Loading....
- Apocalipsa dupa Nemessis
- Cand dorinta de afirmare depaseste granitele bunului simt – PaxNwo un leecher ordinar
- Cum sa iti protejezi adresa e-mail si datele confidentiale din aceasta
- Mi s-a furat id-ul de messenger/adresa e-mail. Ce sa fac?
- Experiment social II – andimoisescu.ro
- Pentru posteritate
- In curand…
- “Hot” de id-uri messenger
- Chiar ca sunteti retardati
- Ce nu se invata la scoala – Vendetta (6)
Loading....
- Apocalipsa dupa Nemessis in (81 Visits)
- Ce servicii de mail folositi? in (27 Visits)
- This is the end in (23 Visits)
- Hackersblog.org is now blog.rstcenter.com in (17 Visits)
- Short news in (16 Visits)
- La multi ani România, la multi ani românilor in (15 Visits)
- Inca o pierdere de timp in (11 Visits)
- Azi este ziua userilor hackersblog.org in (10 Visits)
- Raportare vulnerabilitati in (9 Visits)
- Contact si vulns report in (7 Visits)
- Mi s-a furat id-ul de messenger/adresa e-mail. Ce sa fac? in (229 Visits)
- Hi5.com coders read this in (28 Visits)
- SMS scam (1) in (21 Visits)
- Phishing Bancpost in (8 Visits)
- Dezinformare sau proasta informare? in (7 Visits)
- Si tentativele de phishing pot fi amuzante in (5 Visits)
- Phishing Raiffeisen cu atasament html in (4 Visits)
- Cum sa iti protejezi adresa e-mail si datele confidentiale din aceasta in (76 Visits)
- [Utilitare] Suna gratis de pe internet sau de pe iPhone in (41 Visits)
- Despre CSRF, hi5.com, cum sa trisezi la concursuri s.a.m.d. in (30 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/Hi5 (4) in (29 Visits)
- Ce nu se invata la scoala - (D)DOS (5) in (24 Visits)
- Virusi in clipuri video [how to] in (23 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/mail (2) in (21 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam (1) in (17 Visits)
- Yahoo! redirects - a big issue (with video) in (10 Visits)
- Ca musca in... in (9 Visits)
- usa.kaspersky.com hacked ... full database acces , sql injection in (123 Visits)
- Simpatie.ro, matrimoniale3x.ro, apetisant.ro, deliciu.ro , etc Sql injection in (72 Visits)
- Yahoo! epic fail - permanent xss unleashed in (70 Visits)
- Telegraph.co.uk hacked, sql injection in (52 Visits)
- RedTube.com ... The Free Sex Video Community in (42 Visits)
- Kaspersky Thailand hacked by TinKode in (37 Visits)
- Conquiztador Hacked Again in (33 Visits)
- Telegraph.co.uk hacked - when will they learn? in (29 Visits)
- F-Secure.com - SQL Injection + Cross Site Scripting in (27 Visits)
- In atentia BitDefender.com, SQL Injection in (26 Visits)
- Wannabe Hackers [2] - cum sa faci un virus by sppy_hacker in (24 Visits)
- Wannabe Hackers [1] - Cum sa hack-uiesti RapidShare-ul in (20 Visits)
- Digital Photocopiers Loaded With Secrets in (15 Visits)
- Hacker Uses XSS and Google Street View Data to Determine Physical Location in (12 Visits)
- OWASP Phishing demo in (7 Visits)
- Oldies but goodies - Freedom Downtime - The Story of Kevin Mitnick in (7 Visits)
- Hope 2603 – Kevin Mitnick - Life a Computer Hacker – Revealed in (6 Visits)
- Christopher "moot" Poole: The case for anonymity online in (6 Visits)
- Owasp5005 Part1 - New zero-day browser exploits - ClickJacking in (5 Visits)
- [Video] The History Of Hacking in (5 Visits)
- Se poate sparge parola de Yahoo? in (257 Visits)
- phpBB.ro hacked in (81 Visits)
- Cand dorinta de afirmare depaseste granitele bunului simt - PaxNwo un leecher ordinar in (47 Visits)
- Experiment social in (46 Visits)
- "Hot" de id-uri messenger in (39 Visits)
- Oare cum e pana la urma? in (39 Visits)
- Experiment social II - andimoisescu.ro in (37 Visits)
- Ce nu se invata la scoala – Vendetta (6) in (37 Visits)
- Concurs fara premii in (36 Visits)
- Forumul Andreei Balan spart in (32 Visits)
Posted on March 13th, 2009
Let’s take a look inside of CCBill.com
In the first image we can see version, user and datadir.
