Monday, March 21, 2011

gate score script..


#copy paste the code below in linux, and save as .sh file
num=###start number######
add=2
max=2180000
for (( ; ; ))
do
num=$(($num + $add))
str=" --post-data tInput="$num" -O "$num".html #######link here######"
echo $str
sleep 1
if [ $num -eq $max ]
then init 0
fi
done
#when you run it, it will download the gate scores (replace the info between hashes... with desired ones..)
#i just wrote the script for experiment.. please don't misuse it..!!!

Monday, February 28, 2011

sql injection attack...

it is a pretty neat idea actually... based in facts like most sql servers allow multiple queries with use of a ';'
eg:
query1;quert2;
so imagine a query
select money from salary where name="(an input from textbox!!)"
if I input mayur.. it should give my salary..
if i write the line below in the textbox...
mayur";update salary SET money=1000000000 where name="mayur
the queries executed are:
1)select money from salary where name="mayur";
& 2)update salary SET money=1000000000 where name="mayur"
so I am rich now!!!..
also for login if we checkin sql password="(input from textbox)"
for input
haha" OR "1"="1
you'll be logged in!!! no need to know the password...