BlogCadre users see no ads!  Popular topics: humor, video, links, cool, wtf.  Go create an account!




hacking

SQL Injection tool

The boys over at haxademix.net never cease to amaze me, this time rolling out a web based and virtually anonymous SQL injection tool (it's FREE to).

http://evil.hackademix.net/sqlit/

** For those of you who do not know what an SQL injection is...

SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another.

From Wikipedia, the free encyclopedia

have fun and remember it's for EDUCATIONAL purposes :)

Followup

Here's a follow-up to the story I posted here...

It seems as though the accuser's now slightly annoyed... Here's his response to the Register


I do not follow instructions that show up when a website that I am not familiar with appears on my computer and I do not think anyone with experience would do so either. Once the Centos site appeared on four computers at one site I contacted our web service provider. The web service provider did not know what could cause the problem and had never heard of "CentOS". I then contacted the internet provider's local office and was told that they did nothing to cause the problem. I checked the building's server and found nothing relating to CentOS on the server. I was then left with only the web page email address to contact. I asked for the strange website to be removed because it blocked my City web site and I could not post public information. I only got help after threatening to contact the FBI. Now I am being flooded with emails from CentOS users that after knowing the answer say the problem was simple. I think this is unjustified and would like for this to stop. Your website should provide useful information and be a credit to the IT world. I do not believe it should be used to incite the users. Your attention to this matter is greatly appreciated.
TFA is here

Town accuses a Linux Distro of Hacking

I found this story on the Register today, detailing a series of correspondence between CentOS and an employee of an Oklahoman Town.  Priceless:

The heartland turned vicious this week when an Oklahoma town threatened to call in the FBI because its web site was hacked by Linux maker Cent OS. Problem is CentOS didn't hack Tuttle's web site at all. The city's hosting provider had simply botched a web server. This tale kicked off yesterday when Tuttle's city manager Jerry Taylor fired off an angry message to the CentOS staff. Taylor had popped onto the city's web site and found the standard Apache server configuration boilerplate that appears with a new web server installation. Taylor seemed to confuse this with a potential hack attack on the bustling town's IT infrastructure."Who gave you permission to invade my website and block me and anyone else from accessing it???," Taylor wrote to CentOS. "Please remove your software immediately before I report it to government officials!! I am the City Manager of Tuttle, Oklahoma."
The entire series of correspondence is available here

XML feed