Forced Profiles

EvercookiesSQL injection with raw MD5 hashes

gizmore

Posizione globale: 198

Punteggio totale: 110647

Posts : 1795

Grazie: 1390

Voti+: 961

Registrato: 18a 259gg

Ultima visita: 65gg 16ore

L'utente è Offline

Invia E-Mail a gizmore

Forced Profiles
26 Set 2010 - 18:32:09 (16a 38gg) Google/traduci1Grazie!3Bel post!0Brutto post! Link

Recently i stumbled upon a funny "hack".

A guy on twitter.com has created an account named "userdoesntexist".

The result is that some searches with no match will redirect you to his twitter profile: http://twitter.com/userdoesntexist

I think that`s a very funny hack and worth to share.

The same "weakness" might exist on plenty of sites, at least
WeChall4 is totally vulnerable.

Happy Challenging!

The geeks shall inherit the properties and methods of object earth.

shadum

Posizione globale: 76

Punteggio totale: 227334

Posts : 245

Grazie: 420

Voti+: 281

Registrato: 17a 310gg

Ultima visita: 2a 106gg

L'utente è Offline

RE: Forced Profiles
26 Set 2010 - 19:13:22 (16a 38gg) Google/traduci2Grazie!1Bel post!0Brutto post! Link

haha !!! That's brilliant.

quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq utenti hanno sottoscritto il thread e ricevo le E-Mail di notifica.
1 persone stanno visualizzando il thread.
Questo thread è stato visualizzato 4603 volte.

PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6

Backtrace starts in [unknown file] line ?. GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109. GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.