working on another site if anyone wants to join

found another site that is vuln to sqli. just got to find the username and password column and team unknown should have another deface bc the admin login is on the same page www.findlocalplayers.com/folder.php?id=1

got password hashes but dont have good dictionaries. i cracked one but wasnt admin, if anyone has good dictionaries can u try to crack these hashes please.

1d19bc6636a1ca3ffa3bd1f44b47e722
e7925c822e7e3ca46b4e33fbc5650130
cb0448d3aca7d96498775cd3a06341fe
3e9b57d83d1aa4d48fb6f88a8b4074bd
d861e29132da22dd02e54be791e078e0
17b3254aeb4971b4fb23b6fd3cd03270
caa1d35022daa3d61521260f6cdf0116
a79bc3a3f1708c1d905ba6a9e9404774
cb0448d3aca7d96498775cd3a06341fe
cb0448d3aca7d96498775cd3a06341fe

I'll help you out bro. I'll start working on the hashes

okay thanks ichi! and right now i just found another site so im going to try and work some more on those hashes and getting more hashes from this other site im finding sites vuln. to sqli today so easily!

Here are the results I got. Let me know if they work

Code:

1d19bc6636a1ca3ffa3bd1f44b47e722 
e7925c822e7e3ca46b4e33fbc5650130 - 38de427224
cb0448d3aca7d96498775cd3a06341fe - a7454029
3e9b57d83d1aa4d48fb6f88a8b4074bd - 66l79UB731
d861e29132da22dd02e54be791e078e0 - 8JmL0N7813
17b3254aeb4971b4fb23b6fd3cd03270 
caa1d35022daa3d61521260f6cdf0116 
a79bc3a3f1708c1d905ba6a9e9404774 - Funny05
cb0448d3aca7d96498775cd3a06341fe -  a7454029
cb0448d3aca7d96498775cd3a06341fe - a7454029

Found a site vuln to injection lolol. I'm working on it now

okay ichi none of those passwords worked for the admin email, but we have narrowed it down to two hashes that we havent cracked yet. One of these two hashes has to be the password.


caa1d35022daa3d61521260f6cdf0116
1d19bc6636a1ca3ffa3bd1f44b47e722

hey ichi if you need any help on your site your working on post info and ill gladly help with anything i can!

Okay

I need the admin page for http://www.seasideheightstourism.com/single_event.php?id=28

The login info is unbelievably easy haha. I just have to find where to login

okay ichi i have an admin page scanner, but if that wont find it and u have windows havij is a really good tool that has a built in admin finder. or there is a few online pages.

http://www.seasideheightstourism.com/admin/ also my scanner picked up alot more of logins but they all look similar to this

The login info I found for that site was false

I got a different site though. Can you check to see if you can access http://www.spraywaysingapore.com/admin

It keeps timing out for me and I have the login info D:

awwww that sucls and yea the page pulled up for me. whats the login info and ill see if i can get in and upload a shell for you?

try this

username - admin
password - pacific#34

success ill see if i can upload the shell and then ill post the link if it works

Great! Hopefully you can shell it then maybe we can root it

I got in. Changed admin's password to

teamunknown

ichi did u get in? because i just like watched the page change from something to team unknown was here lol and im trying to upload shell but having trouble.

Yep I'm in haha. I'm just messing with the text on the different pages. I'll see if I can get FTP access or upload a shell.

haha yea i can see bc im not changing the text pretty funny but i tried uploading shell from the video tab but it kept giving me error messages. maybe ftp access would work though.