Can anyone tell me what can I do ? I got the hashes through SQL injection but I can't crack them. What can I do ?
What is left to do if you can't crack the hashes |
(Dec 24, 2014 05:44 AM)ProblemSolva Wrote: find other vulnerabilities in the server, which may also get you database access. what have you tryed to crack the hashes already ?What other vulnerabilities for example ? I tried a couple of websites that I googled. (Dec 24, 2014 05:54 AM)goodmix33 Wrote: What other vulnerabilities for example ? I tried a couple of websites that I googled. i suggest you to look in this section, to read more about other vulnerabilities. because there are alot, for example XSS - LFI - RFI - CSRF - SQLI some vulnerabilities are more severe then the other, good luck reading :)
You should potentially be able to crack hashes used in a sub teir website as long as you have the processing power, if not someone in the cryptography section will be able to help you. Otherwise depending on what user they are running MySql under you may be able to create a file using OUTFILE or execute cmd commands if its MSSQL. See if you can update or add records to the database.
|
|
|



![[Image: fBtjKNi.png]](https://i.imgur.com/fBtjKNi.png)