- Hacker Uses XSS and Google Street View Data to Determine Physical Location
- CAnCAn te iubim, CA CA tine nu gasim. Superfete.cancan.ro e de rahat
- Deface (?!?) pe Cotidianul.ro
- Virusi in clipuri video [how to]
- Cyber-Bullying – palma parinteasca a noului mileniu
- Christopher “moot” Poole: The case for anonymity online
- Wtf Avira?
- Some old story about tagged.com
- Pwning cam girls for fun
- Tabloshit
- Yahoo! again - XSS in Uncategorized (357 Visits)
- Yahoo! again - bad settings? in Uncategorized (252 Visits)
- Fanii nostri in Uncategorized (183 Visits)
- Frustrant in Uncategorized (146 Visits)
- La multi ani România, la multi ani românilor in Uncategorized (137 Visits)
- Weblog.ro - Shell via Local File Inclusion in Uncategorized (119 Visits)
- Yahoo! epic fail - permanent xss unleashed in Uncategorized (50 Visits)
- ... in Uncategorized (38 Visits)
- XSS Ownage - hi5 vs. Yahoo! + video in Uncategorized (2 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/Hi5 (4) in Uncategorized (2 Visits)
- Hackersblog.org is now blog.rstcenter.com in (1770 Visits)
- O mica dar importanta precizare in (1371 Visits)
- Twitter in (805 Visits)
- This is the end in (776 Visits)
- Ce servicii de mail folositi? in (773 Visits)
- Un nou membru in (730 Visits)
- La multi ani România, la multi ani românilor in (718 Visits)
- Inca o pierdere de timp in (674 Visits)
- De reţinut in (634 Visits)
- Azi este ziua userilor hackersblog.org in (610 Visits)
- SMS scam (1) in (564 Visits)
- Dezinformare sau proasta informare? in (563 Visits)
- Hi5.com coders read this in (553 Visits)
- Phishing Raiffeisen cu atasament html in (516 Visits)
- Phishing Bancpost in (486 Visits)
- Si tentativele de phishing pot fi amuzante in (422 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/mail (2) in (2707 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/Hi5 (4) in (2601 Visits)
- Despre CSRF, hi5.com, cum sa trisezi la concursuri s.a.m.d. in (1143 Visits)
- [Utilitare] Suna gratis de pe internet sau de pe iPhone in (1107 Visits)
- Ce nu se invata la scoala - (D)DOS (5) in (950 Visits)
- Virusi in clipuri video [how to] in (838 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam (1) in (725 Visits)
- Yahoo! redirects - a big issue (with video) in (570 Visits)
- Internet vs. privacy (1) in (469 Visits)
- Ca musca in... in (435 Visits)
- RedTube.com ... The Free Sex Video Community in (12973 Visits)
- usa.kaspersky.com hacked ... full database acces , sql injection in (4921 Visits)
- libertatea.ro vulnerabil la (blind) sql injection in (2950 Visits)
- Pwning cam girls for fun in (2586 Visits)
- Telegraph.co.uk hacked, sql injection in (2547 Visits)
- Facebook hacked - sql injection in (2425 Visits)
- Simpatie.ro, matrimoniale3x.ro, apetisant.ro, deliciu.ro , etc Sql injection in (2406 Visits)
- F-Secure.com - SQL Injection + Cross Site Scripting in (1775 Visits)
- [Hacked]Bitdefender (Portugal) exposes sensitive customer data in (1744 Visits)
- Wtf Avira? in (1723 Visits)
- Christopher "moot" Poole: The case for anonymity online in (1495 Visits)
- Digital Photocopiers Loaded With Secrets in (1458 Visits)
- Wannabe Hackers [2] - cum sa faci un virus by sppy_hacker in (592 Visits)
- Wannabe Hackers [1] - Cum sa hack-uiesti RapidShare-ul in (590 Visits)
- Hope 2603 – Kevin Mitnick - Life a Computer Hacker – Revealed in (463 Visits)
- PRIVACY IS DEAD - GET OVER IT, Pt 01-34 (Recommended by Hackersblog ) in (396 Visits)
- Oldies but goodies - Freedom Downtime - The Story of Kevin Mitnick in (379 Visits)
- [Video] The History Of Hacking in (373 Visits)
- Email Security - Why You Should Encrypt Your Email - Part One in (368 Visits)
- The Story of DEFCON in (343 Visits)
- Deface - tuttoaffari.lastampa.it si citymusiclab.city.corriere.it in (3493 Visits)
- RNS vs. RAI - citizenreport.rai.it hacked. in (3300 Visits)
