GHIMAU'S DOMAIN

GFI Languard 8.0

Posted by ghimau under misc

Downloaded the new version of languard http://www.gfi.com/lannetscan/
Did'nt have much time to test it though.

Splash screen - looks the same as version 7.0

Performing a remote test on aunty virus's pc. :)

8 comments

Ah so boring.. to teach microsoft powerpoint..
Trying to do a POC on XSS. Just popping a simple alert dialog box.
[script]alert('POC of XSS by ghimau')[/script]

Click here : http://www.danceinterrupted.com/guestbook.asp

Do redirect to another page, making it looks like been defaced, use this script.
[script]window.location = "http://www.google.com"[/script]

1 comments

SQL Injections

Posted by ghimau under misc

While helping Abg Mazani teaching Powerpoint Course, I did 'try' some sites hunting for sql injections login bypass.

Kak Zaimah did'nt come to ofiice today.

Indian Jurnal Site login page

Logged in as the first user

Got the username

Cineplex login page

Logged in :)

Target : http://219.94.87.77/BP/Asps/Login/default.asp
Table UserAcc
Column varUserID,varUserPwd

Keyword is : blind *ql hihihi

2 comments

Latest Points

Posted by ghimau under

My latest points on Hellbound Hackers :)

Hackers are here, where are you?

2 comments

Isk..Isk.

Posted by ghimau under

Isk..Isk.. While I was creating the report for 'Pertandingan Laman Web', I noticed that En. Aziz's marks is missing. I told aunty virus about that.

We were busy searching the file, almost 1 hour of blind search! The file was on Kak Liza's table all the while! Hampeh!

The sad thing is that, the file is about 2 inchies thick.. and I have to review the marks.. Ah! 'Tidak!'

2 comments