Let’s see the databases name (those pointed by a red arrow are very interesting if we look at the names):
In the last picture i’ve concatenated user, email address and login password. The list is beggining with admin data.
————————–
Note: access was limited but still an attacker can extract admin password.
March 13th, 2009 at 2:31 pm
tot kb.. lore. nasol
March 13th, 2009 at 3:40 pm
am o intrebare … cum reusiti voi sa faceti SQL inject cand site-ul foloseste mod_rewrite ?
March 13th, 2009 at 4:53 pm
@anonuser: la fel, doar ca nu functioneaza de fiecare data. depinde de modul in care sunt scrise regulile de rewrite
de exemplu:
vulnerabil:
RewriteRule pagina_(.*).html pagina.php?id=$1
non-vulnerabil:
RewriteRule pagina_([0-9]).html pagina.php?id=$1
exemplul 2 nu inseamna ca nu e vulnerabil, doar ca nu poate fi exploatat prin url htaccess, si iti ramane doar sa ghicesti scriptul si parametrul. problema e ca de multe ori scriptul va face redirect automat la url-ul de htaccess, probabil mai degraba din considerente SEO
March 13th, 2009 at 4:57 pm
Tocmai asta e una din scaparile multor coderi, uita de filtrare cand folosesc mod_rewrite
March 13th, 2009 at 5:05 pm
Bravo domnu! Felicitari! Asa le trebe daca nu fac in-house.
March 13th, 2009 at 5:23 pm
Exact..
@anonuser: pe de alta parte,nu este intotdeauna obligatoriu ca in url sa existe un parametru de tip numeric.
O adresa vulnerabila poate foarte bine sa arate in felul urmator:
http://www.site.com/paginadeprezentare.html
Unii coderi obisnuiesc sa foloseasca un camp aditional cu adresa seo a unei pagini dinamice, pe care sa il bage mod_rewrite. O idee buna de altfel, dar nu atunci cand rewrite-ul este facut cu (.*).
Daca magic_quotes_gpc e Off, that’s it…
March 13th, 2009 at 6:16 pm
sau bagi (.*) pentru cimpurile care nu le folosesti… (Doar pentru SEO)
March 14th, 2009 at 12:36 am
Felicitari baieti! ccbill e treaba serioasa, cred ca au milioane de carti de credit in bazele lor de date. Nu ma gandeam ca un site asa important are probleme de genul asta. Eh, omul cat traieste invata.
March 15th, 2009 at 2:52 pm
multumesc pt raspunsuri, eu credeam ca e de ajuns sa rescrii linkurile cu mod_rewrite ca sa tii sql injecturile departe de site-ul tau
March 15th, 2009 at 2:53 pm
chestia e ca am incercat si eu sa introduc o comanda in linkul de la ccbill consumer base dar nu am avut nici un rezultat
March 22nd, 2009 at 3:41 pm
I Want to become a hacker! who can help me?
April 2nd, 2009 at 1:27 am
ma stii care e chestia ca am vazut si eu blogul si stiu ca ar suna tampit sa intreb daca ar vrea cineva sa ma initieze si pe mine pe mysql dar daca a-ti putea sa ma ajutati va astept ajutorul diabolik_lover mess si tot aia mail pe yahoo
April 27th, 2009 at 4:44 am
Impressive hack!