Feb 23, 2010 03:36 PM
(This post was last modified: Feb 23, 2010 03:51 PM by Kr4z1.)
Ok so i jus gain accessed (thru several vulnerabilities) to a radio show's server on the internet. You have the ability to change/ban/log anything you want from this admin panel. Use the login url/credentials i provided below the picture of the admin panel =). happy hacking :D
[img]http://i825.photobucket.com/albums/zz175/KraZi_HaXz/adminserver.jpg[/img]
Code url: http://sc1.pcr.fast-serv.com/
user: admin
password: tampa9bay
Cool, what's the URL?
I would like try try SQLI it my self.
Edit:
Nvm image just didnt load for me.
(Feb 23, 2010 03:46 PM)Bizcrack Wrote: Cool, what's the URL?
I would like try try SQLI it my self.
Edit:
Nvm image just didnt load for me.
sorry about that totally forgot. posted url :D
lol how you hack it ??
you hack root ?
and find radio folder
or?
(Feb 23, 2010 04:19 PM)Ajhusshi Wrote: lol how you hack it ??
you hack root ?
and find radio folder
or?
nah the admin to the radio server database was exploitable
Quote:nah the admin to the radio server database was exploitable
So its was vuln to sqli, how funny. Very very nice find man
Thanks for sharing, ill rep+ you but im dont have perm to do so
(Feb 23, 2010 04:27 PM)ℛℛℛoooℛℛℛ Wrote: So its was vuln to sqli, how funny. Very very nice find man
Thanks for sharing, ill rep+ you but im dont have perm to do so
i'll be posting more database dumps later on tonight. im busy with xbox live atm :D
well done on this one.. :)
(Feb 23, 2010 04:30 PM)ddupuis Wrote: well done on this one.. :)
thanks broski <3
How did you find the vuln? where was it, and how you do it?
Ill be waiting for the method. Thanks for sharing man really.
(Feb 23, 2010 04:33 PM)ℛℛℛoooℛℛℛ Wrote: How did you find the vuln? where was it, and how you do it?
i use a private perl scanner that scans for SQLi/RFI/LFI vuln's thru several different search engines. It was done with a union all injection attack.
Doesn't work anymore.
It worked about 10 minutes ago lol
lol sorry guys. some1 must have fucked around with the ban options. more will becoming later on.
Admin login not working...
(Feb 23, 2010 05:07 PM)Y0uG0t0wn3d24 Wrote: Admin login not working...
ya admin changed the password. closing thread now :D
|