+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: I need help in uploading the file SQL (/showthread.php?tid=6277475)
I need help in uploading the file SQL - Maxi oh - Aug 12, 2024
Hello everyone, I need to upload the shell to a site that is infected with the SQL vulnerability. Is there a way or a program?
I injected the site manually and through a SQLMAP ..But the password is encrypted with an algorithm that even the chatGpt could not crack. Is there a solution?
RE: I need help in uploading the file SQL - Nightshader - Aug 12, 2024
sites are not infected with a vulnerablility they are just vulnerable. assuming the website is sql vulnerable and you got into the database via sqlmap copy down they encryption in a text document amd run it through john using many wordlists rockyou the john list assuming also you know how to run john or hashcat. you can alsoo try some of the online hash cracks as some of them are legit.
you can find more vulnerabbilities using nikto on the site. you may find a shell vulnerability and if so you can access the sites database through that as well as many other things, command injection and even editing the html to your own deface.
RE: I need help in uploading the file SQL - Peffer - Aug 12, 2024
find vulnerability of upload plugins or similar which you can upload your file to the host.
RE: I need help in uploading the file SQL - Maxi oh - Aug 13, 2024
(Aug 12, 2024 04:33 AM)Nightshader Wrote: sites are not infected with a vulnerablility they are just vulnerable. assuming the website is sql vulnerable and you got into the database via sqlmap copy down they encryption in a text document amd run it through john using many wordlists rockyou the john list assuming also you know how to run john or hashcat. you can alsoo try some of the online hash cracks as some of them are legit.
you can find more vulnerabbilities using nikto on the site. you may find a shell vulnerability and if so you can access the sites database through that as well as many other things, command injection and even editing the html to your own deface.
Can I message you on Telegram? Send me your username
RE: I need help in uploading the file SQL - Nightshader - Aug 13, 2024
(Aug 13, 2024 03:50 AM)Maxi oh Wrote: Can I message you on Telegram? Send me your username
I cant send private message need upgrade. But when we on together we can start a convo in chat. There ill send u myy telegram. So i can teach you some sqli
RE: I need help in uploading the file SQL - Maxi oh - Aug 13, 2024
(Aug 13, 2024 07:09 AM)Nightshader Wrote: I cant send private message need upgrade. But when we on together we can start a convo in chat. There ill send u myy telegram. So i can teach you some sqli
This is my Telegram username, please message me on it. [deleted] [warn]
RE: I need help in uploading the file SQL - Nightshader - Aug 13, 2024
(Aug 13, 2024 11:21 AM)Maxi oh Wrote: This is my Telegram username, please message me on it. [deleted]
doing now
RE: I need help in uploading the file SQL - Dolla$ - Aug 13, 2024
(Aug 12, 2024 04:33 AM)Nightshader Wrote: sites are not infected with a vulnerablility they are just vulnerable. assuming the website is sql vulnerable and you got into the database via sqlmap copy down they encryption in a text document amd run it through john using many wordlists rockyou the john list assuming also you know how to run john or hashcat. you can alsoo try some of the online hash cracks as some of them are legit.
you can find more vulnerabbilities using nikto on the site. you may find a shell vulnerability and if so you can access the sites database through that as well as many other things, command injection and even editing the html to your own deface.
If he say the site is infected then it's 😈
RE: I need help in uploading the file SQL - Nightshader - Aug 13, 2024
(Aug 13, 2024 11:21 AM)Maxi oh Wrote: This is my Telegram username, please message me on it. @Max_dbs
I sent you a message on tele. You will know its me trust me. From there tell me what OS your using and all background on what you need to know
RE: I need help in uploading the file SQL - DramaKing - Aug 13, 2024
(Aug 12, 2024 04:16 AM)Maxi oh Wrote: Hello everyone, I need to upload the shell to a site that is infected with the SQL vulnerability. Is there a way or a program?
I injected the site manually and through a SQLMAP ..But the password is encrypted with an algorithm that even the chatGpt could not crack. Is there a solution?
No, of course ChatGPT cannot crack hashes. But if you post a Hash Bounty, someone here might.
(Aug 13, 2024 03:50 AM)Maxi oh Wrote: Can I message you on Telegram? Send me your username
No, you may not. See the Help Docs for the rules on offsite communication. There are scammers aplenty, thus the restrictions.
RE: I need help in uploading the file SQL - Aspeoke - Aug 14, 2024
Go ahead and message me if you need some insight.