What is Tribal Wars?

For those who dont know, we can look it up on google: Tribal Wars is a browserbased online game. Every player controls a small village, striving for power and glory”.

It is played in many countries on alot of servers.

By altering a parameter you can access the DB. Because the plaform / software is the same everywhere, it means you can gain access on ALL the servers. You can access the DB on each and every server.

Here you have the version, user and name of the DB for server 9, Romania:

Lets see now what we can find in tabel ds_player.

Besides username, email and password (crypted, but any pass cn be easily decrypted) we can also find the number of “gold” each player has. Fans of this game would know what I am talking about. You can buy gold or transfer it to another player and is one of the most important resources / comodities of the game. First, I concatenated all of these on server 9, Romania:

To show that through the vulnerable parameter you can access any data base on any server, here you have a screenshot for server 11, Holland

The vulnerable parameter is already patched and therefor it is left visible.

Ce este tribal wars? Pentru cine nu stie, cautam definitia jocului in google: “Tribal Wars is a browserbased online game. Every player controls a small village, striving for power and glory”

Un joc ce se joaca in multe tari , pe diferite servere. Un parametru prost sanitizat permite un sql injection, deci acces la bazele de date. Deoarece softul, platforma este comuna parametrul vulnerabil este prezent pe toate serverele. Adica se pot accesa bazele de date pe fiecare server in parte. Prima data sa vedem versiunea, userul si numele bazei de date pentru serverul 9, romania :

Acum sa vedem ce gasim in tabelul ds_player. Pe langa username, email si parola (criptat, dar orice parola poate fi decriptat relativ usor) mai gasim si numarul gold-urilor avute. Cine joaca stie ce este un gold. Goldul se poate cumpara pe bani, dar se si poate transfera la alt jucator, deci gold-ul este ceva foarte valoros. Am concatanat , prima data, toate astea pt serverul 9, romania:

Pentru a arata ca prin parametrul vulnerabil se pot accesa bazele de date de pe orice server, am facut un print screen pentru serverul 11, olanda.

Nu am blurat parametrul vulnerabil, deoarece deja este sanitizat, patched.

Related Posts

• February 23, 2011 -- Concurs fara premii
• August 30, 2010 -- Deface (?!?) pe Cotidianul.ro
• April 21, 2010 -- France2.fr – France4.fr – in asteptarea atacului?
• December 24, 2009 -- Forumul Andreei Balan spart
• December 22, 2009 -- Fun cu NemoExpres.ro