Fiz um Scanner no site Repórter Brasil é constatei algumas vulnerabilidades em SQL Injection e XSS.
Como năo sou interessado em fazer defacer em sites, estou postando aqui para que outras pessoas possam fazer estudos.
Script usado para scanner o site: SQL Injection Vulns Security.php
alguns user em MD5:
Como năo sou interessado em fazer defacer em sites, estou postando aqui para que outras pessoas possam fazer estudos.
Script usado para scanner o site: SQL Injection Vulns Security.php
Site: Apenas usuários registrados e ativados podem ver os links., Clique aqui para se cadastrar...
IP Host: 187.45.193.161
Web Server: Apache
Palavra-chave: Assine
Tipo de injeçăo é String (#'#'#'#''1'2'3'4'5'6'7'8'9'0)
DB Server: MySQL
Contagem de coluna selecionada é de 6
Coluna válido String é de 2
DB atual: reporterbrasil4
Data Base Found: information_schema
Página de admin: Apenas usuários registrados e ativados podem ver os links., Clique aqui para se cadastrar...
IP Host: 187.45.193.161
Web Server: Apache
Palavra-chave: Assine
Tipo de injeçăo é String (#'#'#'#''1'2'3'4'5'6'7'8'9'0)
DB Server: MySQL
Contagem de coluna selecionada é de 6
Coluna válido String é de 2
DB atual: reporterbrasil4
Data Base Found: information_schema
Página de admin: Apenas usuários registrados e ativados podem ver os links., Clique aqui para se cadastrar...
Código HTML:
2 Dani Matielo fdd051d13a5a9a86ce86a71a81936353 3 paulag83 b80db3842a87fbd290a46f4b6894fe59 4 Rodrigo Ratier 8ff1e2cc9263e228f07d0b3d8afbb9ba 5 Apost?lica Online 22086f1162691d77fcbd8c35f33b7d4e 6 oratga3 166c091d41c842034ebcfe9114fb6efa 8 tarfwa3 46d33a19e0e8f5acf66b35aed4e3301b 9 i4vacfr 3d45b72748c2138f9d43fb8e27dc3048 10 dolorba 9c662d8ca8279c3ecbfd4af30462f938 11 parxdam fa53412a69ae0b7255c3329622a5a52b 12 torarba 0f7720067ec62e2431fa7b9948bca67f 13 sokakad 0f7720067ec62e2431fa7b9948bca67f 14 deacad a3da88c9a800da17ab3ddb3d038b9e0d 15 poretoms 896d23328a1dea5a9f9aa2d4bae659ad 16 sabanarx 869520abd3f5e7404b0fe67f8e3d80d9 17 garatopa 869520abd3f5e7404b0fe67f8e3d80d9 18 zokirs b5f5603e249dd3986e70254f77992edb 19 rometis 26e29c62002941e7c122030cbd22ee90 20 serarva e65efa94cf945497f8a4890b4022e5a2 21 rekasde 568057940b8f00b3e0e85249b3a3f522 22 opradbe e3bd09f4813aa1bd7fcab3ff200451f1 23 ornaease c2be183e95ccea4255307566b0d0afc9 24 rozamert 726649f1272fc272202a8f9050ea3902 25 Aldenor Luiz da7b2bbe18b45425340a6d56181af1b9 26 stibople cea19f66ab4a290432de35a96625b2e2 27 jorokame 453a2773491006605d69a8561a439896 28 tarikija 736e054e271d11a8e1ace48e585a4d52 29 keratim a32f56ed06b385321a0a5f78d48d24da 30 nagatis1 8831f9bf6f68e7d2a743552f0464011c 31 bazirife 26d41e802eccb0cd6e8454e2e7e85593 32 kirikist abb1c4241c949f47faa559ff4a16a73f 33 sizatef 87263965819e509881a87edd6f730a73 34 bekizir 199c993e786b33cbe499e185c9e5ec1f 35 hasamaf e8218d5cbe0ab6e1185797623ba7df13 36 gusimaf 9ad96f5c9508510547e2015440ea962f 37 sadanar4 b18c9ae2b71ca1526221cbeb040bfa7f 38 nimitos 419f280d1ca1a4ad4a20fb69b9859eab 39 sokareq 49ac49de2e5082b532d8f4e26453d2a4 40 litazes fb350d5e41b61701a6b948c44e8c84f4 41 koromago 7552e8eaebc20312d5755183511fd86c 42 higarot 7c60d03da52f746c23aa40f416497bd1 43 sistorej 