Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: xml over https

Re: xml over https

From: Mads Rasmussen <mads_at_opencs.com.br>
Date: Fri, 04 Feb 2005 09:33:29 -0300

Actually it turned out to be way much simpler than I thought, the
application sends text files between server and client, formatted in XML.
Some of the fields are encrypted with 3des but the key was hardcoded and
I managed to write a tiny program to decrypt the xml fields using their
own dll without specifying the key ;-)

The application communicates through https with a portal vulnerable to
sql injection. I haven't been able to find a login that suits but I have
mapped almost the whole DB using different queries.
If anyone know a nice guide to sql injection for SQL server (MS) I would
appreciate it

Regards,

Mads
Received on Feb 05 2005

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos