+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: For giggles (/showthread.php?tid=1022690)
For giggles - Skz0r_ - Jan 31, 2011
Thought some of you might get a chuckle or two out of this.. Not big on the defacing no more. Hense the non-defacement.
http://thewanderers.travel/
* - Not Accepted on HF - Jan 31, 2011
http://www.thewanderers.co.in/static_page.php?page_id='5
* - A N D R E W - Jan 31, 2011
wtf is this lol ha haaaahah
* - Not Accepted on HF - Jan 31, 2011
This site has more holes in it then a Bitch on a NYC corner:
Scan results:
Code
http://thewanderers.travel/itinerary.php?page='65&pageid='64 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='68&pageid='67 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='140&pageid='75 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='139&pageid='75 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='58&pageid='261 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='135&pageid='97 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='76&pageid='158 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='48&pageid='47 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='92&pageid='172 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='50&pageid='43 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='50&pageid='39 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='33&pageid='31 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='81&pageid='212 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='95&pageid='260 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='95&pageid='168 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='77&pageid='224 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='112&pageid='233 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?pageid='58&page='53 <== Not access !
http://thewanderers.travel/itinerary.php?page='112&pageid='186 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='77&pageid='226 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='42&pageid='14 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?pageid='262&page='53 <== Not access !
http://thewanderers.travel/itinerary.php?page='135&pageid='98 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='112&pageid='189 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='73&pageid='224 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='48&pageid='45 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='139&pageid='73 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='134&pageid='90 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='64&pageid='70 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='92&pageid='170 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='158&pageid='236 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='112&pageid='256 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='132&pageid='50 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?pageid='200&page='158 <== Not access !
http://thewanderers.travel/itinerary.php?page='79&pageid='253 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='135&pageid='95 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='150&pageid='111 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='34&pageid='51 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='139&pageid='114 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='93&pageid='171 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='163&id='493 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='50&id='488 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='158&id='495 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='153&id='234 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='132&id='152 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='84&id='367 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='58&id='490 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='95&id='133 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='158&id='272 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='81&id='103 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='68&id='444 <== SQL Injection Success !
http://www.thewanderers.travel/contact.php <== Not access !
http://thewanderers.travel/country.php?page='73&id='106 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='74&id='352 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='103&id='245 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='70&id='431 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='67&id='451 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='58&id='494 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='53&id='75 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='70&id='432 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='158&id='265 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='158&id='267 <== SQL Injection Success !
http://www.english.ox.ac.uk/oecoursepack/wanderer/index.html <== Not access !
http://www.thewanderers.travel/new/staticpage.php?pageid='7 <== Not access !
http://www.thewanderers.travel/new/staticpage.php?pageid='4 <== Not access !
http://www.the-wanderer.co.uk/boards/index.php <== Not access !
http://www.thewanderers.travel/travelogues_detail.php?id='20 <== Not access !
http://www.thewanderers.travel/dynamic_page.php?page_id='716&parent_id='18 <== Not access !
http://www.telegraph.co.uk/travel/artsandculture/726965/Companion-volume.html <== Not access !
http://www.thewanderers.travel/new/faq.php <== Not access !
http://thewanderers.co.in/travelogues.php <== Not access !
http://www.thewanderers.travel/dynamic_page.php?page_id='885&parent_id='54 <== Not access !
http://www.thewanderers.travel/dynamic_page.php?page_id='543&parent_id='8 <== Not access !
http://www.thewanderers.travel/travelogues_detail.php?id='16 <== Not access !
http://thewanderers.co.in/hotdeal.php <== Not access !
http://www.football.co.uk/bolton_wanderers/index.shtml <== Not access !
http://www.thewanderers.travel/PAYMENT%20OPTION.pdf <== Not access !
http://www.guardian.co.uk/music/2009/feb/15/u2-no-line-on-the-horizon <== Not access !
