Most sites that I SQL Inject either don't have an admin login, or the information from the columns doesn't work. How could there be login info in the database if there isn't a login? The thing I really don't get is when the login doesn't work. Sometimes I find 3 different admin panels on a site, and none of them do the passwords work on. I'm just wondering if anyone has any scientific reasons why this would be happening all the time.
Why don't the admin logins ever work? |
(Sep 23, 2013 11:26 AM)mem0rex Wrote: Well don't use public dorks for one thing.. You are wasting your time, because the fact that the site is still up most likely means that some other skid failed at getting in too. There has probably been 100s of noobs tryin to take down the site. Just make up your own dorks and you will have a better chance and finding a new site. Well I agree with that, but I'm really just asking why it doesn't work.
Right, I understand that. I use my own dorks.
The removal of the admin panel theory is possible I guess, but it seems unlikely to happen so often. Any site with an admin table should have an admin panel though, or at least did at one time. I still don't get why the logins wouldn't work though. Doesn't the site have to compare the entered passwords with the information in the db? |
|
|