+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Want to hack some .gov sites? Here's your chance. (/showthread.php?tid=2127365)
Want to hack some .gov sites? Here's your chance. - -DownFall - Jan 19, 2012
Since all you guys like to rant about SOPA, and how you're going to start targeting government websites, I decided to get a few.
Now these aren't for beginners, you'll at least need to be intermediate at SQLi. I found these myself, didn't use a scanner, I'm not even sure a scanner will pick these vulnerabilities out. Anyways, they're all vulnerable to Blind SQL Injection.
Code
http://www.openworld.gov/news/gallery.php?id=152[]
http://www.ser.aps.anl.gov/schedule.php?run=6&beamline=2[]
http://www.loc.gov/rr/asian/koreanserials/item.php?ID=3828[]
https://election.bouldercolorado.gov/report.php?report=CandE&statementID=147[]* - reachINDIA - Jan 19, 2012
I m unable to figure out what does [] means ?
* - FastFive - Jan 19, 2012
nice release, not sure what hacking these would accomplish with regards to sopa/megaupload, but who gives a shit
* - -DownFall - Jan 19, 2012
(Jan 19, 2012 09:36 PM)reachINDIA Wrote: I m unable to figure out what does [] means ?
That's your blind injection parameter...
(Jan 19, 2012 09:36 PM)FastFive Wrote: nice release, not sure what hacking these would accomplish with regards to sopa/megaupload, but who gives a shit
Every government site gets seen, leaving your little SOPA message on their homepage should piss them off.
* - dios - Jan 20, 2012
hacking a gov site by your own is always a bad idea
* - intruder7008 - Jan 20, 2012
how to began with site hacking mahn??
* - Zhen. - Jan 20, 2012
Boolean Based Blind Injection
Won't be hard for me, but Blind's a pain in the ass lol
* - Rooster™ - Jan 20, 2012
Someone Rape(deface) This Website please ( http://www.fbi.gov/ )....:P ill give you 100$
* - Careless. - Jan 20, 2012
(Jan 20, 2012 04:49 AM)rick8295 Wrote: Someone Rape(deface) This Website please ( http://www.fbi.gov/ )....:P ill give you 100$
What do you smoke dude, mind sharing?
* - TacticiaN - Jan 20, 2012
Blind shit not a fan of blind inj
i had lot of gov sites hacked
not that hard :)
* - pokzdk - Jan 20, 2012
That is cool im gonna lern blind inj right now :)