how to hack webserver's database ?

Bad threads go here

how to hack webserver's database ?

Post by tcx5 on Fri Aug 23, 2013 8:22 pm
([msg=76996]see how to hack webserver's database ?[/msg])

how many ways ?
i want to accept, add, delete, change, ... data's value . Web Server is using MySQL
thanks for your helping.
User avatar
tcx5
New User
New User
 
Posts: 13
Joined: Tue Apr 09, 2013 12:46 pm
Blog: View Blog (0)


Re: how to hack webserver's database ?

Post by Goatboy on Fri Aug 23, 2013 8:24 pm
([msg=76997]see Re: how to hack webserver's database ?[/msg])

*sigh*

I would ban you, but I had my admin rights removed, then had my moderator rights removed, so I'll just... sit back and watch?
Assume that everything I say is or could be a lie.
1UHQ15HqBRZFykqx7mKHpYroxanLjJcUk
User avatar
Goatboy
Expert
Expert
 
Posts: 2823
Joined: Mon Jul 07, 2008 9:35 pm
Blog: View Blog (0)


Re: how to hack webserver's database ?

Post by tcx5 on Fri Aug 23, 2013 8:34 pm
([msg=76998]see Re: how to hack webserver's database ?[/msg])

Goatboy wrote:*sigh*

I would ban you, but I had my admin rights removed, then had my moderator rights removed, so I'll just... sit back and watch?

i want to know that becuz i want to secure my database .
User avatar
tcx5
New User
New User
 
Posts: 13
Joined: Tue Apr 09, 2013 12:46 pm
Blog: View Blog (0)


Re: how to hack webserver's database ?

Post by Goatboy on Fri Aug 23, 2013 8:39 pm
([msg=76999]see Re: how to hack webserver's database ?[/msg])

Oh, well if it's yours then alright.

First you need to scan for vulnerabilities.
Then you need to exploit them.
T͚̰̮o͖͎̲̹̦ͅ ̹̻ͅi̞n͍̕ͅv̹̜̥̖̱̤̼o͙̥͙̮̖k̸͓͔e ̢͖t͈͉͈h̩͙͎̟e̱͇̝͚̲̬̱ ̡̙̪͍͉̜̲ͅh̤̣̜͇̬i̺͎͍͔̜v̵e͇͓̩̠̙̟̝-̲̥̜͙͡m̧͍͖̘̘̣̜i҉n̠͕̭͚̩̹͍d͏̦͇͉͍ͅ r̗̜̥̖̳ę̯̟̖p̯͍̘r̖̰͙̱̰̫e̦͡s̰͉̬̀e̤̥̳̰nt̸̳̪͈i̘̬̺͙͙̠̕ͅn̕g͍̤͓̞ ̢̳̣̤c̶̭̮͍̘ḥa̰̻̼o̵̱̮͙̱̣s̲̝̖͕͔̲.̘
̞̥̞̳̥̥I̢̩̥n̞̺̣̥̺̳v͔o͟k̡͚̮̞̯̲i̲͕̞n̳ͅg̴̜̼̠̬̩̯͚ ̛̮t̖̤̟̱͎̣h͈͢e̤͕̯̕ ̸͎̲̬̲ͅf͙̟͖e̤̤e̢li̩̭̺̘̤͎n̹͉̮͡g̠ ̝͉͕̺ơ͚̝̻̮f͍͓̮ ̢̟̪̥̖̯̗c̟̖̜͙̫͝h̡̙̣̟̰͍̦ͅa͚̤̺͎̦o̢̯̱̺̗̖s̶̬̯̗̱̹̟͉.
̢͙̻̣͖̹͖͙Wi̧̜̦͚͉̩t̢͙̥̘̮ͅh͚̫̪ ̶͎̙̤̼̙o̱ͅu̬̝̖̹̪t̨ ͉͍͔̰͉̻o͚̥̯͡r̖̞̲̤͕̖d̨e̵͍̱̤r͕̥̯̯̣͕.͔
̹͎̜T̝̻͎̠̻͉̘h̗͈̥͖̲͞ę̞̜ ̧̘͉͇̥̖N̡̹͚̻ę̟̠z̶p̘͙͎͝er̵̻d҉̟̩͍̱͚i͕͕͕̮͙̥͎a̴͇̺̜n͏̗ ͍̳̜̬͍h͕̪i̫̹̣͉v̡e͙̠̜̪-̢̺̪̯͖̥͙m̨͚i̱n̙̕d̖̫ ̖̠̫͎͜o̠͕̭͍f̯̜̫̤̗͈ ̝̞̠͓c̛̩̘̱̦̟͚h̹͕͇̜a̴͚̫̖o̸̰͎̦s͍̳.̻̺̹͡ ̹̦͍͕̥̺́Z͕̯̺̬̫̳ͅa̺͔͘l̞̥̞͍̦̯̀g̟̪͟o͖̭.̢͈̦
̩͓̥H̯͔͎̳̩̬ͅe͠ ̜͍͈̳͔͎̹w̳̪ͅh̬̯͉̻̩o̸̳͈̫͈͎͎̣ ̳̰͈̫̝W͏͈̺̘̤͚a͈̤͔̗̺̟̰i̬̗̯͉̻͎̤ṯ̛s̸̥͕̜͉ ҉̙͉͕B͏̙͖̣̗̦e͇͖h̙̺i̧n̵d̲͔̗̦̯̝͢ ̜͕T̶̥̙̫͍h͔̥̯̬̟̺e̘̝ ̬͚͚̠̯͔W̦̦a̤̩̮l̥͙̫̮̰̹ͅḻ̪.̡̦
̖̠Z̫̲̼A̜̬͔͍̜͖ͅL̼̝̟̰̜G̩̻̞͔̭͙O̫̗̙͔̠͘!̦̼̹̤̹͔͡ͅ
Assume that everything I say is or could be a lie.
1UHQ15HqBRZFykqx7mKHpYroxanLjJcUk
User avatar
Goatboy
Expert
Expert
 