- Hi5 email finder si sfarsitul a tot ceea ce inseamna privacy in social networking in (2996 Visits)
- Se poate sparge parola de Yahoo? in (2572 Visits)
- Free SMS time, TrimiteSMS.ro in (2492 Visits)
- Planete-plus-intelligente.lemonde.fr defaced by R.N.S. in (2464 Visits)
- Gmail uber hacking in (2256 Visits)
- Camera de supraveghere a universitatii Alexandru Ioan Cuza din Iasi in (2255 Visits)
- Cancan.ro spart pentru a doua oara intr-o zi in (2252 Visits)
- Stiri cu antena3 in (2208 Visits)
Posted on February 18th, 2009
An unsecure parameter in the ddc section (Document Download Centre – The Norton Resource Centre for Resellers), being vulnerable to sql injection, permits access to their databases. The irony of the situation is that it’s done on https , on a login page , a page that promotes security products like Norton AntiVirus 2009 and Norton Internet SECURITY. What can I say: nice advertising , an sql injection in the page that promotes those products. I’ve sent emails to Symantec. Although, again, on the website there is no contact email address for cases such as this, I’ve sent an email to webmaster@symantec.com and security@symantec.com. The email didn’t bounce, so someone must have received it. No answer as of yet.
Let’s see what we’re talking about. In most blind sql injection cases not much info can be shown in pictures. Being blind the injection doesn’t return any results. I’ve made 3 print screens showing the base tests for a blind sqli.
From the first picture we see that by adding to the vulnerable parameter the normal condition AND 1=1 and the webpage loads normally.
In the picture I’ve highlited the text that will dissapear when the false condition AND 1=2 is inserted in the query.
The text has dissapeared. The condition for a blind sqli to be exploited is that the SELECT function must be enabled. That means that adding to the parameter AND (SELECT 1)=1 the content won’t dissapear because the query will return TRUE.
A little information about the server: WEB APP. Technology: PHP 5.2.6, Apache, comment injection fingerprint(Database Version): MySQL 5.0.22. I’m waiting for the problem to be solved and maybe after that I will post more detailed info.
RO Version:
Un parametru prost sanitizat din sectiunea ddc (Document Download Centre – The Norton Resource Centre for Resellers) fiind vulnerabil la blind sql injection permite accesul la bazele de date . Culmea ironiei este ca suntem pe https , chiar pe o pagina de logare , pagina pe care apar renumitele produse ale firmei symantec : Norton AntiVirus 2009 si Norton Internet Security. Ce sa zic: frumoasa reclama o vulnerabilitate de tip sqli in webpage, pentru produsele respective. Am anuntat, am trimis email firmei symantec. Desi, din nou pe site nicio adresa de contact pentru asemenea cazuri, am trimis email la webmaster@symantec.com, security@symantec.com . Emailul nefiind returnat, inseamna ca a ajuns la destinatie. Raspuns nu am primit.
Sa vedem despre ce este vorba. In cazul injectiei blind , prea multe nu se pot arata. Fiind blind nu returneaza vreun rezultat, vreo eroare in text clar. Am facut 3 print screen-uri pentru testul de baza blind sqli.
Din prima poza se vede ca adaugand parametrului vulnerabil condita evidenta AND 1=1 pagina web se incarca normal.
In poza am incercuit partea care o sa dispara cand adaugam parametrului vulnerabil conditia falsa AND 1=2
A disparut textul. Conditia de baza ca un blind sql injection sa se poata exploata, este ca functia select sa nu fie interzisa. Adica adaugand parametrului vulnerabil and (select 1)=1 , sa nu dispara contentul.
In cazul nostru nu dispare, deci selectul functioneaza.
Cateva date despre server: web application technology: PHP 5.2.6, Apache, comment injection fingerprint: MySQL 5.0.22. Astept rezolvare problemei, dupa care poate voi revenii cu detalii.
