sql injections, anyone?

[cred]

The only input I see is a turing on their downloads
It appears to be local, someone who's proxied up wanna check out some sql injections? Could possibly get a userlist, maybe some password hashes.

[4cidburn]

im new to sql but i fucking hate these morons but theres got to be some kind of input on there front page but if you can get some pass hashes that would be awesome but ill help with your sql

[cred]

their downloads page seems to be the only one... I am shit with sql injections, haven't messed with them in a while, the 1=1 trick didn't work, but once I passed the turing, I found out something much more interesting... They're using a scriptset called linklokurl made by vibralogix. Google seems clueless as to whether or not there are any exploits for it, but there must be. It's pay software, but there are illegal copies available, so once someone who knows their PHP gets a look at it, it's only a matter of time before we get some good intel.

[z3r0c00l]

I can DEFINITELY get us some password hashes

[hash]

Lets get those hash's

[Sponsored content]