SQL-Injection On Fajri Web (Easy)

[+]Exploit Title: Fajri Web Solutions SQL-Injection Vulnerability [+]Author: DarkOct02 [+]Team: Garuda Tersakti 72 [+]Goolge Dork: "inurl:/php?id= intext:by Fajri.com" [+]Tested on: Windows 10 [+]Vendor: https://www.fajri.com ======================================= [+]Proof Of Concept: First, you can find inject points in the section about us, or wherever they are in the parameters section of the id. [+]Exploit: ' union all select 1,2,3,4,5-- - Or you can inject manually or with SQLmap [+]Login: Administrator Admin Adminweb [+]Demo? No Demo ^^ Happy Injecting~ Greetz: ./Sn00py - Indonesian Code Party - Khatulistiwa - RSFLT - N45HT - PacmanCorp - AllindonesiaDefacer

Скачать видео