacking in (8 Visits)
- Hope 2603 – Kevin Mitnick - Life a Computer Hacker – Revealed in (8 Visits)
- Owasp5005 Part1 - New zero-day browser exploits - ClickJacking in (8 Visits)
- Se poate sparge parola de Yahoo? in (344 Visits)
- phpBB.ro hacked in (105 Visits)
- Experiment social in (70 Visits)
- Cand dorinta de afirmare depaseste granitele bunului simt - PaxNwo un leecher ordinar in (61 Visits)
- Oare cum e pana la urma? in (57 Visits)
- "Hot" de id-uri messenger in (52 Visits)
- Concurs fara premii in (51 Visits)
- Forumul Andreei Balan spart in (47 Visits)
- Ce nu se invata la scoala – Vendetta (6) in (45 Visits)
- Experiment social II - andimoisescu.ro in (44 Visits)
Posted on November 27th, 2008
Un site cu trafic maricel. “Preturi online din Romania.Expertul tau in cumparaturi” –logo-ul siteului. Ce sa zic? Misto expert care, fiind vulnerabil la sql injection tine la vedere toate datele personale a celor inregistrati: nume, prenume, cnp, serie si nr buletin, adresa,numar tel, cat si datele de logare.
November 27th, 2008 at 12:26 pm
Apoi or fi experti in cumparaturi, dar e greu sa ai si experti in programare in acelasi timp sub acelasi acoperish.
Nu de alta, dar sunt putini de astia ramasi prin Romania, in schimb e plin de unii care se cred experti. O mica diferenta
November 27th, 2008 at 4:04 pm
Una din marile dezavantaje ale meseriei de webdesigner este ca si aici ca si in fotbal sau politica toata lumea se pricepe.
De, daca platesti prost programatorii raman doar “expertii”
November 28th, 2008 at 2:33 am
Comentarii despre acest subiect la http://blog.selrys.ro/blog/index.php?blog=1&cat=15
December 1st, 2008 at 11:30 pm
[...] Am primit un mail dragut, in care eram informat cum ca price.ro e foarte usor de cracanat si bla bla bla… La 3 zile dupa, primesc mail ca mi-au schimbat baietii parola Treaba si mai interesanta este, ca sa mor daca stiu cand mi-am facut cont la ei … Pff… viata e greu, si uneori e si dificil … Hai sa te ajut, da click aici nu te chinuii sa scri linkul din poza. http://hackersblog.org/2008/11/27/sql-injection-in-pricero/ [...]
December 3rd, 2008 at 1:30 am
parerea mea ca poza aceea putea fi usor manarita in photoshop, desi nu zic ca n-ar fi adevarata dar daca este e pacat ca cei de la price n-au auzit de typecasting sau de string escaping
, in caz ca nu le recomand http://www.security.ase.md/publ/ro/pubro32/
December 3rd, 2008 at 3:17 pm
escape-ul nu te ajuta cu nimic in cazul de fata, ci doar type casting-ul in integer. Si nu, nu e modificata prin photoshop poza, verifica intregul site-ul hackersblog.org si ai sa vezi.