Waraxe IT Security Portal
Login or Register
January 5, 2026
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 158
Members: 0
Total: 158
Full disclosure
[KIS-2025-14] PKP-WAL <= 3.5.0-1 Login Cross-Site RequestForgery Vulnerability
[KIS-2025-13] PKP-WAL <= 3.5.0-3 (X-Forwarded-Host) LESS Code Injection Vulnerability
[KIS-2025-12] PKP-WAL <= 3.5.0-1 (baseColour) LESS CodeInjection Vulnerability
[KIS-2025-11] Open Journal Systems <= 3.5.0-1 (NativeXmlIssueGalleyFilt er.php) Path Traversal Vulnerability
[KIS-2025-10] PKP-WAL <= 3.5.0-1 (Institution Collector) SQL Injection Vulnerability
Backdoor.Win32.Poison.jh / Insecure Permissions
Backdoor.Win32.Netbus.170 / Insecure Credential Storage /MVID-2025-0703
Defense in depth -- the Microsoft way (part 94): SAFER (SRPv1and AppLocker alias SRPv2) bypass for dummies
Backdoor.Win32.ControlTot al.t / Insecure Credential Storage /MVID-2025-0702
HEUR.Backdoor.Win32.Poiso n.gen / Arbitrary Code Execution /MVID-2025-0701
CyberDanube Security Research 20251215-0 | Multiple Vulnerabilities in Phoenix Contact FL Switch Series
[KIS-2025-09] Control Web Panel <= 0.9.8.1208 (admin/index.php) OS Command Injection Vulnerability
Raydium CP Swap: Unchecked Account Allows Creator Fee Hijacking
[CFP] Security BSidesLjubljana 0x7EA | March 13, 2026
[KIS-2025-08] 1C-Bitrix <= 25.100.500 (Translate Module) Remote Code Execution Vulnerability
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> Newbies corner -> which forum is easily hacked and shelled
Post new topicReply to topic View previous topic :: View next topic
which forum is easily hacked and shelled
PostPosted: Fri Jan 15, 2010 10:14 pm Reply with quote
shadowhound
Advanced user
Advanced user
Joined: Aug 08, 2009
Posts: 57




which forum is most easy hacked and i dunno if i am away with the times but last year you could hack a IPB forum with a script im curious whats the newest version ?

i used to do IPB i was wondering if there was still sites out there vun to the scripts or have alot already been taken down or patched

also whats the easyiest to r00t since i have never root a forum or site i useally log in with admin pass and thats my gain
View user's profile Send private message
PostPosted: Sat Jan 16, 2010 2:32 pm Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




There are thousands of vulnerable IPB <= 2.3.5 forums out there even right now. Most of them will let you easily get to the php code level. Next will be linux shell level, success depends on security of specific php installation. And once you are @ linux shell level, you need local root exploit. Servers with older, unpatched kernel can be easy targets. Another way too root is to look around in server and search for administration flaws - vulnerable and unpatched software, weak directory or file permissions, etc. But be aware, that excellent linux and C knowledge is needed for getting UID 0 Smile
View user's profile Send private message Send e-mail Visit poster's website
which forum is easily hacked and shelled
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.042 Seconds