9b6f7a8c91ce610573c0e9ae3c659bbf 44 gusama 9b6f7a8c91ce610573c0e9ae3c659bbf 45 zaganef ac238fca69d9d6c1dc9a82f4b86658f3 46 boy69boys 3a6184eda23f5f53c57d436af8e4e51c 47 g-boys-g 38fbd4ab0f4db7f3aef944e4297ce304 48 t-mobile-777 0945fc9611f55fd0e183fb8b044f1afe 49 Bobrikkh 0945fc9611f55fd0e183fb8b044f1afe 50 different game poker rule 0945fc9611f55fd0e183fb8b044f1afe 51 youngboy777 6115ca8d0f28bcae79ee213841ce2c35 52 online poker 0945fc9611f55fd0e183fb8b044f1afe 53 party poker 0945fc9611f55fd0e183fb8b044f1afe 54 siroea 72b27990314d50eb1b7a6055150ef34b 55 paratisk e26dceff860f8112f2557c4c47193f0a 56 makijea 0f9881fda16e72b3adf31df341a15de5 57 rekazofd 144c42697450effc4fdc172bb93e21f6 58 zuppalde 40a081a7abd6584b4cdcb86acc6a5d15 59 texas holdem poker 0945fc9611f55fd0e183fb8b044f1afe 60 poker online 0945fc9611f55fd0e183fb8b044f1afe 61 black7male 6c31fc0f69bbf07cba275ff861d99123 62 free online poker 0945fc9611f55fd0e183fb8b044f1afe 63 texas holdem 0945fc9611f55fd0e183fb8b044f1afe 64 empire poker 0945fc9611f55fd0e183fb8b044f1afe 65 consolidate 0945fc9611f55fd0e183fb8b044f1afe 66 joceli oliveira 39027dfad5138c9ca0c474d71db915c3 67 poker 0945fc9611f55fd0e183fb8b044f1afe 68 automated forex 0945fc9611f55fd0e183fb8b044f1afe 69 casino job mohegan sun 0945fc9611f55fd0e183fb8b044f1afe 70 mojter5 b0ce0de6d1f8850b90bff43f0f7a121b 71 telemow 2967f0258114ad625ba814d56f3ad686 72 stock trading education 0945fc9611f55fd0e183fb8b044f1afe 73 true tone ring tones 0945fc9611f55fd0e183fb8b044f1afe 74 sprint ringtones 0945fc9611f55fd0e183fb8b044f1afe 75 subprime loans 0945fc9611f55fd0e183fb8b044f1afe 76 Portugal 0945fc9611f55fd0e183fb8b044f1afe 77 Pregnancy 0945fc9611f55fd0e183fb8b044f1afe 78 casino coupon free 0945fc9611f55fd0e183fb8b044f1afe 79 day trading information 0945fc9611f55fd0e183fb8b044f1afe 80 day trading stock online 0945fc9611f55fd0e183fb8b044f1afe 81 ataerta c27904784b5a6a9e24cb9311a17f8795 82 juego 441fe6d21e9d0068839721e30cb4dfeb 83 pippo666 441fe6d21e9d0068839721e30cb4dfeb 84 LXTdmQzA 533a92e838bb60d93e9304c89ab8643e 85 Claudia Herte bc763102451813fb0771ef32f19ee8e0 86 bebel_saqua 3cdf17c9bfe55686f99b6f313f5917d1 87 ZubHX 8376038d1d8d6740a6603b6570324056 88 alice d9292c5677b5989aae01a86a509201d5 89 diegopolo 24c612fa329dfbe785d892c271ceba25 90 Mirra b01f1282a7be07f0d4d257a115d39f00 91 Ethan Kay 5f9a18aa64dc1ef92d810588b336b31d 92 Adrien Imrie b2aeab1bb3781da9ae8951e9495c64bf 93 Wedalley 20ee1788771441426a6af3e285b9f58c 94 Ralph Postlethwaite e346e663fd65953291b0ba089b3c021c 95 Kittyparker 20ee1788771441426a6af3e285b9f58c 96 Timothy Hanks 6d12b1e14bbfc0793aa20451e54a7801 97 c?lia regina a742ffaaf7b29dd965ab76688bb60791 98 Wedalley2 20ee1788771441426a6af3e285b9f58c 99 Chiwetel Statham b0179e2c86f7b7a30e71db20a93791f8 100 Debra David 6d711240ca313ad17ddfec19d9905565 101 Greta_g 20ee1788771441426a6af3e285b9f58c 102 VeeWFB 98efbc636f5712821095ee1e4df3851b 103 Judi Smith 827f9fbabaf401adfb6b377e0a09ad25 104 littlegown 20ee1788771441426a6af3e285b9f58c 105 btapixon cedff3faab27ac7426563fc17139095a 106 gosotmepos 3339432258df3375159cffe869044791 107 Johnny Holmes cca7acd6d0179de92ea27f0a7152e5ca 108 sorapteki 81c05bb0fb9c234ac122263f63617139
Comment