bugtraq - exploit for mysql -- [get_salt_from

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030913202007.17490.qmail@mail.securityfocus.com>
Date: Sun, 14 Sep 2003 4:30:45 +0800
From: "lion" <lion@...onker.net>
To: bugtraq@...urityfocus.com <bugtraq@...urityfocus.com>
Subject: exploit for mysql -- [get_salt_from_password] problem

exp for mysql ([get_salt_from_password] problem)
proof of concept
using jmp *eax
bkbll(bkbll_at_cnhonker.net,bkbll_at_tom.com) 2003/09/13
compile:gcc -o mysql mysql.c -L/usr/lib/mysql -lmysqlclient

Welcome to HUC website: http://www.cnhonker.com



Download attachment "mysql.c" of type "application/octet-stream" (9883 bytes)