+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Vulnerable Site - 4k Members (/showthread.php?tid=4880199)
Vulnerable Site - 4k Members - JackVRipper - Jun 25, 2015
So. I stumbled across this site after some google dorks.
A little bit of simple SQLi led me to the email addresses, living addresses, phone numbers and names of over 4,000 people. Also serves as a good starter for simple SQLi learning [Order by and union select is all that is needed for this]
The site is about developing Brooklyn, USA. So could be a target for telemarketting scammers.
Anyways, I'm sure some of you could find a lot more than I can.
DDDB.net SQLi Vulnerable Page
Will upload a leechers link which you just have to run WGET on if this gets enough popularity.
Happy Injecting,
JackVRipper
* - Delevingne - Jun 25, 2015
Save the whole database, and contact them or something.
* - Th3PonyWizard - Jun 25, 2015
Their logo has a message for you. Please follow it.
[img]http://dddb.net/frame/logo.gif[/img]
* - JackVRipper - Jun 25, 2015
I'm not here for the money, I'm not here for data collection. I'm just here for knowledge.
I contacted the site administrators in March. They have yet to fix it, or respond.
Do what you will with it, it's fair game.
Ps. The dorks used were simple and generic, I highly doubt this is a new find. Just a simple and easy SQLi learning tool.
Regards,
JackVRipper