Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: how to exploit SQL INJECTION? |
|---|---|
| Date: | Fri, 24 Jun 2005 21:55:24 +0300 |
Maybe ill be busted , me, but not all, If in Israel I cant Write an article against the army, why should I take as my limit a stupid law that allow to killers make difussion of their sickness religious and nationalists?... Why I should shut my mouth in country under "democracy"?...Im not hacker, and is not something important for me to be, I want learn about security because I like computers, and I want learn to hack because is the one method some people have to express their ideas, if I say in the street "israel is killing arabians like beatles" the people will kill me legally, continue searching in google about other people that dont think like u...u see like police...good luck,bye. On 6/22/05, Dave Korn <davek_throwaway@hotmail.com> wrote:
----Original Message----From: Pablo Escobar Message-Id: fce05b5e0506211406bd92508@mail.gmail.comHello people, I made in my network website server with SQL with vulnerabilities to learn how to exploit it, I searched in google and i tried but dont work, the report of the nessus is: The following URLs seem to be vulnerable to various SQL injection techniques : /resources/expand_subject.asp?id='UNION' /resources/expand_subject.asp?id='[...snip!...]/resources/expand_subject.asp?id=') or ('a'='a now,how can I exploit it?,somebody can guide me plz?,thank u very much,good luck.Fascinating. This appears to be a *very* precisely-targeted request: according to google, there are only three websites on the entire web that use the software you're trying to exploit. As if by an astonishing coincidence, they're all zionist-related sites, so I suppose must be considered politically controversial. And you did make a post to the hackresi list back at the start of May claiming to be an Israeli libertarian-communist with anarcho-Kropotkinist leanings and wanting to make contact with other hacktivists. Are you planning a skiddie-style defacement spree? Can we all watch as you get busted because you've left your fingerprints all over it before you even get started? cheers, DaveK -- Can't think of a witty .sigline today.... _______________________________________________ Nessus mailing list Nessus@list.nessus.org http://mail.nessus.org/mailman/listinfo/nessus
_______________________________________________ Nessus mailing list Nessus@list.nessus.org http://mail.nessus.org/mailman/listinfo/nessus
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Infopop UBB Threads Multiple Vulnerabilities, GulfTech Security Research |
|---|---|
| Next by Date: | Re: Solaris 10 /usr/sbin/traceroute vulnerabilities, David T. Moraski II |
| Previous by Thread: | Re: how to exploit SQL INJECTION?, Dave Korn |
| Next by Thread: | [Full-disclosure] iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Multiple SQL Injection Vulnerabilities, iDEFENSE Labs |
| Indexes: | [Date] [Thread] [Top] [All Lists] |