Show Posts
1
Hacking and Security / Re: Short URL | Threaded Mode | Linear Mode Cookie injection - Need help!! Read mo
« on: November 19, 2014, 08:22:02 AM »
Cracked this one.
Used: SELECT*FROM users WHERE name =''OR'1'='1'--;
Gave that in the password cookie and the site was cracked.
Staff note: removed the strange formatting
Used: SELECT*FROM users WHERE name =''OR'1'='1'--;
Gave that in the password cookie and the site was cracked.
Staff note: removed the strange formatting
Also, the response cookie contains the original set of username(agentjax) and password(password_here), which means I need to inject in POST method if I am not wrong... I am struck here and not sure how to bypass the authentiation!