February 19th, 2009 at 1:19 am
[...] the rest of the article by unu, in his own words, by clicking HERE « New rogue/fake security program: Anti-virus-1 -How to remove [...]
February 19th, 2009 at 7:32 am
+10001
frumos si fara cuvinte… fatza reala a celor care ne vind securitate la suta de grame…
Dar pe ei cine o sa-i asigure? Nu o sa ma minunez daca pe unlele site-uri o sa apara:
“Secured by hackersblog.org”
February 19th, 2009 at 12:37 pm
Foarte tare! Ma intreb de ce nu raspund la emailuri? Probabil nu le citesc sau primesc prea multe spam-uir?
February 19th, 2009 at 6:01 pm
Ai extras ceva date “importante” de pe siteul lor, sau doar ai obtinut screen-ul acela? Sunt curios sa vad urmatoarele postari dupa ce o sa iti raspunda (daca o sa iti raspunda ei).
February 19th, 2009 at 7:04 pm
părerererea mea e că
February 19th, 2009 at 7:48 pm
sunt absolut de acord cu tine nabukadnezar
February 20th, 2009 at 7:46 am
http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyId=16&articleId=9128267&intsrc=hm_topic
“Symantec immediately took the site down, conducted comprehensive testing and determined that the issue is not a security vulnerability,” the company said in a statement on Thursday. “It appears that the individual who reported it based the report on an error message.”
February 20th, 2009 at 12:54 pm
Voi chiar credeti ca securitatea site-ului are vreo legatura cu securitatea produselor vandute? Eu lucrez intr-o companie care vinde astfel de produse, iar oamenii care fac site-urile n-au nicio legatura cu cei care lucreaza la produsele vandute catre public.
February 20th, 2009 at 1:44 pm
Nu Radu. Eu personal folosesc Norton si sunt multumit de el. Si in cazul Kaspersky am precizat ca cel putin produsul lor antivirus este unul extrem de eficient.
February 20th, 2009 at 1:44 pm
is rusinoase rau bresele astea de securitate care te lasa sa faci SQL injection
chiar si pentru un site cu o baza de date cu 20 clienti
February 20th, 2009 at 2:56 pm
Radu, nici nu trebuie sa aibe vreo legatura cei care fac siteurile cu cei care fac produsele sau le dau spre vanzare, problema e simpla, cineva modifica sursa site-ului si schimba link-ul catre download al unui produs x, ei toti cei care downloadeaza acel fake x produs pot fi infectati cu diferiti virusi/backdoors sau sniffere de informatii si asta e deajuns.
February 20th, 2009 at 8:20 pm
[...] carente in site-urile a trei companii ce comercializeaza softuri de protectie, Unu a publicat o postare despre o vulnerabilitate la blind SQL injection pe site-ul Symantec si una despre un parametru prost “sanitizat” din site-ul International Herald Tribune, [...]
February 21st, 2009 at 1:04 pm
[...] از اینکه خبر هک شدن سایت Symantec در اینجا منتشر شد، Symantec به جای کشیدن خط و نشان ِ اضافی برای [...]
February 22nd, 2009 at 10:08 am
Why you love to do the FREE site staff ？
stupid
February 24th, 2009 at 12:32 am
Unu – lol joke’s on u
February 24th, 2009 at 5:43 pm
[...] qu’une enquête interne permette d’identifier les failles du système. Encore une fois, des détails sont disponibles sur le blogue [...]
February 25th, 2009 at 4:30 pm
Nice!
February 27th, 2009 at 9:05 am
ce se intampla daca nu cumpar “ia suscripcion d norton”?imi expira in cateva zile si nu vreau sa o cumpar.nici nustiu pra bine ce e aia.daca cinevase pricepe rog sa imi rspunda.
March 31st, 2009 at 9:40 pm
[...] Symantec Corporation was founded in 1982 by Gary Hendrix with a National Science Foundation grant. Symantec was originally focused on artificial intelligence-related projects, including a database program. Hendrix hired several Stanford University natural language processing researchers as the company’s first employees. In 1984 Symantec was acquired by another, even smaller computer software startup company, C&E Software, [...]
May 4th, 2009 at 7:31 am
[...] pare ca da …. echipa care a dat clasa expertilor de la Symanctec , Bitdefender si Kaspersky se reintoarce si de data asta fac recrutari. Hackersblog.org [...]