黑客原文翻译(节选):
今天我发现了一个MSSQL注入漏洞,对!你没听错,是PayPal.com的漏洞。
你知道,发现一个PayPal真他x的困难,非常多的高端黑客以及脚本小子都挖不出Paypal的漏洞……
基本上,他们的网站是一坨x,和狗x一样(小编:- -#)。在网站上运行mysql扩展和msSQL是一个非常糟糕的决定,我的意思是,谁会让Linux和Windows共存?
尽管我希望曝光Paypal的用户名、密码等东东,但是我们现在不想谈论这些。
英文原文
/$$ /$$$$$$
| $$__ $$ | $$ /$$$_ $$
| $$ \ $$ /$$$$$$ /$$$$$$$| $$ /$$ /$$$$$$$$| $$$$\ $$ /$$$$$$
| $$$$$$$/ /$$__ $$ /$$_____/| $$ /$$/|____ /$$/| $$ $$ $$ /$$__ $$
| $$__ $$| $$$$$$$$| $$ | $$$$$$/ /$$$$/ | $$\ $$$$| $$ \__/
| $$ \ $$| $$_____/| $$ | $$_ $$ /$$__/ | $$ \ $$$| $$
| $$ | $$| $$$$$$$| $$$$$$$| $$ \ $$ /$$$$$$$$| $$$$$$/| $$
|__/ |__/ \_______/ \_______/|__/ \__/|________/ \______/ |__/ 2011-present
twitter.com/Reckz0r
( )
|\ _,--------._ / |
| `.,' `. / | xoxo
` ' ,-' ' xoxo
\/_ _ ( /xoxo
(,-.`. ,',-.`. `__,' xoxo xoxo
|/#\ ),-','#\`= ,'.` |xoxo xoxo
`._/) -'.\_,' ) ))| xoxo
/ (_.)\ . -'// xoxo
( /\____/\ ) )`'\xoxo xoxo xoxo
\ |V----V|| ' , \ xoxo xoxo
|`- -- -' ,' \ \ _____
___ | .' \ \ `._,-' `-
`.__,`---^---' \ ` -' lil' devil is shy as fuck under em' sheets omfg
-.______ \ . / ______,-
`. ,'
-----
Today, I located a MSSQL injection vulnerability (yes, you heard that right) in PayPal.com (and you heard that right too), finding a vulnerability in PayPal.com is rare as fuckin' fuck. High-class security researchers from Offensive-Security and other gangwar-skiddie groups fail to locate anything in PayPal, but fear not, as I shall now jizz all over PayPal.
Basically, their site is full of shit, like total dogshit. Running mySQL-extensions and msSQL is a bad fuckin' idea, I mean, who the fuck would make Linux & Windows cuddle eachother? that's just absolutely nonsense!
Screenshot of the Vulnerability: http://t.co/LRMLQ5wSeT
Although, my main plan was to brutally expose PayPal infront of deh intertubez, leak all their usernames and passwords, and moar goodiez...but we're not gonna talk about it now.
I guess, this is pretty much it, folks!
regardz,
your old pal
reck