' or 1=1-- ®

Dominic White

 
Random Entry: Local PHP Compromise
< Deloitte Podcasting | Exploit Archives >

' or 1=1-- ®

HA! A company has been registered with the name "' Or 1 Equals 1 Dash Dash". The membership is open and functions as a collective i.e. you are a member just by saying you are. This legally entitles you to fill out that your company as ' or 1=1-- on any forms. As it is an entity protected by US law (it is registered in California), nobody can accuse you of illicit activities for using your organisation's name, even if it offers up admin privileges on their web application.

Nice idea Haroon, nice work Tim (Thor).

Ha! the use of ' or 1=1-- in my title messes with my HTML comments.

Tuesday, October 10. 2006
Posted by Dominic White in Security
Comments (2) | Trackbacks (0)

Last modified on 2006-10-10 20:08
 

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

#1 ' or 1=1-- wrote (Link) (Reply)
Posted on Wednesday, November 1. 2006
' or 1=1--
 
#1.1 Dominic White wrote (Link) (Reply)
Posted on Wednesday, November 1. 2006
Nice try J. Random google searching arb from America.
 

Add Comment

E-Mail addresses will not be displayed and will only be used for E-Mail notifications.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA