Closed Marunong na ako mag mysql ! try mo to pls =)

[PHC-Raldin]

Help guys ! i need your help ! investigate niyo po yung blog ko na testing .

http://blogspiderphc.onl/#forbidden#/

Scrolldown sa baba , sa may links , hanapin mo si admin sa baba niya . pindutin niyo yun .

Username : blogspider
Password : dindin23 .

Mag post kayo ng kung ano ano . paglaruan niyo yung website .
hanapin niyo yung bug .
pag may nahanap kayo . report niyo dito =)

Salamat


EDIT : SUPPER INSECURE YUNG WEBSITE NATO . MADALIANG TESTING SA PHP LANG HINDI FINAL NA

 

[saltyegg]

galing! buti ka pa marunong ka gumawa ng sariling web haha

 

[PHC-Raldin]

galing! buti ka pa marunong ka gumawa ng sariling web haha

sa kapangyarihan ng You do not have permission to view the full content of this post. Log in or register now. po . heheheh

 

[darknebula]

Galing may patutor ako paano mo ginawa kahit tutorial nalang dito

 

[Anna Kushina]

 

[Anna Kushina]

wait.. d ako makaLogIn using the informations

 

[Peter_mont]

Nice boss

 

[Anna Kushina]

hahhahha..****.. meron na nakaBUG

 

[Nel003]

Hahaha,daming BUG

 

[F A L L E N]

anong gamit mo diyan master ?? object oriented ?? or php methods lang ??

 

[Zerobyte]

nice.
kaso dapat sanitize mo din user inputs.
dahil hindi mo na-sanitize, vulnerable sa You do not have permission to view the full content of this post. Log in or register now. yung site.
please read You do not have permission to view the full content of this post. Log in or register now.

 

[PHC-Raldin]

View attachment 532285
View attachment 532286

hahhahha..****.. meron na nakaBUG

paki refresh po . hindi po sakin yung may sira . nagloloko po yung 000webhost

 

[PHC-Raldin]

nice.
kaso dapat sanitize mo din user inputs.
dahil hindi mo na-sanitize, vulnerable sa You do not have permission to view the full content of this post. Log in or register now. yung site.
please read You do not have permission to view the full content of this post. Log in or register now.

Super beginner pa kasi ako eh . sorry po talaga .

 

[Z E R E F]

Kahit di ko na ivisit alam ko na itsura ng bug hahaha literal

 

[Ryan062285]

Thanks sa info boss...

 

[PHC-Raldin]

may nag XSS ba sa blog na to ? hahahah

 

[PHC-Raldin]

hahahah may paano i bypass ang XSS ? may nahanap akong <script> tag na nag eexute sa index.php . dinelete ko na

 

[PHC-Raldin]

nice.
kaso dapat sanitize mo din user inputs.
dahil hindi mo na-sanitize, vulnerable sa You do not have permission to view the full content of this post. Log in or register now. yung site.
please read You do not have permission to view the full content of this post. Log in or register now.

Salamat papsi !

 

[PHC-Raldin]

Salamat sa inyo! at sa nag XSS sa blog . hahah kung wala ka di ko na ata alam na magkakabug to . salamat talaga

 

[saltyegg]

pure html, css, javascript at php po ba yan? o may frameworks po kayo na ginamit?