+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How to sql a Jquery ajax login page? (/showthread.php?tid=6053250)
How to sql a Jquery ajax login page? - Nayan - Feb 28, 2020
Hey sorry if its newbie question but recently learned some sql techniques and I created a login page in wordpress using jquery ajax.
my questions are how do I bypass or sql inject the login page.
RE: How to sql a Jquery ajax login page? - compalabee - Feb 28, 2020
(Feb 28, 2020 02:55 AM)Nayan Wrote: Hey sorry if its newbie question but recently learned some sql techniques and I created a login page in wordpress using jquery ajax.
my questions are how do I bypass or sql inject the login page.
I think Wordpress has pre-set SQLi protection mechanisms (that's why Wordpress vulns include SQLi)
Also jQuery has its own CVE space (doesn't it? Not sure) so you end up needing to tackle a specific version of jQuery just to manage an SQLi on it.
tl;dr Try another endpoint I guess?
RE: How to sql a Jquery ajax login page? - Nayan - Feb 28, 2020
(Feb 28, 2020 03:00 AM)compalabee Wrote: I think Wordpress has pre-set SQLi protection mechanisms (that's why Wordpress vulns include SQLi)So I need to find the jquery version the site is using and then I can attempt one sql?
Also jQuery has its own CVE space (doesn't it? Not sure) so you end up needing to tackle a specific version of jQuery just to manage an SQLi on it.
tl;dr Try another endpoint I guess?
Also what do you mean by try another endpoint ?To try another method?
RE: How to sql a Jquery ajax login page? - compalabee - Feb 28, 2020
(Feb 28, 2020 03:12 AM)Nayan Wrote: So I need to find the jquery version the site is using and then I can attempt one sql?
Also what do you mean by try another endpoint ?To try another method?
Not sure about hacking jQuery but I think earlier versions don't have the protection mechanisms to protect against SQLi.
As for other endpoints, in my experience, when I hack Wordpress with SQLi I look for a PHP file that looks similar to this (but not always the same)
PHP Code
<?php
/index.php?var=1
Then add the SQL queries at the end, like
PHP Code
<?php
/index.php?var=1' or yadayada
RE: How to sql a Jquery ajax login page? - l4stl00k - Mar 19, 2020
I prefer to get some vuln link try that
RE: How to sql a Jquery ajax login page? - BigJoe7413 - Mar 21, 2020
(Feb 28, 2020 02:55 AM)Nayan Wrote: Hey sorry if its newbie question but recently learned some sql techniques and I created a login page in wordpress using jquery ajax.
my questions are how do I bypass or sql inject the login page.
very rare to find a sqli in jquery itself, Best you're going to get is XSS. Wordpress login pages tend to be very secure, Try look for an outdated plugin