Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: November 8, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 177 Members: 0 Total: 177 Full disclosure SEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication Apache Struts2 Tiles Plugin <=7.4.0 and >=6.3.0 Preparer Cache Vulnerabilities unixODBC <=2.3.14 Rude Truncation via Narrowing Conversion Causes Out-of-Bounds `memcpy` unixODBC <=2.3.14 Multiple Races unixODBC <=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Over-Reads Apache Struts2 Core Arbitrary Code Execution via OGNL SandboxEscape Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel Apache Struts2 Spring Plugin Uses a Previously Closed Resource Apache Struts2 Core Integer Overflow Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path Apache Struts2 REST Plugin Fails to Properly Parse ChunkedRequests Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 12 matches what can i do in windows 2003 as IUSR? Forum:General discussion Posted: Mon Jul 27, 2009 10:27 am Subject: what can i do in windows 2003 as IUSR? naragorn Replies: 1 Views: 8497 well got a shell uploaded to a web server running windows 2003, php, mysql 5, IIS 6.0, and would like to get root. ive tried every command i knew but they are blocked, ive tried downloading the repai ... phpBB admin =>2.0.19 exec exploit Forum:PhpBB Posted: Wed Apr 12, 2006 3:51 pm Subject: phpBB admin =>2.0.19 exec exploit naragorn Replies: 6 Views: 16226 this exploits works, but it sends passwords to a defined site, using a background process delete this lines so u wont see ur forum compromised(If u used this exploit without knowing that it sends in ... Exploits in phpBB 2.0.16 Forum:PhpBB Posted: Fri Apr 07, 2006 6:10 am Subject: Exploits in phpBB 2.0.16 naragorn Replies: 22 Views: 44964 oh that i wont explain, sorry. Do u know theres a search button man theres so much info on it that u will find it right away, if u want me to give the name of the forum then ill see if its ... Exploits in phpBB 2.0.16 Forum:PhpBB Posted: Thu Apr 06, 2006 9:04 pm Subject: Exploits in phpBB 2.0.16 naragorn Replies: 22 Views: 44964 ok send a pm with the info, illtry to help, but b4 that, is it 2.0.15?? as far as i remember that one hast a lot of bugs, most important one is remote command execution, have u tried those?? Exploits in phpBB 2.0.16 Forum:PhpBB Posted: Wed Apr 05, 2006 7:56 pm Subject: Exploits in phpBB 2.0.16 naragorn Replies: 22 Views: 44964 what do u mean?? U mean u logged in as admin, but u cant access to the admin panel cuz u have to login again?? If thats so, what version og phpbb is that?? Cuz i have used that technique on 2.0.16 ... Exploits in phpBB 2.0.16 Forum:PhpBB Posted: Wed Apr 05, 2006 5:48 pm Subject: Exploits in phpBB 2.0.16 naragorn Replies: 22 Views: 44964 U have to try them separately, when u log into te forum, then u have to close all IE windows, and then open IECV, i think u didnt modify the right cookie, cause in case u had modify the cookie and it ... Exploits in phpBB 2.0.16 Forum:PhpBB Posted: Wed Apr 05, 2006 5:56 am Subject: Exploits in phpBB 2.0.16 naragorn Replies: 22 Views: 44964 do u want to have the paswd or just enter as admin?? If u want to login as admin, u have to download IECV(google it) then open it and search for the cookie of ur forum(You shouldopen the forum ... Ok, i can login as an admin, but Forum:PhpBB Posted: Wed Apr 05, 2006 5:48 am Subject: Ok, i can login as an admin, but naragorn Replies: 8 Views: 18625 ya, that would be lame too, xD, i wont do that, i will leave the forum intact, dun have anything agains them, Well im just llokin into upload a phpshell, thx anyway Ok, i can login as an admin, but Forum:PhpBB Posted: Wed Apr 05, 2006 5:26 am Subject: Ok, i can login as an admin, but naragorn Replies: 8 Views: 18625 But what can i do besides delete the forum?? I dont want to do that, too lame i think, i wont delete anything, But im wondering, is there a way to upload a shell now that im admin?? I really need help on this, Plz Forum:PhpBB Posted: Mon Apr 03, 2006 4:20 pm Subject: I really need help on this, Plz naragorn Replies: 2 Views: 9445 You Open the notepad put in some html code, then you save it as .gif, .png or .jpg.Then you open ur phpbb forum on firefox(Opera works too), then you go to your profile and upload the gif with html co ... I really need help on this, Plz Forum:PhpBB Posted: Sun Apr 02, 2006 11:36 pm Subject: I really need help on this, Plz naragorn Replies: 2 Views: 9445 Well after lots of efforts i managed to hack into the account of the admin of a phpbb forum, when i was done with it, i started lookin for a way to upload a shell, then i run into this http://spide ... Page 1 of 1 All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.057 Seconds