How I Hacked Packetstorm: A Look at Hacking WWW threads by Means of SQL—Part 2
Rain Forest Puppy · EDPACS · 2000
So I go to apply this new technique on PacketStorm and get a 404 (file not found) response for requests to changeprofile.pl. Yes, the Pro version does not have it. Navigating the Edit Profile menu, I see that it has Basic Profile, Display Preferences, and Email Notifications/Subscriptions, which the demo does not. (It is all lumped together.) Wonderful. If they changed the scripts around, they may also have changed the SQL queries. (Well, they had to, actually.) So now we are in a blackbox mode, that is, blindly making educated guesses on what is going on. Since we still want to play, with the sort_order parameter, you will see that it is contained in the Display Preferences script, which is editdisplay.pl. This script handles the sort_order, display, view, PostPer, Post_Format, Preview, TextCols, TextRows, FontSize, FontFace, PictureView, and PicturePost (which is gained by viewing the HTML source). So it is a subset of the parameters. Using these code snippets, we can guess at what the SQL query should look like. So why not give it a shot?