http://www.spartacus.schoolnet.co.uk/Fwanderers.htm <== Not access !
http://www.thewanderers.co.in/dynamic_page.php?page_id='135&parent_id='18 <== SQL Injection Success !
http://www.the-wanderer.co.uk/bolton/looking-both-ways-at-once <== Not access !
http://www.the-wanderer.co.uk/bolton/villa-1--bwfc-1 <== Not access !
http://thewanderers.co.in/dynamic_page.php?page_id='1235&parent_id='71 <== SQL Injection Success !
http://www.timesonline.co.uk/tol/travel/best_of_britain/article1315354.ece <== Not access !
http://www.dailymail.co.uk/sport/cricket/article-1243908/Shambolic-England-crash-innings-defeat-Proteas-bowlers-damage-Wanderers.html <== Not access !
http://www.nationalmotormuseum.org.uk/?location_id='264 <== Not access !
http://www.the-wanderer.co.uk/boards/viewtopic.php?f='10&t='19981 <== Not access !
http://www.thewanderers.co.in/dynamic_page.php?page_id='840&parent_id='590 <== SQL Injection Success !
http://www.guardian.co.uk/books/booksblog/2009/apr/03/hugo-awards-fritz-leiber-wanderer <== Not access !
http://www.thewanderers.travel/new/itinerary.php?page='163&pageid='265 <== SQL Injection Success !
http://www.thewanderers.travel/new/itinerary.php?pageid='264&page='163 <== Not access !
http://www.thewanderers.travel/new/itinerary.php?page='158&pageid='263 <== SQL Injection Success !
http://www.thewanderers.travel/new/itinerary.php?page='163&pageid='123 <== SQL Injection Success !
Bitti![[Image: de7e98f6f4ee63ba17a3288c2881c1f9.png]](https://gyazo.com/de7e98f6f4ee63ba17a3288c2881c1f9.png)
![[Image: bad89ba3e799a49649ae29f99c6db560.png]](https://gyazo.com/bad89ba3e799a49649ae29f99c6db560.png)
* - Skz0r_ - Jan 31, 2011
(Jan 31, 2011 10:10 PM)Don Konroi Wrote: This site has more holes in it then a Bitch on a NYC corner:
🤣 I know. I think we all know by now.
This is why it took me all of 5 minutes
to do what I did. 🤝
* - adityagrover - Jan 31, 2011
i also got the.. admin login id and password.. but i couldnt find the admin page.. :(
admin:hackedbySkz :D
i also got these.. under admin_master
admin:balitamak2010,mounish:123456
* - masoom55 - Jan 31, 2011
Funny deface page Lol :D :)
Don konroi hacked the site
* - Not Accepted on HF - Jan 31, 2011
(Jan 31, 2011 10:46 PM)masoom55 Wrote: Funny deface page Lol :D :)
Don konroi hacked the site
LOOK AT THE DEFACE NOW :p LOVEN THE TITS OMG WHERE ALL GANG BANG HACKING IT OVER AND OVER LMAOO
* - masoom55 - Jan 31, 2011
(Jan 31, 2011 11:12 PM)Don Konroi Wrote: LOOK AT THE DEFACE NOW :p LOVEN THE TITS OMG WHERE ALL GANG BANG HACKING IT OVER AND OVER LMAOOI know bro lol 🤣😏
* - fack0 - Jan 31, 2011
(Jan 31, 2011 10:10 PM)Don Konroi Wrote: This site has more holes in it then a Bitch on a NYC corner:
You're quite literally testing the same variables over and over
page=78' works! good let's try page again
page=90' shit! i might be on to something
page=30' ....OH MY GOD!
I know it's just the scanner and it doesn't mean you're ACTUALLY trying the same variable multiple times. But seriously... the page isn't, at least from what you've posted, filled with holes. You're just catching the same unsanitized variables
* - uglykidjoes - Feb 1, 2011
Woo where you find that dork scannet plz share