+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Freebie] Admin to Radio Talk Show [/Freebie] (/showthread.php?tid=285580)
[Freebie] Admin to Radio Talk Show [/Freebie] - Kr4z1 - Feb 23, 2010
Ok so i jus gain accessed (thru several vulnerabilities) to a radio show's server on the internet. You have the ability to change/ban/log anything you want from this admin panel. Use the login url/credentials i provided below the picture of the admin panel =). happy hacking :D
Spoiler (Click to View)
Code
url: http://sc1.pcr.fast-serv.com/
user: admin
password: tampa9bay* - Bizcrack - Feb 23, 2010
Cool, what's the URL?
I would like try try SQLI it my self.
Edit:
Nvm image just didnt load for me.
* - Kr4z1 - Feb 23, 2010
(Feb 23, 2010 03:46 PM)Bizcrack Wrote: Cool, what's the URL?
I would like try try SQLI it my self.
Edit:
Nvm image just didnt load for me.
sorry about that totally forgot. posted url :D
* - Ajhusshi - Feb 23, 2010
lol how you hack it ??
you hack root ?
and find radio folder
or?
* - Kr4z1 - Feb 23, 2010
(Feb 23, 2010 04:19 PM)GBLTeam Wrote: lol how you hack it ??
you hack root ?
and find radio folder
or?
nah the admin to the radio server database was exploitable
* - ℛℛℛoooℛℛℛ - Feb 23, 2010
Quote:nah the admin to the radio server database was exploitable
So its was vuln to sqli, how funny. Very very nice find man
Thanks for sharing, ill rep+ you but im dont have perm to do so
* - Kr4z1 - Feb 23, 2010
(Feb 23, 2010 04:27 PM)-Chosen- Wrote: So its was vuln to sqli, how funny. Very very nice find man
Thanks for sharing, ill rep+ you but im dont have perm to do so
i'll be posting more database dumps later on tonight. im busy with xbox live atm :D
* - ddupuis - Feb 23, 2010
well done on this one.. :)
* - Kr4z1 - Feb 23, 2010
(Feb 23, 2010 04:30 PM)ddupuis Wrote: well done on this one.. :)
thanks broski <3
* - ℛℛℛoooℛℛℛ - Feb 23, 2010
How did you find the vuln? where was it, and how you do it?
Ill be waiting for the method. Thanks for sharing man really.
* - Kr4z1 - Feb 23, 2010
(Feb 23, 2010 04:33 PM)-Chosen- Wrote: How did you find the vuln? where was it, and how you do it?
i use a private perl scanner that scans for SQLi/RFI/LFI vuln's thru several different search engines. It was done with a union all injection attack.
* - ▫►βστ-иμی◄▫ - Feb 23, 2010
Doesn't work anymore.
It worked about 10 minutes ago lol
* - Kr4z1 - Feb 23, 2010
lol sorry guys. some1 must have fucked around with the ban options. more will becoming later on.
* - Y0uG0t0wn3d24 - Feb 23, 2010
Admin login not working...
* - Kr4z1 - Feb 23, 2010
(Feb 23, 2010 05:07 PM)Y0uG0t0wn3d24 Wrote: Admin login not working...
ya admin changed the password. closing thread now :D