+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Shell Injection alerts!! (/showthread.php?tid=5864246)
Shell Injection alerts!! - BT_751 - Jul 20, 2018
HI,
Guys I scan the web site using vega and i get a high alert :
"Shell Injection"
The alert divided into many parts
But the most 4 who attracted me it's all of the same name: /
I find in the case of "Request"of number:
1-POST / [_user=vega _pass=vega`true` ]
2-POST / [_user=vega _pass=vega"`true`" ]
3-POST / [_user=vega`true` _pass=vega ]
4-POST / [_user=vega"`true`" _pass=vega ]
Please help me to know how can i benefit from it?
And thank you
RE: Shell Injection alerts!! - UpTheCrust - Jul 20, 2018
(Jul 20, 2018 04:14 PM)BT_751 Wrote: HI,
Guys I scan the web site using vega and i get a high alert :
"Shell Injection"
The alert divided into many parts
But the most 4 who attracted me it's all of the same name: /
I find in the case of "Request"of number:
1-POST / [_user=vega _pass=vega`true` ]
2-POST / [_user=vega _pass=vega"`true`" ]
3-POST / [_user=vega`true` _pass=vega ]
4-POST / [_user=vega"`true`" _pass=vega ]
Please help me to know how can i benefit from it?
And thank you
I'm pretty sure vega is famous for false alerts