SQL injection in ESET website allows free NOD32 license

by rnhmjoj • 11 years ago

25 7 11 years ago

mschuster91• 11 years ago

Wasn't ESET also the company which got hacked and their IDA 6.2 version spread all over the internet?

JosephRedfern2• 11 years ago

I might be missing something here, but that demo didn't actually show a free NOD32 license key being generated, did it?

darklajid• 11 years ago

I think it did - if we're talking about the youtube video.

What he's doing:

- Show the registration form and the error that you get when your serial is wrong

- Intercept that request, (replay it a couple times to - idk - show what that tool is/does?) change the serial to the ' OR "' value

- Refresh his Outlook.com account, showing a fresh "Thanks a lot, registration accepted, these are your credentials" mail

JosephRedfern2• 11 years ago

Ah, OK - so the username/password sent via email is what you use to actually activate NOD32? No serial required?

mahouse• 11 years ago

This is horribly written.

KhalilK• 11 years ago

Clearly, English is not the author's native tongue.

Related Stories