Hello everyone, I need to upload the shell to a site that is infected with the SQL vulnerability. Is there a way or a program?
I injected the site manually and through a SQLMAP ..But the password is encrypted with an algorithm that even the chatGpt could not crack. Is there a solution?
sites are not infected with a vulnerablility they are just vulnerable. assuming the website is sql vulnerable and you got into the database via sqlmap copy down they encryption in a text document amd run it through john using many wordlists rockyou the john list assuming also you know how to run john or hashcat. you can alsoo try some of the online hash cracks as some of them are legit.
you can find more vulnerabbilities using nikto on the site. you may find a shell vulnerability and if so you can access the sites database through that as well as many other things, command injection and even editing the html to your own deface.
DO NOT DEAL WITH THIS MEMBER
find vulnerability of upload plugins or similar which you can upload your file to the host.
(Aug 12, 2024 04:33 AM)Nightshader Wrote: sites are not infected with a vulnerablility they are just vulnerable. assuming the website is sql vulnerable and you got into the database via sqlmap copy down they encryption in a text document amd run it through john using many wordlists rockyou the john list assuming also you know how to run john or hashcat. you can alsoo try some of the online hash cracks as some of them are legit.
you can find more vulnerabbilities using nikto on the site. you may find a shell vulnerability and if so you can access the sites database through that as well as many other things, command injection and even editing the html to your own deface.
Can I message you on Telegram? Send me your username
(Aug 13, 2024 03:50 AM)Maxi oh Wrote: Can I message you on Telegram? Send me your username
I cant send private message need upgrade. But when we on together we can start a convo in chat. There ill send u myy telegram. So i can teach you some sqli
Aug 13, 2024 11:21 AM
(This post was last modified: Aug 13, 2024 12:47 PM by Nostre.)
(Aug 13, 2024 07:09 AM)Nightshader Wrote: I cant send private message need upgrade. But when we on together we can start a convo in chat. There ill send u myy telegram. So i can teach you some sqli
This is my Telegram username, please message me on it. [deleted] [warn]
Aug 13, 2024 11:22 AM
(This post was last modified: Aug 13, 2024 12:47 PM by Nostre.)
(Aug 13, 2024 11:21 AM)Maxi oh Wrote: This is my Telegram username, please message me on it. [deleted]
doing now
(Aug 12, 2024 04:33 AM)Nightshader Wrote: sites are not infected with a vulnerablility they are just vulnerable. assuming the website is sql vulnerable and you got into the database via sqlmap copy down they encryption in a text document amd run it through john using many wordlists rockyou the john list assuming also you know how to run john or hashcat. you can alsoo try some of the online hash cracks as some of them are legit.
you can find more vulnerabbilities using nikto on the site. you may find a shell vulnerability and if so you can access the sites database through that as well as many other things, command injection and even editing the html to your own deface.
If he say the site is infected then it's 😈
Don't hesitate to reach out for security services
(Aug 13, 2024 11:21 AM)Maxi oh Wrote: This is my Telegram username, please message me on it. @Max_dbs
I sent you a message on tele. You will know its me trust me. From there tell me what OS your using and all background on what you need to know
Aug 13, 2024 11:48 AM
(This post was last modified: Aug 13, 2024 11:49 AM by DramaKing.)
(Aug 12, 2024 04:16 AM)Maxi oh Wrote: Hello everyone, I need to upload the shell to a site that is infected with the SQL vulnerability. Is there a way or a program?
I injected the site manually and through a SQLMAP ..But the password is encrypted with an algorithm that even the chatGpt could not crack. Is there a solution?
No, of course ChatGPT cannot crack hashes. But if you post a Hash Bounty, someone here might.
(Aug 13, 2024 03:50 AM)Maxi oh Wrote: Can I message you on Telegram? Send me your username
No, you may not. See the Help Docs for the rules on offsite communication. There are scammers aplenty, thus the restrictions.
DO NOT DEAL WITH THIS MEMBER
Go ahead and message me if you need some insight.
|