I drank some coffee at night, I can't sleep, I will watch the movie. After reading the movie, two points, still can't sleep, go online to see the work.
Yesterday, my brother gave me to Dalian a big group (very big ...) Applicable, I went to see it, so on their website, yesterday is the brigade of the network management position of their network, but I want It is definitely a stone sea, so I will go to other subsidiaries, this is good, there is a mistake, halo ... SQL injection vulnerability, so call, detect ... and then detect ... The subsidiary stands out, get it The authority is ...
However, the subsidiary is used by the Access database, and the SQL database used by the total group, well, get SA authority, but unfortunately, it is not open, too lazy to open it, anyway, it can be fully controlled by 80, Hoho ... The administrator password in the database is not encrypted, clear text ... (this year is very rare!)
This is good, what company website background, server hard disk, all make eaves a time, of course, even the principle of paying attention, did not see their internal information, did not delete them, no change their database, but I think, can I apply? ? ? This is a great opportunity ... Suddenly I found that the main page of their company is developed by another software company, go to that software company to see, dizzy, such a company counts, his homepage is entirely HTML Do it, and a system of online demo, the same SQL injection, too lazy to see again ... .......... Well, go to sleep, give them a resume in the past, haha ...
Hurry and get off the line, change IP first ...
