Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: November 7, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 683 Members: 0 Total: 683 Full disclosure SEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication Apache Struts2 Tiles Plugin <=7.4.0 and >=6.3.0 Preparer Cache Vulnerabilities unixODBC <=2.3.14 Rude Truncation via Narrowing Conversion Causes Out-of-Bounds `memcpy` unixODBC <=2.3.14 Multiple Races unixODBC <=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Over-Reads Apache Struts2 Core Arbitrary Code Execution via OGNL SandboxEscape Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel Apache Struts2 Spring Plugin Uses a Previously Closed Resource Apache Struts2 Core Integer Overflow Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path Apache Struts2 REST Plugin Fails to Properly Parse ChunkedRequests Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 11 matches Host Vulnerabilities Forum:Newbies corner Posted: Fri Dec 04, 2009 7:31 pm Subject: Host Vulnerabilities HanCholo Replies: 0 Views: 7319 How does one test for vulnerabilities or exploits on a particular web server that may allow an outsider remote access to the server database, perhaps allowing someone to view user account information ... Tutorials for Newbies - Defacing Websites Forum:Newbies corner Posted: Fri Dec 04, 2009 5:19 pm Subject: Tutorials for Newbies - Defacing Websites HanCholo Replies: 0 Views: 8564 The following tutorial is from Pinoy Hacking Team: This tutorial will be broken down into 3 main sections, they are as followed: 1. Finding Vuln Hosts. 2. Getting In. 3. Covering Your Tracks ... Some Helpful Free Resources Forum:General discussion Posted: Fri Dec 04, 2009 3:23 pm Subject: Some Helpful Free Resources HanCholo Replies: 0 Views: 7701 I would like to post some helpful online resources for some of the less advanced users. If you have more sites like these, please feel free to share! I will start with the following two links. IP A ... Finding PHP, SQL, and other database scripting weaknesses? Forum:Newbies corner Posted: Mon Aug 31, 2009 9:39 pm Subject: Finding PHP, SQL, and other database scripting weaknesses? HanCholo Replies: 0 Views: 7464 I am curious how one might find potential SQL or PHP exploits to use on certain websites. The site I would like to test is LTtech. lttech.com I am aware that the security is very good, as indica ... WP Admin Access Forum:Newbies corner Posted: Tue Oct 21, 2008 1:48 am Subject: WP Admin Access HanCholo Replies: 4 Views: 10333 I see, but upon viewing the page source, the tag you cited reads: name=“generator” content=“WordPress.com” /> <!-- leave this for stats --> I could not find any version number l ... WP Admin Access Forum:Newbies corner Posted: Thu Oct 16, 2008 3:11 am Subject: WP Admin Access HanCholo Replies: 4 Views: 10333 Thanks Lenny, but how would I determine which version of Wordpress by looking at the blog? WP Admin Access Forum:Newbies corner Posted: Mon Oct 13, 2008 9:17 pm Subject: WP Admin Access HanCholo Replies: 4 Views: 10333 Does anyone have or know how to obtain administrative access on Wordpress? (I mean on the WP server, not someone's blog hosted remotely.) Is there a cookie one can forge to get admin access? Wordpress Holes? Forum:Newbies corner Posted: Fri Oct 10, 2008 4:31 pm Subject: Wordpress Holes? HanCholo Replies: 5 Views: 10273 Okay, thanks! To test the security of a Wordpress server, I recommend this blog: http://wikipediaisevil.wordpress.com/ To look up the IP address of any link, I recommend visiting http:/ ... How To Kill A Blog Forum:Newbies corner Posted: Thu Oct 09, 2008 8:49 pm Subject: How To Kill A Blog HanCholo Replies: 4 Views: 9785 Blogger is owned by Google, so of course they will have state of the art technology. I would imagine that Google services such as Gmail, Youtube, or Blogspot are almost impossible to crack. But Wor ... Wordpress Holes? Forum:Newbies corner Posted: Thu Oct 09, 2008 8:35 pm Subject: Wordpress Holes? HanCholo Replies: 5 Views: 10273 Access to the server? Does that mean that you can access the account remotely knowing only the IP address or URL? If so, how might someone see the database? I imagine you need PHP software. Any rec ... Wordpress Holes? Forum:Newbies corner Posted: Thu Oct 09, 2008 5:12 pm Subject: Wordpress Holes? HanCholo Replies: 5 Views: 10273 How does one go about obtaining the MD5 hash of a Wordpress password without administrative access? I am aware that Light Blue Touchpaper was compromised by someone who used Google to find the passwor ... Page 1 of 1 All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB � 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.083 Seconds