How to use

XXxxImmortalxxXX's Avatar author of How to use
This is an article on How to use in Ethical hacking Tips.
Rated 1.00 By 3 users
Hello guys i see people always asking me how to use so i figured i will show you all.

Today we are going to learn the web applications part of


lets go to Milw0rm shall we

Now go to web applications and you see a whole lot of stuff right were gonna look for sql injection vulnerability.

We found this okay right here

And it shows you the following

____________________   ___ ___ ________
\_   _____/\_   ___ \ /   |   \\_____  \  
 |    __)_ /    \  \//    ~    \/   |   \ 
 |        \\     \___\    Y    /    |    \
/_______  / \______  /\___|_  /\_______  /
        \/         \/       \/         \/ 


[ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability

Author       : M.Hasran Addahroni
Date         : July, 14 th 2008
Location     : Jakarta, Indonesia
Web          :
Critical Lvl : Medium
Impact       : System access
Where        : From Remote

Affected software description:

Application : Comdev Web Blogger
version     : <= 4.1.3
Vendor      :
Description :

Comdev Web Blogger is your voice and also allows others to give you feedback on a post-by-post basis.
Site members can now create, manage, upload photos to their own blogs.FEATURES: Non Template-Based Gives You Flexibility to Fit
the Web Blogger to Your Web Design Page € Multiple user accounts to create & invite friends to their own blogs € Hot Blogs, 
Latest Blogs € RSS News Feeds € Blogs Categorisation € Hot Blogs & Latest Blogs € Search Blogs € Mini Calendar € Monthly Archive€
Links to Friends' Blog € Public or Friends View Only Blogs € Set Post Comments Permission € Friends Login € Forms Submission with 
CAPTCHA Image Verification € WYSIWYG Editor for Blog & Comment € Notify Friends of New Blog € Set View & Post Comment Permissions €
sSet Date & Time Format € Local Time Zone € Pre-defined Front-end CSS € Personalized Emails & Auto-Responders € 
Installation Support available



Input passed to the "arcmonth" parameter in blog's page is not properly verified before being used 
in an sql query.
This can be exploited thru the browser to manipulate SQL queries and pull the username and password
from admin and users in plain text. Successful exploitation requires that "magic_quotes" is off.


Admin Login at[PATH]/oneadmin/

Google : "Powered by Comdev Web Blogger" or allinurl:".php?domain= arcyear=2007 arcmonth"


- Edit the source code to ensure that input is properly verified.
- Turn on magic_quotes in php.ini


- 11 - 07 - 2008 bug found
- 11 - 07 - 2008 vendor contacted
- 14 - 07 - 2008 advisory released

~ ping - my dearest wife "happy birthday darling", zautha - my beloved son
~ y3dips,the_day,moby,comex,z3r0byt3,c-a-s-e,S`to,lirva32,pushm0v,az001,negative,
the_hydra,neng chika, str0ke
~ masterpop3,maSter-oP,Lieur-Euy,Mr_ny3m,bithedz,murp,sakitjiwa,x16,an0maly,cybertank,
super_temon, b120t0,inggar,fachri,adi,rahmat,indra,cyb3rh3b
~ dr188le,SinChan,h4ntu,cow_1seng,poniman_coy,paman_gembul,ketut,rizal,cR4SH3R,
kuntua, stev_manado,nofry,k1tk4t,0pt1c
~ #aikmel #e-c-h-o


K-159 || echo|staff || eufrato[at]gmail[dot]com

-------------------------------- [ EOF ] ---------------------------------- 

# [2008-07-15]
now look at

This is the sql injection into the site there are 2 separate ones and under that is the DORK:

Powered by Comdev Web Blogger" or allinurl:".php?domain= arcyear=2007 arcmonth
The dork is what you are going to type in google or whatever search engine you want and the search engine will give you a list of websites that power by that so go into your search engine and paste that or type

allinurl:".php?domain= arcyear=2007 arcmonth
So you see a whole bunch of websites right and your looking for the dork so the website listed are below

And if you remember the dork you was looking for the .php?domain=&arcyear=2007&acrmonth=6

So you got all the sites that google provided so look for any site that has the dork and click it now once you are at that site get the sql injection code and paste it in the url where it says arcmonth=6 paste it after the = remember to delete the 6 tho so it will look like this

We hit enter and u see the admin username and password along with other users as well that password is encrypted so user john the ripper or cain and abel to decrypt it and then you will have to find the admin login page i would 1. go through every link right click view source and look for a admin login page if its not there get the cracked version of acuntix and scan that website and it will show you the admin page then you can just login and do whatever you want below is a site that i did on a demonstration and lets go to the following site

HACKED BY XXxxImmortalxxXX

Now what i did was sql inject the site and it gave me the following


Which was the usernamd and password and I dunno why it wasnt encrypted anyways it said look for /oneadmin well oneadmin wasnt there

So then we go through every link looking at the source code looking for a login page didnt find one my last step was to scan the site with all of its links

I did and i got


which was the login i think they tryed to hide it lol

so we then login and do what ever we want hope this tut helps
shabbir's Avatar, Join Date: Jul 2004
Go4Expert Founder
Hey I was able to open that URL now and gr8 job. I hope you notified the users before putting that up there.

Also remember Content Copyright of Users everything else Copyright, 2004 - 2008.
P455w0rd_Cr4kz's Avatar, Join Date: Jan 2007
Ambitious contributor
Originally Posted by shabbir
Hey I was able to open that URL now and gr8 job. I hope you notified the users before putting that up there.

Also remember Content Copyright of Users everything else Copyright, 2004 - 2008.
Hello Shabbir, I sent xximmortalxx a simple search string for google that will give you lots and lots of phMyAdmin without passwords,amazing how careless people can be sometimes.
shabbir's Avatar, Join Date: Jul 2004
Go4Expert Founder
Why not give to me as well?
XXxxImmortalxxXX's Avatar
Invasive contributor
evilone's Avatar, Join Date: Jul 2008
Newbie Member
Good share, until i see this pots i dont have idea how can i use the exploits provided in milw0rm....Now let make my trials and get some knowledge on using this stuff....thanks for sharing
XXxxImmortalxxXX's Avatar
Invasive contributor
No problem mate
XXxxImmortalxxXX's Avatar
Invasive contributor
LoL faggits posted this tutorial on there site without giving me any credidation lol


Last edited by shabbir; 2Oct2008 at 13:55.. Reason: Link made unclickable
shabbir's Avatar, Join Date: Jul 2004
Go4Expert Founder
Register there and post a link to your this one. Admin may look at it.

Also I edited your link so that its unclickable
XXxxImmortalxxXX's Avatar
Invasive contributor
i did register and u want me to post a link on there site ? to this one?