Website Security

SQL Injection vulnerabilities in 9 sites of same company

Oct 8th

Posted by Kapeel in Website Security

You may be familiar with SQL Injection .

I happened to visit the website of Microorange Technologies , Nagpur .

Microorange Technologies website

They provide solutions in web development .

Accidently , I found the administration panel of their website vulnerable .

When I tried SQL Injection on their clients’ websites , I found that they too have same security hole. I emailed them on September 24th . But , unfortunately , they just fixed the site and didn’t even replied.

http://www.microorange.net/admin/

http://www.deconlimited.com/admin/

http://www.msmc.gov.in/admin/

http://www.sarthgroup.com/admin/

http://www.admaark.com/admin/

http://www.gangakhedicpp.com/admin/

http://www.bbeducation.org.in/admin/

http://www.dpjaingroup.com/admin/

http://www.alphashalom.org/admin/

hacking, mysql, nagpur, PHP, sql injection

I made it to the second round of Cryptex 2009

Sep 23rd

Posted by Kapeel in The Internet

I participated in Cryptex 2009 , the online hacking contest and got selected among the top 30 for the second round which is to be held today.

But I am worrying because their website is down due to too many HTTP connections.

I know this because the site I made for the Dark Evil Clan also faced the same problem.

Lets see what happens in the second round if their website becomes available again .

Cryptex ! The online hacking contest.

Sep 22nd

Posted by Kapeel in The Internet

I have came across an online hacking contest organized by NIT – Warangal , Andhra Pradesh

Cryptex

Cryptex Online Event

I am participating

Let’s see what happens