Monday, July 2, 2012

SQL injection : CVV2 hashed in CMS hotel website

Hi, just find an easy vuln in hotel website for worldwide CVV2 :
This website used a CMS that is used by a lot of Hotel website
They have lot and lot of Hashed CC number !

The panel : 



The stats



Lot of cvv2


A cvv2 in pdf (with exp date, cvv2 code, cc hashed number)


Lot of other website, using the CMS are vulnerable !!! (MORE CVV !!)


If you know how to decrypt this HASH, you are rich
I have seen more than 10 000 Worldwide CVV in all CMS
They have not only US but lot of EU country too

If you have any comment :)

14 comments:

  1. This comment has been removed by a blog administrator.

    ReplyDelete
  2. Thanks! CC = base64(MD5(CCnum)).

    ReplyDelete
  3. long time U do not post in blogspot. Are u busy ?

    ReplyDelete
  4. I think my blog is bad compared to krebsonsecurity and xylibox
    if you think contrary I will post again

    ReplyDelete
  5. i usualy visit blogspot to read news hacking. i think i will learn from they. Can u post again in your blog. Bookmark now.

    ReplyDelete
  6. Write me please!!! My icq 385176

    ReplyDelete
  7. erol_viet pm me today

    ReplyDelete
  8. I like your effort for sharing such a descriptive blog with screenshots.
    Thanks for sharing useful insights
    Mumbai web designers | website maker in Mumbai | Mumbai website developers

    ReplyDelete
  9. Thank you for sharing great information about Website Designing. Googlez is one of the best Website Designing Agency in India provide complete web related services from web design, web development to website promotion.
    Website Designing Agency
    Website Designing Agency in Delhi
    Website Designing Agency in Noida
    Website Designing Agency in Gurgaon
    Website Designing Agency in Faridabad
    Website Designing Agency in Ghaziabad
    Website Designing Agency in India

    ReplyDelete
  10. Thank you dear, I found your information really useful. I would like to say thanks once again for this information. Keep posting all the new information.
    Cyber Security Guide

    ReplyDelete
  11. Unicvv https://unicc.cx/ Login Client Area Link 2021
    unicvv, uniccshop, uniccshop.bazar, unicc, uniccshop ru, uniccshop new domain, unicc login, uniccshop vip, unicc shop, unicc.cx, uniccshop.bazar/products/index, uniccshop mn login, unicvv onion, uniccshop.bazar down, unicc dumps, uniccshop legit, uniccbase, uniccshop bazar, uniccshop cm, unicc cvv shop, unicvv.vip, uniccshop mn, uniccshop cvv dumps, uniccshop cc, uniccshop bazar login, uniccshop 2021 https://unicc.cx, uniccshop activation, uniccshop account free, unicc.cm login, uniccshop account.txt, uniccshop.bazar account, uniccshop base, uniccshop buy cvv, uniccshop down, ccshop, uniccshop new domain 2021, uniccshop new domain 2021, uniccshop mn down, unicc shop, uniccshop.bazar/login, unicc at login, unicc shop forum, uniccshop facebook, free uniccshop account, free unicc shop, http //uniccshop.bazar/, http //uniccshop.bazar/products/index/, uniccshop icq, unicc at, uniccshop login area, uniccshop sign in, what is unicc shop, uniccshop new link, unicc.cx login, unicvv tor, sites like uniccshop, site like uniccshop, uniccshop.bazar/news, uniccshop onion, unicc cm new domain, uniccshop mn review, uniccshop mn support, uniccshop real, uniccshop similar site, unicvv shop script, uniccshop live, uniccshop service, uniccshop.eu, uniccshop sign up, uniccshop new site, uniccshop us, uniccshop video, www.uniccshop.bazar, www.uniccshop.bazar/login, uniccshop youtube, uniccshop twitter, uniccshop de, unicvv telegram, unicvv support
    UniccShop.Bazar Unicc Login Client Area Link Shop Unicvv Activation New 2021 UniccShop
    uniccshop bazar unicc uniccshop unicvv unicc shop unicc 2021 uniccshop uniqcc onion unicc onion uniccshop 2021 unicc tor uniccshop tor unicc uniccshop-bazar dumps unicvv onion unicc cvv uniccshop mn unicc new domain unicc login area unicc account uniccshop login uniccshop dumps unicc activation uniccshop new domain 2021 unicc credit card unicc at unicvv top unicc cm unicc cc uniccshop link unicvv vip uniccshop cc unicc cm unicc at uniccshop de uniccshop vip unicvv tor

    ReplyDelete