vulnerability – Adwiteeya Agrawal | Home https://adwiteeya.com Security fanatic. Reverse Engineer and Web App Specialist. Tue, 01 Jan 2013 12:02:33 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.7 Bewakoof.com – Information Disclosure https://adwiteeya.com/bewakoof-com-information-disclosure/ https://adwiteeya.com/bewakoof-com-information-disclosure/#comments Mon, 19 Nov 2012 21:09:35 +0000 http://adwiteeya.com/blog/?p=248 Bewakoof.com is an online portal for purchasing T shirts and I would not lie they have a really cool collection. I really liked there design called ” Ideas are Bulletproof ” and wanted to order the T shirt. After a long wait bewakoof.com started their cash on delivery options and I immediately made the order after that.

Url to the T shirt : Ideas Are Bulletproof

However there was one little problem about the package they had sent. I found it really funny and decided to write this post. Following are the three images that would make everything clear.

1. The Invoice on the package – having the print invoice url

 

2. The invoice zoomed

3. Information disclosure  – Admin Login Page :D

 


Apart from this two things I would like to add.

1. I by no means wish to defame bewakoof inc. In fact, I think they are doing a really cool job and i made this post after I informed this to the company. :)
2. Their T shirts are awesome. #Recommended

 

]]> https://adwiteeya.com/bewakoof-com-information-disclosure/feed/ 5 Intersection of interests. https://adwiteeya.com/intersection-of-interests/ https://adwiteeya.com/intersection-of-interests/#comments Sun, 18 Nov 2012 00:03:32 +0000 http://adwiteeya.com/blog/?p=233 I have had a severe sprain in my neck for around 3 days now and was looking for “something different” to do after i get well. Also I had been writing an article on the cross-site scripting framework for the college’s annual magazine. (you will know where am I going with this soon). So as I was thinking it came to me that ” watching theatre” could be the “something different”. I am as it is a huge fan of the plays organized by the NSD Repertory Company and hence NSD was the first place I started looking for, for any upcoming shows. I am a lazy person and instead of calling the helpline preferred visiting the website. Just in case if you didn’t know the website, it is http://nsd.gov.in . Allright …um… NSD website + XSS article….. NSD website + XSS article….. NSD website + XSS article….. NSD website + XSS article….. NSD website + XSS article…. NSD website + XSS article.

EQUALS

XSS on NSD’s website :D

 

Here is the alumni’s section. :)

All right how did I find it. ?

So for obvious reasons (look at the url , id=some integer) , I thought there could be a possible sqli vulnerability, though i knew i had a very little chance, i still pushed in the url to both havij and sqlmap. Havij failed however sqlmap listed that a boolean based blind could be executed in the format of 1=1, so for abvious reasons i tried a=a. Which did not work… ah…then finally came to me that and i executed the ‘a’=’a’. Finally replace the ‘a’ with a script and tada! :D

About the disclosures.

I wrote a mail to  indiaportal@gov.in, nationalschoolofdrama@gmail.com and info@cert-in.org.in. I also submitted it to thehackernews.com, xssed.com and null.co.in
However I do not expect a reply any time soon.

]]> https://adwiteeya.com/intersection-of-interests/feed/ 3