sepo

Online Classroom website of The Globe and Mail! hacked today

Jul 5th, 2011
381
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.10 KB | None | 0 0
  1. Hi! I'm sepo. For today my target was http://globeclassroom.ca/. It was hacked by a simple SQL Injection. All the data (login email, password, first & second name, adress, school etc.) is dumped to one of my virtual server's. I was thinking about a deface, but this wasn't a good idea. Your sec sux! Your data can be stolen! This is a part of #Antisec.
  2. Expect us!
  3.  
  4. Target: http://globeclassroom.ca/page.php?pageid=ELRN01
  5. Host IP: 67.192.70.242
  6. Web Server: Apache/2.0.52 (Red Hat)
  7. Powered-by: PHP/5.2.17
  8. DB Server: MySQL Blind
  9. Current DB: classroomedition
  10.  
  11. Tables:
  12. --------------------
  13. Settings
  14. Sets
  15. Members
  16. hits
  17. cms
  18. ....
  19. etc.
  20. --------------------
  21.  
  22. Members.table:
  23. --------------------
  24. id
  25. created
  26. email
  27. password
  28. first
  29. last
  30. position
  31. school
  32. adress1
  33. adress2
  34. city
  35. prov
  36. postal
  37. telno
  38. faxno
  39. school_url
  40. subjects_taught
  41. grades_taught
  42.  
  43. There ~4000 members in this database. All the emails can be compromise because of their weak passwords.
  44.  
  45. This is it for the moment!
  46.  
  47. Wait for new attack's!
  48.  
  49. We'll be back soon!
Add Comment
Please, Sign In to add comment