11

Student Account Password at the university. No changes the default. It's their DOB and first two letters of the name.

Injection steps:
Open Database ( I am the Placement Representative )
Copy DOB
Paste
Add the first two alphabet
Unlocked

Comments
  • 2
    I worked for a national college/university chain, that had every student's password as their initials and last 4 ssn.
    I developed a small app for a friend in the call center that would scrape this info from their itsm tool and log the support tech in automatically. "My password isnt working", "oh, well, it worked for me!"
  • 1
    i wouldn't call that "injection" though...
  • 0
    @blegh tats sarcasm
Add Comment