The hacktivists behind OpSyria claim they've exploited an SQL Injection vulnerability

Nov 4, 2013 08:31 GMT  ·  By

Anonymous hackers have leaked several files allegedly taken from the systems of the Syrian Customs (customs.gov.sy). 

The hackers said they hacked into the Syrian Customs back in September. However, at the time, they published only samples of the database to prove that they gained access to it.

This time, they’ve leaked the website’s entire database, and a network map. They've also published the details of the SQL Injection vulnerability they've leveraged to access the data. They say the security hole is still not patched.

This is just the latest leak in the campaign called OpSyria. In October, the same hacktivists published information allegedly taken from the Syrian Patent Office and Syria’s Higher Commission for Scientific Research.

Next, the hackers plan on targeting the Chinese government.

In the meantime, anti-government hackers from Syria have started breaching .gov.sy websites. A couple of days ago, they breached and defaced three government domains: the Agricultural Bank, the Directorate of Culture in Damascus, and syrianet.gov.sy.