Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: July 27, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 218 Members: 0 Total: 218 Full disclosure CyberDanube Security Research 20240722-0 | Multiple Vulnerabilities in Perten/PerkinElmer ProcessPlus [KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability [KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability CVE-2024-33326 CVE-2024-33327 CVE-2024-33328 CVE-2024-33329 CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100 SEC Consult SA-20240627-0 :: Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice SEC Consult SA-20240626-0 :: Multiple Vulnerabilities in Siemens Power Automation Products Novel DoS Vulnerability Affecting WebRTC Media Servers APPLE-SA-06-25-2024-1 AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8 40 vulnerabilities in Toshiba Multi-Function Printers 17 vulnerabilities in Sharp Multi-Function Printers SEC Consult SA-20240624-0 :: Multiple Vulnerabilities allowing complete bypass in Faronics WINSelect (Standard + Enterprise) IT Security and Insecurity Portal www.waraxe.us Forum Index -> PostNuke -> Authentication: admin's cookies View previous topic :: View next topic Authentication: admin's cookies Posted: Fri May 21, 2004 4:53 am blitz Beginner Joined: May 21, 2004 Posts: 4 Quote: Array ( [POSTNUKESID] => aad70a130030f49525839a53044052a3 [phpbb2mysql_data] => a:2:{s:11:"autologinid";N;s:6:"userid";s:1:"2";} [user] => PostNukeUser // user nic [loginkey] => ca478ccd2a22fe8b7e0ce30dbc797758 // md5 hashed password ) well, I know the admin values for [user] and [loginkey] so, it seems trivial to manipulate with cookies to log in as admin Quote: www.somesite.com FALSE / FALSE 1116381585 loginkey c1161e35a74f6adb7be013c9454cd952 www.somesite.com FALSE / FALSE 1116381585 user nimda www.somesite.com FALSE / FALSE 1085725661 POSTNUKESID 56ba26d6f93fdbbf52209fd4ef93f18e but PostNuke seems doesn't take care of [loginkey] and [user] /me first registered and logged as userAAA the only cookie was created - POSTNUKESID several days after opened the site in question and was authenticated on the site as userAAA and still, no [loginkey] and [user] cookie for this site the question is: is it true that Postnuke authenticate users _only_ by POSTNUKESID cookie ? /compares with POSTNUKESID value, saved in database obviously/ and if so, how one logs in as admin knowing admin's [user] and [loginkey] ? any ideas ? Posted: Fri May 21, 2004 10:34 am waraxe Site admin Joined: May 11, 2004 Posts: 2407 Location: Estonia, Tartu PostNuke is more secure than PhpNuke, and uses session identificators for saving the logged-in state. So knowing admin's password md5 hash can't let you directly in. Only thing you can do is hope to crack the md5 hash with bruteforce or wordlist attack (if password is not good enough). heh Posted: Fri May 21, 2004 10:50 am icenix Advanced user Joined: May 13, 2004 Posts: 106 Location: Australia bruteforcing... if you got a spare computer its the best thing in the world.. i suggest Rainbow crack...but it really emphasises the time - memory trade off.. if you got the space and an old computer. your cooking with gas _________________ =[WWW.WARAXE.US]= -Forum Rules Posted: Fri May 21, 2004 10:59 am waraxe Site admin Joined: May 11, 2004 Posts: 2407 Location: Estonia, Tartu Rainbow crack is promising thing, thats for sure. Posted: Fri May 21, 2004 3:24 pm blitz Beginner Joined: May 21, 2004 Posts: 4 waraxe wrote: ... and uses session identificators for saving the logged-in state. that's it ! at first, individu logs in as usually user:pass Postnuke generates [POSTNUKESID] and stores locally in DB and remotely on client's PC - cookie, right ? if so, then it's _very secure_ approach indeed, coz [POSTNUKESID] will be 32-bit random number, which makes b/forcing impossible and it hasn't any relation nor with [user] neither with [loginkey]. Rainbow Crack or PasswordPro for [loginkey] then )) Posted: Sun Jun 27, 2004 10:37 pm kranium Regular user Joined: Jun 27, 2004 Posts: 7 waraxe wrote: Rainbow crack is promising thing, thats for sure. why not create a community in this forum where we can build a big rainbow table for our use?? with eachone effort it's not so difficult to build a big enough table! waraxe, what do you think? Sounds Like A good Deal! Posted: Mon Jun 28, 2004 12:17 pm slimjim100 Valuable expert Joined: Jun 09, 2004 Posts: 208 Location: USA I have been making the Tables for a while now. I am willing to share mine but the biggest problem with the tables is the size. Unless we can get someone with a large enough FTP server that can donate the bandwidth and space. Now I have access to an FTP but limited bandwidth. If there is enough interest I could put another FTP up and post my tables this would be off a cable modem service so bandwidth is still limited to 256k upload. If I did that then I would want people to upload there tables too so we could have a full data base. Well let me know what yall think. If sounds good we could just have all interested people join a little group. The group would have of list of tables to make and each member would pick a table and start making it, once done upload the table to the ftp. Once all the tables are uploaded I could burn DVD?s of the tables and send them to the members that helped. If this sounds good just e-mail me and we could get this thing going. (slimjim100(at)hotmail(dot)com). Slimjim100 Posted: Mon Jun 28, 2004 12:45 pm vocal Regular user Joined: Jun 13, 2004 Posts: 18 there 's a spare cluster around here, so we could help. We are on exams now, so we 'll start in about 10 days Posted: Mon Jun 28, 2004 3:42 pm slimjim100 Valuable expert Joined: Jun 09, 2004 Posts: 208 Location: USA Quote: there 's a spare cluster around here, so we could help. We are on exams now, so we 'll start in about 10 days Dose that mean you can start making tables or storing them for FTP? If you mean Making tables, I'm not sure if rainbow crack supports *nix (you said cluster so I assume you are running a *nix cluster Right?). Let me know if ya need any help! Slimjim100 Posted: Mon Jun 28, 2004 5:40 pm kranium Regular user Joined: Jun 27, 2004 Posts: 7 if you start this thing, I'm on it with a friend Pentium4 3,5Ghz + Centrino 1,5Ghz + 2 x Athlon 2200+ all working for you there must be organization in table managment... if we could make a list of command lines, and each one pick one and calculate him, and upload it... someone has to decide de size, the charset and give a list of correct command lines to execute... errr sorry my bad bad english Well if we get this thing going.. Posted: Mon Jun 28, 2004 6:00 pm slimjim100 Valuable expert Joined: Jun 09, 2004 Posts: 208 Location: USA If we get this thing going I could put up a small webpage. I have a domain on stand by with a FullXML site ready to be configured. Any body want to help design it? I can set you up as Admin so you can update and make the pages. There we could have a member?s area with the rainbow table list. I could also put a brief walk thought for those that don't know how to use Rainbow crack. The domain is http://www.midga.org feel free to go look I haven't set it up yet but if anyone would like to help feel free to e-mail me slimjim100(at)hotmail.com. Slimjim100 Not sure if my FTP will have the bandwidth for large tables being uploaded anyone have an FTP server they could share? Authentication: admin's cookies www.waraxe.us Forum Index -> PostNuke You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.257 Seconds