SQL injection in ESET website allows free NOD32 license (egyptiangeeks.com) 25 points by rnhmjoj 11y ago ↗ HN
[–] mschuster91 11y ago ↗ Wasn't ESET also the company which got hacked and their IDA 6.2 version spread all over the internet?
[–] JosephRedfern 11y ago ↗ I might be missing something here, but that demo didn't actually show a free NOD32 license key being generated, did it? [–] darklajid 11y ago ↗ I think it did - if we're talking about the youtube video.What he's doing:- Show the registration form and the error that you get when your serial is wrong- Intercept that request, (replay it a couple times to - idk - show what that tool is/does?) change the serial to the ' OR "' value- Refresh his Outlook.com account, showing a fresh "Thanks a lot, registration accepted, these are your credentials" mail [–] JosephRedfern 11y ago ↗ Ah, OK - so the username/password sent via email is what you use to actually activate NOD32? No serial required? [–] mmebane 11y ago ↗ Last I used NOD32 (~2 years ago), a username and password were required to activate as well as download updates.
[–] darklajid 11y ago ↗ I think it did - if we're talking about the youtube video.What he's doing:- Show the registration form and the error that you get when your serial is wrong- Intercept that request, (replay it a couple times to - idk - show what that tool is/does?) change the serial to the ' OR "' value- Refresh his Outlook.com account, showing a fresh "Thanks a lot, registration accepted, these are your credentials" mail [–] JosephRedfern 11y ago ↗ Ah, OK - so the username/password sent via email is what you use to actually activate NOD32? No serial required? [–] mmebane 11y ago ↗ Last I used NOD32 (~2 years ago), a username and password were required to activate as well as download updates.
[–] JosephRedfern 11y ago ↗ Ah, OK - so the username/password sent via email is what you use to actually activate NOD32? No serial required? [–] mmebane 11y ago ↗ Last I used NOD32 (~2 years ago), a username and password were required to activate as well as download updates.
[–] mmebane 11y ago ↗ Last I used NOD32 (~2 years ago), a username and password were required to activate as well as download updates.
[–] mahouse 11y ago ↗ This is horribly written. [–] KhalilK 11y ago ↗ Clearly, English is not the author's native tongue.
7 comments
[ 3.2 ms ] story [ 22.9 ms ] threadWhat he's doing:
- Show the registration form and the error that you get when your serial is wrong
- Intercept that request, (replay it a couple times to - idk - show what that tool is/does?) change the serial to the ' OR "' value
- Refresh his Outlook.com account, showing a fresh "Thanks a lot, registration accepted, these are your credentials" mail