18 Responses to “National-lottery.co.uk – Sql injection”

1. Cornel Bularca Says:
   February 23rd, 2009 at 4:12 pm

   Vezi ca in Screenshotul 2 se vede query-ul sub address bar images/….

2. Paul Says:
   February 23rd, 2009 at 4:41 pm

   Ce informatii gasesti in tabelele respective? Usr and pwd, sau ai gasit si ceva date mai confidentiale (CC, SSN – britt equivalent, adresa, phone# etc.)?

3. honeybunny Says:
   February 23rd, 2009 at 4:59 pm

   vezi ca e “insusi” adminul

4. Tudor Says:
   February 23rd, 2009 at 4:59 pm

   Am o mica intrebare. In cam toate screenshot-urile voastre vad “tor disabled”. De ce nu-l folositi? E vreun motiv anume? Ce mijloace alternative folositi? Banuiesc ca folositi ceva proxy…..

5. 2fingers Says:
   February 23rd, 2009 at 5:05 pm

   Tor la fel ca si AOL este folosit in cazul in care nu exista riscul de a se interesa cineva “capabil” de tine.
   Deci da, folosim altceva.

6. unu Says:
   February 23rd, 2009 at 5:12 pm

   merci honey

7. miahi Says:
   February 23rd, 2009 at 6:07 pm

   interesanta faza cu 4 injection– .gif… nu stiam ca pot fi si asa

8. Tudor Says:
   February 23rd, 2009 at 6:18 pm

   @2fingers: atata timp cat tii javascript, java si flash dezactivate nu prea are cum sa te gaseasca prin tor. Doar primul server din cele 3-4 stie cine esti, dar ala nu stie la cine te conectezi sau ce faci. Nu prea are cum sa te prinda

9. 2fingers Says:
   February 23rd, 2009 at 10:36 pm

   Da Tudor dar preferam chestiile personale facute cu mana noastra. Plus ca se misca si mai rapid decat prin tor.

10. Tudor Says:
    February 23rd, 2009 at 10:51 pm

    In cazul asta asteptam pe viitor un articol despre cele mai bune moduri de a face ’surfing’ anonim ) Si da….asta a fost un apropo ma intereseaza subiectul

11. whatever Says:
    February 23rd, 2009 at 11:07 pm

    Si pe mine ma intereseaza subiectul ‘anonymous surfing’. Ar fi foarte interesant sa publicati ceva despre asta.

12. altu Says:
    February 24th, 2009 at 3:25 pm

    tudor si pe sox te poate afla? chiar ar prinde bine un articol.

13. Asterixel Says:
    February 24th, 2009 at 8:29 pm

    Un articol despre anononimitate ar fi foarte interesant. Poate chiar niste recomandari de VNC la preturi acceptabile care nu pastreaza loguri

14. Tudor Says:
    February 24th, 2009 at 11:13 pm

    @Asterixel: iti zic eu unul dar pretul nu e tocmai mic. Mai de mult foloseam Findnot. Are servere prin tot felul de tari ‘exotice’ din punct de vedere al legii, gen Panama…etc. Stiu din surse sigure ca e ok si niciodata nu s-a intamplat vreun incident. Doar ca si pretul e pe masura.

15. La página de la lotería inglesa vulnerable a inyección SQL [Eng] Says:
    February 25th, 2009 at 4:27 pm

    [...] La página de la lotería inglesa vulnerable a inyección SQL [Eng]www.hackersblog.org/2009/02/23/national-lotterycouk-sql-inje… por Rafa2 hace pocos segundos [...]

16. .::SRT::. » Blog Archive » La página de la lotería inglesa vulnerable a inyección SQL. Says:
    February 26th, 2009 at 11:53 am

    [...] en National-lottery.co.uk sql injection, by [...]

17. Shokky Says:
    February 27th, 2009 at 7:54 pm

    They are denying this
    http://news.softpedia.com/news/UK-National-Lottery-039-s-Operator-Denies-SQL-Injection-105457.shtml

18. 2fingers Says:
    February 28th, 2009 at 12:37 am

    Lol. This is funny.

Leave a Reply