+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Dork to find Radio Station Websites (/showthread.php?tid=4821850)
Pages: Pages
1
2
Dork to find Radio Station Websites - SiStemiC - May 15, 2015
I just found this. By searching:
PHP Code
<?php
"fm:/.php?id="
Code
9XXbigfm.com/city.php?id=2
XX= 16 + 11Anyway, the site has 1 collumn(!) and theres a table called User_login. However I stopped there and thought about sharing it here in case someone is interested...
-SiStemiC
* - bass booster - May 15, 2015
Hmm seems interesting. I'll take your research further iff possible
* - iHacker-n00b - May 15, 2015
[img]http://s9.postimg.org/jaz5ukxcv/owned.png[/img] Its Old !
* - SiStemiC - May 15, 2015
(May 15, 2015 08:49 AM)iHacker-n00b Wrote: [img]http://s9.postimg.org/jaz5ukxcv/owned.png[/img] Its Old !
Did you upload shell to the site?
* - andy1994 - May 16, 2015
Thanks man good find for sure :)
* - qusai.alhaddad - May 16, 2015
I cannot post pictures now , but you know what is "hue".
* - bass booster - May 17, 2015
(May 15, 2015 08:49 AM)iHacker-n00b Wrote:Its Old !Code[img]http://s9.postimg.org/jaz5ukxcv/owned.png[/img]
I can't even get the admin page to load. It just gives me a 403 Forbidden.
Anyway to get past that?
* - iHacker-n00b - May 17, 2015
(May 17, 2015 08:16 AM)bass booster Wrote: I can't even get the admin page to load. It just gives me a 403 Forbidden.lol :3 its not working xD Now... I hacked it earlier btw I did it Without Cracking The hash...
Anyway to get past that?
* - bass booster - May 17, 2015
(May 17, 2015 08:18 AM)iHacker-n00b Wrote: lol :3 its not working xD Now... I hacked it earlier btw I did it Without Cracking The hash...
They must have deny all in htaccess :D
The password was easy to get. it was huehuehuehue Or maybe only 3 I do't remember :3
* - iHacker-n00b - May 17, 2015
(May 17, 2015 09:35 AM)bass booster Wrote: They must have deny all in htaccess :Dshit :_: IT was me who did it :3 i thought its not xD Available on Google lol shit!
The password was easy to get. it was huehuehuehue Or maybe only 3 I do't remember :3
* - SiStemiC - May 17, 2015
(May 17, 2015 09:38 AM)iHacker-n00b Wrote: shit :_: IT was me who did it :3 i thought its not xD Available on Google lol shit!
Lol that's why I put XX in the URL I don't want that shit indexed with my name on it :P
* - bass booster - May 17, 2015
(May 17, 2015 10:26 AM)SiStemiC Wrote: Lol that's why I put XX in the URL I don't want that shit indexed with my name on it :P
Lol so does that mean they patched the admin folder so only authorized people can access it now? I'm not real smart with web files :P but I have an understanding for most of it
* - iHacker-n00b - May 17, 2015
(May 17, 2015 11:11 AM)bass booster Wrote: Lol so does that mean they patched the admin folder so only authorized people can access it now? I'm not real smart with web files :P but I have an understanding for most of it
May be some one who Got the access :3 Have deleted it ... but not his backdoor 👹
* - SiStemiC - Jul 1, 2015
After some investigation the admin page seems to be
Code
http://9XXbigfm.com/siiya/login.php
XX=16+11* - sysadmn - Jul 12, 2015
epic ... leme try this one