sql injection … it happens
- December 1st, 2008
- By jzerbe
- Write comment
Last night I went to Woodbury High School’s web page to check the schedule, to see if my high school friends had the day off today. Well they didn’t, but that doesn’t matter for now. What I found instead was weird javascript code inserted into the schedule. It slowed down the page load so much, that I decided to investigate.
Viewing the source of the page [image] [zip], I discovered that the root domain, nuclear3.com had a very odd looking whois record [Archived - DNS | Contacts] [Current]. I then checked out the whois record on the IPv4 address for the www A record [archived] [current]. Well the www A record is hosted by Ecommerce Inc [trace], but the A record for e.nuclear3.com is apparently part of the Chinese school system [nslookup] [apnic.net whois record] [trace]. How ironic!