+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: steal program database (/showthread.php?tid=3853627)
steal program database - F793Syncmaster - Nov 8, 2013
Hey guys,
how can i steal the database from the program which is used by the company on which i work?
first i need to know from where the stream comes. how can i gather this information?
* - webdev77 - Nov 8, 2013
How the heck should we know how you can? I'm guessing you probably cannot and shouldn't attempt to if you are asking this on a public forum. Your company will probably realize what happened and then you will have quite a lot of problems.
There are so many variables that you do not address. What type of database? For what program? Where is the database stored? How is it encrypted? Etc.
* - PoabloEspanol - Nov 8, 2013
I would look for sql injection vulnerabilities on the local network sites. Most internal sites are susceptible to these types of attacks and can allow a user to steal data.
but.... Your probably going to be fired. Good luck! 🤝
* - Yoshikage Kira - Nov 8, 2013
Why do you want to do that? Do you want to ruin someone or something?
* - F793Syncmaster - Nov 10, 2013
(Nov 8, 2013 03:00 PM)webdev77 Wrote: There are so many variables that you do not address. What type of database? For what program? Where is the database stored? How is it encrypted? Etc.
that's what i'm asking for how to gather the basic information to start with...
(Nov 8, 2013 03:28 PM)[I]nsanity Wrote: Why do you want to do that? Do you want to ruin someone or something?
no its The Ministry of Justice and i wanna get the ID cards database :D
* - Aura - Nov 10, 2013
(Nov 10, 2013 08:39 AM)F793Syncmaster Wrote: that's what i'm asking for how to gather the basic information to start with...
no its The Ministry of Justice and i wanna get the ID cards database :D
Just forget it already. You obviously don't have the skills to do that and you'll probably never will. Also, you'll get in trouble for sure if you even attempt to do this.
* - F793Syncmaster - Nov 10, 2013
(Nov 10, 2013 08:52 AM)Aurа Wrote: Just forget it already. You obviously don't have the skills to do that and you'll probably never will. Also, you'll get in trouble for sure if you even attempt to do this.
we'll see...
i'm just starting to read "offensive security - pentration testing
with backtrack" i think it'll help somehow
* - Aura - Nov 10, 2013
(Nov 10, 2013 09:05 AM)F793Syncmaster Wrote: we'll see...
i'm just starting to read "offensive security - pentration testing
with backtrack" i think it'll help somehow
Even if you actually get the skill set to infiltrate the Ministry of Justice databases one day, it's not before a loong time, I tell you.
* - 1234dutch1234 - Aug 23, 2015
Is it even possible to stole someone DLL code? If you can PM me please.?
* - ABeautifulSmoke - Aug 23, 2015
Or you let someone else have access to it and help you out? And u share everything
* - ⒤⒞⒰⒭⒰⒪⒦ - Aug 23, 2015
Give that the program logs into a database it is possible through a few ways I can think of.
One you could try using a network packet listening tool like wireshark or if on windows use WPE pro and view packets the program sends out.
One of these packets will contain a login to the database..
There is a good chance the login packet will have some kind of encryption/hash.
Decrypt this packet and you will have the database login details needed.
Another way would be to detect if the main program is packed or encrypted and if so unpack/decrypt it.
Then you could use a software debugger on it like ollydebug and capture the login this way.
Not saying hey do this but its a method that could work.