Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: October 25, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 374 Members: 0 Total: 374 Full disclosure [0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H) [0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High) [0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2) [0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8) [0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8) [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2) [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2) [ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid) VestaCP <= 0.9.8-26: authenticated config-parser eval sinks ->root RCE (VESTACP-2026-001) [SYSS-2026-080]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-079]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-078]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-077]: dcm4che - Path Traversal (CWE-22) [0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5) [0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 21 matches How to generate a specific rainbow table or word list? Forum:General discussion Posted: Sat Jul 02, 2005 1:48 am Subject: How to generate a specific rainbow table or word list? FistFucker Replies: 0 Views: 8294 How can I generate a rainbow table or word list like this: C(harset) = ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 CCCCC-CCCCC-CCCCC-CCCCC (Example: AGSD3-DF42D-786FG-FHRSF) But I think it takes t ... Trasveral Directory under Windows Server Forum:All other security holes Posted: Mon May 16, 2005 10:12 pm Subject: Trasveral Directory under Windows Server FistFucker Replies: 1 Views: 9470 First try to read 'C:\boot.ini' (or 'C:\autoexec.bat' for Windows 9x) and look if it really works. Then search for interesting files. (FTP logins, SQL logins, the registry on Windows 9x) md5 hashes Forum:MD5 hashes Posted: Mon May 16, 2005 9:59 pm Subject: md5 hashes FistFucker Replies: 343 Views: 525136 You can crack MD5 hashes and many other algorithms with "Cain & Abel": http://www.oxid.it/cain.html 8b20777e6d3a825462fb54c9d689234d = amadeo00 25f9e794323b453885f5181f1b624d0b = 123456789 ... Anyone have a link to.... Forum:Tools Posted: Mon May 16, 2005 9:29 pm Subject: Anyone have a link to.... FistFucker Replies: 3 Views: 22671 CashCrusader-by-nexus.rar ed2k://|file|cgi_php_collection.zip|65458987|3D65E6DAC29326AA489FE5DF0267F4E9|/ affa_ffa_linklist_script.zip bookmark_counter.zip bmachine2.7.zip cjpro21.zip cj ... does anyone know of any php script which is............. Forum:Remote file inclusion Posted: Mon May 16, 2005 8:53 pm Subject: does anyone know of any php script which is............. FistFucker Replies: 1 Views: 11706 Look here: http://www.hotscripts.com/PHP/Scripts_and_Programs/File_Manipulation/Upload_Systems/ I found my problem with http://rapidshare.de/ Forum:General discussion Posted: Mon May 16, 2005 8:42 pm Subject: I found my problem with http://rapidshare.de/ FistFucker Replies: 2 Views: 11588 If the download limit for your IP adress is exceeded, then try it with some proxy or socks servers. Local *.php file inclusion and full path disclosure in BXCP Forum:All other software Posted: Mon May 09, 2005 9:16 pm Subject: Local *.php file inclusion and full path disclosure in BXCP FistFucker Replies: 0 Views: 8781 Here is an old advisory for BXCP, a small CMS for clans. I know my fix is scrap, so please update to a higher version and don't use my source code! There are also a few undiscovered SQL injections, fu ... Numbers Forum:Wordlists Posted: Mon May 09, 2005 1:36 pm Subject: Numbers FistFucker Replies: 9 Views: 20755 You can download the wordlist here: #!perl $from = 0; $to = 999999; open(FILE, ">numbers.txt") || die "$!"; for($i = $from; $i <= $to; $i++) &#12 ... Numbers Forum:Wordlists Posted: Mon May 09, 2005 2:10 am Subject: Numbers FistFucker Replies: 9 Views: 20755 OK, Sir! ;-) I will generate your wordlist after school. But you've to wait some hours (11-12). Don't worry, but I'm currently busy, because I must bust some OfB-Clan kiddies from their internet servi ... 74 dictionaries (~53.5MB / ~12.3MB packed) Forum:Wordlists Posted: Sun May 08, 2005 7:55 pm Subject: 74 dictionaries (~53.5MB / ~12.3MB packed) FistFucker Replies: 9 Views: 23601 Crazy! o.O Which browser do you use? I can download from RapidShare with cookies disabled and enabled. Probably your browser establishes multiple connections for one download and that isn't allowed fo ... is there a way to bypass protection? Forum:PhpNuke Posted: Sun May 08, 2005 7:08 pm Subject: is there a way to bypass protection? FistFucker Replies: 42 Views: 58349 Yeah, we will see. But I think no one will use my advisory, because of the new phpBB 2.0.14 exploit. Therefore I released it today. is there a way to bypass protection? Forum:PhpNuke Posted: Sun May 08, 2005 6:56 pm Subject: is there a way to bypass protection? FistFucker Replies: 42 Views: 58349 "Don't worry, be happy!" ;-) Yes, I've already said: I will release my LAME advisory. You're a much better PHP coder as me and now release your leet NukeSentinel advisory. :-D NukeSentinel and PHP-Nuke security filters bypass Forum:PhpNuke Posted: Sun May 08, 2005 6:08 pm Subject: NukeSentinel and PHP-Nuke security filters bypass FistFucker Replies: 1 Views: 10801 I couldn't send it to Full-Disclosure or Bugtraq. So I release it here. Have fun! Title: NukeSentinel and PHP-Nuke security filters bypass Author: FistFucker Contact: FistFuXXer@ ... Can't mail to Full-Disclosure Forum:General discussion Posted: Sun May 08, 2005 1:05 pm Subject: Can't mail to Full-Disclosure FistFucker Replies: 0 Views: 8331 F00k! I can't mail to full-disclosure@lists.grok.org.uk since months. And Bugtraq filters my nickname. Hi. This is the qmail-send program at mail.gmx.net. I'm afraid I wasn't able to deliver your ... 74 dictionaries (~53.5MB / ~12.3MB packed) Forum:Wordlists Posted: Sun May 08, 2005 12:53 pm Subject: 74 dictionaries (~53.5MB / ~12.3MB packed) FistFucker Replies: 9 Views: 23601 Hmm... Are you behind a proxy server? There is a download limit per IP address. Or establishes your browser multiple connections to the server? Download accelerators are not allowed for free accounts. Page 1 of 2 Goto page 1, 2Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.041 Seconds