Posts: 2823
Joined: Mon Jul 07, 2008 9:35 pm
Blog: View Blog (0)


Re: how to hack webserver's database ?

Post by Tentra on Fri Aug 23, 2013 8:56 pm
([msg=77000]see Re: how to hack webserver's database ?[/msg])

Goatboy is right, just make sure whatever version of MySQL you are running has no publicly known vulnerabilities. Look over your configuration files and make sure everything looks sound. Make sure you sanatize and input that is passed to the database. That's really about all you can do to make sure your database is secure.
User avatar
Tentra
Poster
Poster
 
Posts: 161
Joined: Wed Apr 30, 2008 4:52 pm
Blog: View Blog (0)


Re: how to hack webserver's database ?

Post by -Ninjex- on Fri Aug 23, 2013 11:38 pm
([msg=77001]see Re: how to hack webserver's database ?[/msg])

If you are a developer, you should have been taught the ways to prevent exploits while learning.
Sanatize all input that goes into your database. If you are using PHP make use of mysql_real_escape_string()
SQLi would be the most common type of attack you want to prevent.
If you're not willing to learn, no one can help you. If you're determined to learn, no one can stop you.⠠⠵
The absence of evidence is not evidence of absence.
I can explain it for you, but I can't understand it for you.
^(-.^)>
User avatar
-Ninjex-
Addict
Addict
 
Posts: 1468
Joined: Sun Sep 02, 2012 8:02 pm
Blog: View Blog (0)


Re: how to hack webserver's database ?

Post by mShred on Sat Aug 24, 2013 12:11 am
([msg=77002]see Re: how to hack webserver's database ?[/msg])

Goatboy wrote:but I had my admin rights removed, then had my moderator rights removed, so I'll just... sit back and watch?

That tends to happen when people are gone for.... TWO YEARS :shock:
Git on IRC when I'm on bruh.
Image

For those about to rock.
User avatar
mShred
Administrator
Administrator
 
Posts: 1766
Joined: Tue Jun 22, 2010 4:22 pm
Blog: View Blog (2)



Return to Graveyard

Who is online

Users browsing this forum: No registered users and 0 guests