Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]

Re: how to exploit SQL INJECTION?

Subject: Re: how to exploit SQL INJECTION?
Date: Fri, 24 Jun 2005 21:55:24 +0300
Maybe ill be busted , me, but not all, If in Israel I cant Write an
article against the army, why should I take as my limit a stupid law
that allow to killers make difussion of their sickness religious and
nationalists?...
Why I should shut my mouth in country under "democracy"?...Im not
hacker, and is not something important for me to be, I want learn
about security because I like computers, and I want learn to hack
because is the one method some people have to express their ideas, if
I say in the street "israel is killing arabians like beatles" the
people will kill me legally, continue searching in google about other
people that dont think like u...u see like police...good luck,bye.


On 6/22/05, Dave Korn <davek_throwaway@hotmail.com> wrote:
----Original Message----
From: Pablo Escobar
Message-Id: fce05b5e0506211406bd92508@mail.gmail.com

Hello people, I made in my network website server with SQL with
vulnerabilities to learn how to exploit it, I searched in google and i
tried but dont work, the report of the nessus is:


The following URLs seem to be vulnerable to various SQL injection
techniques :

/resources/expand_subject.asp?id='UNION'
/resources/expand_subject.asp?id='

 [...snip!...]

/resources/expand_subject.asp?id=') or ('a'='a

now,how can I exploit it?,somebody can guide me plz?,thank u very
much,good luck.

  Fascinating.  This appears to be a *very* precisely-targeted request:
according to google, there are only three websites on the entire web that
use the software you're trying to exploit.

  As if by an astonishing coincidence, they're all zionist-related sites, so
I suppose must be considered politically controversial.

  And you did make a post to the hackresi list back at the start of May
claiming to be an Israeli libertarian-communist with anarcho-Kropotkinist
leanings and wanting to make contact with other hacktivists.

  Are you planning a skiddie-style defacement spree?  Can we all watch as
you get busted because you've left your fingerprints all over it before you
even get started?

    cheers,
      DaveK
--
Can't think of a witty .sigline today....



_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>