greetings, fellow internet!

welcome to digitalgangster.com, the coolest community for people who hack the gibson and make bajillions of dollars off of online marketing. please click here to register an account (it's free) and join in on a plethora of discussions with the internet elite.

ASGPHE,
ytcracker, original digital gangster
follow me on twitter
fan me on facebook
Results 1 to 16 of 16

Thread: basic SQL injection question

  1. 06-20-2007, 08:03 PM #1
    amd0freak
    amd0freak is offline
    Join Date
    May 2007
    Posts
    333

    Default basic SQL injection question

    ok so i tried "1=1" as the password for teh admin directory of a phpBB forum, didnt work, but when i tried "0" as the password, it worked! i got logged in. says i dont have permission to delete some stuff. i managed to delete many tables but there were still lots of stuff it said i had no permission to modify. i am in phpMyAdmin, logged in. what else can i do?
    ...........................
    Reply With Quote Reply With Quote
  2. 06-20-2007, 08:04 PM #2
    pad
    pad is offline
    ureddit.com/category/23442 pad's Avatar
    Join Date
    Feb 2005
    Posts
    28,198

    Default

    you should probably ask mx

    see user title
    you better back off before i jack off
    Reply With Quote Reply With Quote
  3. 06-20-2007, 08:06 PM #3
    amd0freak
    amd0freak is offline
    Join Date
    May 2007
    Posts
    333

    Default

    well he's banned, right? and yeah i heard what happened.
    ...........................
    Reply With Quote Reply With Quote
  4. 06-20-2007, 08:08 PM #4
    chad
    chad is offline
    weed and syrup till i die chad's Avatar
    Join Date
    Nov 2006
    Posts
    7,743

    Default

    that's odd are you saying by inputting '0' in the password field you were logged in?
    Reply With Quote Reply With Quote
  5. 06-20-2007, 08:09 PM #5
    amd0freak
    amd0freak is offline
    Join Date
    May 2007
    Posts
    333

    Default

    yeah. it was weird. i guess it used the while(0) loop in the PHP...instead of the common while(1=1) for a perpetually true statement

    i tried "1=1" as the password, said invalid password
    i tried "0" it worked
    tried random shit, didnt work
    tried "0" again with no username and it worked...again.
    so then i started deleting shit. deleted some stuff others says i cant (see op_
    ...........................
    Reply With Quote Reply With Quote
  6. 06-20-2007, 08:10 PM #6
    chad
    chad is offline
    weed and syrup till i die chad's Avatar
    Join Date
    Nov 2006
    Posts
    7,743

    Default

    hahaha nice i might try this direct me to the admin area plz?
    Reply With Quote Reply With Quote
  7. 06-20-2007, 08:12 PM #7
    amd0freak
    amd0freak is offline
    Join Date
    May 2007
    Posts
    333

    Default

    https://www.icradio.com/admin/
    ...........................
    Reply With Quote Reply With Quote
  8. 06-20-2007, 08:17 PM #8
    chad
    chad is offline
    weed and syrup till i die chad's Avatar
    Join Date
    Nov 2006
    Posts
    7,743

    Default

    lol that's crazy
    Reply With Quote Reply With Quote
  9. 06-20-2007, 08:19 PM #9
    amd0freak
    amd0freak is offline
    Join Date
    May 2007
    Posts
    333

    Default

    yeah finally deleted all the tables or do you still see them
    ...........................
    Reply With Quote Reply With Quote
  10. 06-20-2007, 08:22 PM #10
    amd0freak
    amd0freak is offline
    Join Date
    May 2007
    Posts
    333

    Default

    i gotta search google for amateur phpbb forums haha
    ...........................
    Reply With Quote Reply With Quote
  11. 06-20-2007, 08:28 PM #11
    budlight
    budlight is offline
    ahhaha budlight's Avatar
    Join Date
    Feb 2005
    Posts
    2,901
    Send a message via AIM to budlight

    Default

    did you try 0 or 0=0

    it sounds like if it was simply 0 it is just a coding bug
    Warning: include('signature') [function.include]: failed to open stream: No such file or directory in eval'd code on line 38
    Warning: include() [function.include]: Failed opening 'signature' for inclusion (include_path='.:/usr/local/php5/lib/php') in eval'd code on line 38
    Motorcycle Wiki
    Reply With Quote Reply With Quote
  12. 06-20-2007, 08:29 PM #12
    amd0freak
    amd0freak is offline
    Join Date
    May 2007
    Posts
    333

    Default

    oh. well i did try just 0

    0=0 doesnt work

    edit: on this particular one
    ...........................
    Reply With Quote Reply With Quote
  13. 06-20-2007, 08:32 PM #13
    budlight
    budlight is offline
    ahhaha budlight's Avatar
    Join Date
    Feb 2005
    Posts
    2,901
    Send a message via AIM to budlight

    Default

    just weak pw or bad coding not sql injection at all.
    Warning: include('signature') [function.include]: failed to open stream: No such file or directory in eval'd code on line 38
    Warning: include() [function.include]: Failed opening 'signature' for inclusion (include_path='.:/usr/local/php5/lib/php') in eval'd code on line 38
    Motorcycle Wiki
    Reply With Quote Reply With Quote
  14. 06-20-2007, 08:33 PM #14
    Lil Miss Carob Snuggles
    Lil Miss Carob Snuggles is offline
    i am a larg fagit c0cktarde Lil Miss Carob Snuggles's Avatar
    Join Date
    Jun 2005
    Location
    Syracuse, NY
    Posts
    6,177
    Send a message via AIM to Lil Miss Carob Snuggles

    Default

    Quote Originally Posted by budlight View Post
    just weak pw or bad coding not sql injection at all.
    ~RouND HerE wE ReP Dem GoTCHa BoYz~

    dont like my posting or want to threaten me? call 617-283-1555
    email Dem GoTCHa BoYz
    Reply With Quote Reply With Quote
  15. 06-20-2007, 08:35 PM #15
    budlight
    budlight is offline
    ahhaha budlight's Avatar
    Join Date
    Feb 2005
    Posts
    2,901
    Send a message via AIM to budlight

    Default

    sql injection would be like
    ' or 1=1
    basically changing the where clause from say

    select top 1 uid from table where pwdhash = 'kjlafdsjkafskldasljf'
    to
    select top 1 uid from table where pwdhash = 'kjlafdsjkafskldasljf' or 1=1
    Warning: include('signature') [function.include]: failed to open stream: No such file or directory in eval'd code on line 38
    Warning: include() [function.include]: Failed opening 'signature' for inclusion (include_path='.:/usr/local/php5/lib/php') in eval'd code on line 38
    Motorcycle Wiki
    Reply With Quote Reply With Quote
  16. 06-20-2007, 08:36 PM #16
    amd0freak
    amd0freak is offline
    Join Date
    May 2007
    Posts
    333

    Default

    Quote Originally Posted by budlight View Post
    sql injection would be like basically changing the where clause from say

    to
    ok i see the difference now. thanks. so it was a cheap exploit cause of a glitch they must have set the forum/sql database up incorrectly
    ...........................
    Reply With Quote Reply With Quote
« previous thread | o | next thread »

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules