Hoşgeldin Misafir

Fransa Bordeaux university - Patlatın gitsin

QARAKURT

QARAKURT

inna lillahi ve inna ileyhi raciun
Üye Yöneticisi
dağlar
9 Mar 2024
554 Mesaj
TIM Görevleri
2

Aktiflik

Seviye

Deneyim

TIM / GÖREV:
Dün gece kurcaladım. Olmayan güvenlik açığı yoktur. :D
Dün sadece dizin keşfi için Burp-Suite başlattım, sonuçlar ortada.
Rapor dosyasını sizinle paylaşıyorum.
Benim sabrım kalmadı onunla uğraşmaya. Zamanı olan var ise indirsin :)

SQL injection ile de Backdoor yükleye bilirsiniz. Size kalmış geri kalanı

target : services.cbib.u-bordeaux.fr
Veritabanı :
Kod:
Database: public                                                                                                                                                                          
Table: user_e
[46 entries]
+----------------------------------------+-----------------+----------------------------------------------+----------+
| email                                  | login           | passwd                                       | is_owner |
+----------------------------------------+-----------------+----------------------------------------------+----------+
| [email protected]                | Melrip          | 4379ddc427c063420b7ab5b465100fbd (cucumis)   | false    |
| None                                   | www             | 7dcf94251077d1127ff4953027712970             | false    |
| none                                   | metabop         | 8d30568c8653e7266372b59cbdf9080b             | false    |
| none                                   | metabop2        | e9f85609d1899ce82bd1bb0940ff86a3 (metabo07)  | true     |
| [email protected]                   | umr8618         | c7fd1b17c2b02f1f4e09bd100a4cdcfa             | true     |
| [email protected]          | ur11511         | 7e39b1a223cb57b76aad96fc871b1098             | false    |
| [email protected]  | Metasys31       | 9d9249dda2dfcb2a2d33fa6c5dd08ece (Metasys31) | false    |
| [email protected]       | JLP2009         | 736bc11ddfd81708a9fdfb1a89db1934             | false    |
| [email protected]                        | medicago        | 6717aa6decb647e99fceaf5deb635355             | false    |
| [email protected]              | MetaPhor        | d7a84628c025d30f7b2c52c958767e76 (2010)      | false    |
| [email protected]                  | cadmium         | 006f87892f47ef9aa60fa5ed01a440fb (tomato)    | false    |
| [email protected]       | tomato_jp       | faa74f93aa715f2451396eee4f9cb32e             | false    |
| [email protected]               | mvgomez         | 003a7a31070e78673462a463d014a64c             | true     |
| [email protected]               | medicago2       | 6717aa6decb647e99fceaf5deb635355             | false    |
| [email protected]                  | admin           | 1af1a669840dfd7bac20352d54dd480c             | true     |
| [email protected]       | Will            | 11dbcef5c7a14bbbe2af19d5b6cd5281             | true     |
| [email protected]                 | New_Phytol      | 14acc193f101620389d4405cde7c80ca             | false    |
| [email protected]             | tscherf         | 166ffbdcb9047518750b87c63957060f             | true     |
| [email protected] | arondel         | 1872ef4d81e2f1ac1ff75de4f9bcb5e8 (palmier11) | false    |
| [email protected]       | guest_ht_tomato | 006f87892f47ef9aa60fa5ed01a440fb (tomato)    | false    |
| [email protected]                   | umr1332         | 865a49c027df03600765fc607bede86b             | false    |
| [email protected]                | melissa         | 6ced491e22b12f40326f56a7722b68b9             | true     |
| [email protected]                   | beta            | c9dba2e5578bee4933cc89c7157d4974 (vulgaris)  | false    |
| [email protected]                 | Peach           | 05bf7bcca7bcbfd0f63ddc3b6acb65c9             | false    |
| [email protected]            | palama          | 500bfa225619fc614b33e69e65af2a06             | true     |
| [email protected]                       | Ric             | 4730772b1ade51d312e802b05fb9f6e8             | false    |
| [email protected]              | JAFC            | 7b61f36253beabf5083ddc17d9bcf746             | false    |
| [email protected]       | Florence        | bfc6c5052e6d5b176ba25c575a9b899c             | false    |
| [email protected]            | FRIM            | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                | kirleymc        | bd60d4962cbf8a235948e53862b7578d (251201)    | false    |
| [email protected]                               | review          | 6de3573f7252e876a9d105715a38df5e             | false    |
| [email protected]                       | plantago        | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]         | amoeba          | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                | UR BIA          | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                | csiro           | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                | thevenot        | 2501c8ad30cbb542083028dea6be9db7             | false    |
| [email protected]         | BioPI           | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]              | Guest reviewer  | 856da289db6849a9a9f31bcb1c0f6b52             | false    |
| [email protected]                  | pmfb            | 7e6eef6f4e4f4494595a4a2e11c21dd8             | false    |
| [email protected]              | Guest Reviewer  | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                  | djacob          | 1af1a669840dfd7bac20352d54dd480c             | false    |
| [email protected]                  | tomato          | 1af1a669840dfd7bac20352d54dd480c             | false    |
| [email protected]       | SVQV            | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]         | UMR GDEC        | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                 | umr619          | 415d5057b9fa17899b5552643dd3ad93             | true     |
| [email protected]              | cdeborde        | 936ae025888db267bc36fa450182d629             | true     |
+----------------------------------------+-----------------+----------------------------------------------+----------+
{!} metabop2 kullanıcısı üzerinden login olmanızı öneriyorum.
Rapor resim :


bmtjxqm.png


 
Moderatör tarafında düzenlendi:

duzsozluk

7 Mar 2024
60 Mesaj

Aktiflik

Seviye

Deneyim

TIM / GÖREV:
Dün gece kurcaladım. Olmayan güvenlik açığı yoktur. :D
Dün sadece dizin keşfi için Burp-Suite başlattım, sonuçlar ortada.
Rapor dosyasını sizinle paylaşıyorum.
Benim sabrım kalmadı onunla uğraşmaya. Zamanı olan var ise indirsin :)

SQL injection ile de Backdoor yükleye bilirsiniz. Size kalmış geri kalanı

target : services.cbib.u-bordeaux.fr
Veritabanı :
Kod:
Database: public                                                                                                                                                                          
Table: user_e
[46 entries]
+----------------------------------------+-----------------+----------------------------------------------+----------+
| email                                  | login           | passwd                                       | is_owner |
+----------------------------------------+-----------------+----------------------------------------------+----------+
| [email protected]                | Melrip          | 4379ddc427c063420b7ab5b465100fbd (cucumis)   | false    |
| None                                   | www             | 7dcf94251077d1127ff4953027712970             | false    |
| none                                   | metabop         | 8d30568c8653e7266372b59cbdf9080b             | false    |
| none                                   | metabop2        | e9f85609d1899ce82bd1bb0940ff86a3 (metabo07)  | true     |
| [email protected]                   | umr8618         | c7fd1b17c2b02f1f4e09bd100a4cdcfa             | true     |
| [email protected]          | ur11511         | 7e39b1a223cb57b76aad96fc871b1098             | false    |
| [email protected]  | Metasys31       | 9d9249dda2dfcb2a2d33fa6c5dd08ece (Metasys31) | false    |
| [email protected]       | JLP2009         | 736bc11ddfd81708a9fdfb1a89db1934             | false    |
| [email protected]                        | medicago        | 6717aa6decb647e99fceaf5deb635355             | false    |
| [email protected]              | MetaPhor        | d7a84628c025d30f7b2c52c958767e76 (2010)      | false    |
| [email protected]                  | cadmium         | 006f87892f47ef9aa60fa5ed01a440fb (tomato)    | false    |
| [email protected]       | tomato_jp       | faa74f93aa715f2451396eee4f9cb32e             | false    |
| [email protected]               | mvgomez         | 003a7a31070e78673462a463d014a64c             | true     |
| [email protected]               | medicago2       | 6717aa6decb647e99fceaf5deb635355             | false    |
| [email protected]                  | admin           | 1af1a669840dfd7bac20352d54dd480c             | true     |
| [email protected]       | Will            | 11dbcef5c7a14bbbe2af19d5b6cd5281             | true     |
| [email protected]                 | New_Phytol      | 14acc193f101620389d4405cde7c80ca             | false    |
| [email protected]             | tscherf         | 166ffbdcb9047518750b87c63957060f             | true     |
| [email protected] | arondel         | 1872ef4d81e2f1ac1ff75de4f9bcb5e8 (palmier11) | false    |
| [email protected]       | guest_ht_tomato | 006f87892f47ef9aa60fa5ed01a440fb (tomato)    | false    |
| [email protected]                   | umr1332         | 865a49c027df03600765fc607bede86b             | false    |
| [email protected]                | melissa         | 6ced491e22b12f40326f56a7722b68b9             | true     |
| [email protected]                   | beta            | c9dba2e5578bee4933cc89c7157d4974 (vulgaris)  | false    |
| [email protected]                 | Peach           | 05bf7bcca7bcbfd0f63ddc3b6acb65c9             | false    |
| [email protected]            | palama          | 500bfa225619fc614b33e69e65af2a06             | true     |
| [email protected]                       | Ric             | 4730772b1ade51d312e802b05fb9f6e8             | false    |
| [email protected]              | JAFC            | 7b61f36253beabf5083ddc17d9bcf746             | false    |
| [email protected]       | Florence        | bfc6c5052e6d5b176ba25c575a9b899c             | false    |
| [email protected]            | FRIM            | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                | kirleymc        | bd60d4962cbf8a235948e53862b7578d (251201)    | false    |
| [email protected]                               | review          | 6de3573f7252e876a9d105715a38df5e             | false    |
| [email protected]                       | plantago        | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]         | amoeba          | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                | UR BIA          | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                | csiro           | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                | thevenot        | 2501c8ad30cbb542083028dea6be9db7             | false    |
| [email protected]         | BioPI           | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]              | Guest reviewer  | 856da289db6849a9a9f31bcb1c0f6b52             | false    |
| [email protected]                  | pmfb            | 7e6eef6f4e4f4494595a4a2e11c21dd8             | false    |
| [email protected]              | Guest Reviewer  | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                  | djacob          | 1af1a669840dfd7bac20352d54dd480c             | false    |
| [email protected]                  | tomato          | 1af1a669840dfd7bac20352d54dd480c             | false    |
| [email protected]       | SVQV            | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]         | UMR GDEC        | 11dbcef5c7a14bbbe2af19d5b6cd5281             | false    |
| [email protected]                 | umr619          | 415d5057b9fa17899b5552643dd3ad93             | true     |
| [email protected]              | cdeborde        | 936ae025888db267bc36fa450182d629             | true     |
+----------------------------------------+-----------------+----------------------------------------------+----------+
{!} metabop2 kullanıcısı üzerinden login olmanızı öneriyorum.
Rapor resim :


bmtjxqm.png


Raporlar :
indir : Tam Rapor
indir : Yalnız önemli zaafiyyetler
Bu alet edavatlar bende de çalışsa halledicemde çalışmıyor bize gelince