Waraxe IT Security Portal
Login or Register
June 16, 2025
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 42
Members: 0
Total: 42
Full disclosure
SEC Consult SA-20250604-0 :: Local Privilege Escalation and Default Credentials in INDAMED - MEDICAL OFFICE (Medical practice management) Demo version
Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain ? Secure Enclave Key Theft, Wormable RCE, Crypto Theft
Defense in depth -- the Microsoft way (part 89): user grouppolicies don't deserve tamper protection
CVE-2025-45542: Time-Based Blind SQL Injection in CloudClassroom PHP Project v1.0
ERPNext v15.53.1 Stored XSS in bio Field Allows Arbitrary Script Execution in Profile Page
ERPNext v15.53.1 Stored XSS in user_image Field Allows Script Execution via Injected Image Path
Local information disclosure in apport and systemd-coredump
Stored XSS via File Upload - adaptcmsv3.0.3
IDOR "Change Password" Functionality - adaptcmsv3.0.3
Stored XSS "Send Message" Functionality - adaptcmsv3.0.3
Authenticated File Upload to RCE - adaptcmsv3.0.3
Stored XSS in "Description" Functionality - cubecartv6.5.9
Multiple Vulnerabilities in SAP GuiXT Scripting
CVE-2024-47081: Netrc credential leak in PSF requests library
Exploit CVE-2019-9978: Remote Code Execution in Social Warfare WordPress Plugin (<= 3.5.2)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index
Search found 39 matches
PHP tag <?php get filtered to <--?php
PostForum:Newbies corner Posted: Fri Dec 07, 2012 12:56 am Subject: PHP tag <?php get filtered to <--?php
Panic_Mode
Replies: 1
Views: 11559




Hi, found a vulnerable form which stores html and js in the database and displays the output in a part of the webpage. I have tried injecting php code using <?php but the output in the pages source ...
Php code appears as html
PostForum:Newbies corner Posted: Fri Dec 18, 2009 5:49 am Subject: Php code appears as html
Panic_Mode
Replies: 2
Views: 8609




Hello.
I found a site where I can inject from a form html /js. I tried php code but as it seems it's not processed. It just appears as html. I know that my code is stored in a db and then fetched and ...
Your "weapons" of choice
PostForum:Tools Posted: Sat Jul 04, 2009 5:25 pm Subject: Your "weapons" of choice
Panic_Mode
Replies: 2
Views: 11066




Hello there,

So, what programs you think are the best for:
a)Port scanning
b) Proxy checking

Question
Bypass filters
PostForum:Sql injection Posted: Fri Jul 03, 2009 2:57 pm Subject: Bypass filters
Panic_Mode
Replies: 2
Views: 7028




Hi guys.

Is there any effective way bypassing character filters? Hex encoding and such don't work.

There is a site previously keen on mysql injection, now it is patched with character detection. ...
Remote program execution through lan
PostForum:General discussion Posted: Thu Jun 04, 2009 3:29 pm Subject: Remote program execution through lan
Panic_Mode
Replies: 4
Views: 10001




Ah I see. Thanks for the information Waraxe.
Remote program execution through lan
PostForum:General discussion Posted: Tue Jun 02, 2009 11:23 pm Subject: Remote program execution through lan
Panic_Mode
Replies: 4
Views: 10001




thank you waraxe.
It is cool that you don't need to install anything on the other computer.

However I have a problem, on the 2nd pc on my lan I have no password (XP os) but I get an access denied ...
Remote program execution through lan
PostForum:General discussion Posted: Mon Jun 01, 2009 7:00 pm Subject: Remote program execution through lan
Panic_Mode
Replies: 4
Views: 10001




Hello guys.

My question.
With just cmd (without any other program installed) can a program be executed remotely through lan to another windows machine?
sql hash
PostForum:All other hashes Posted: Sat May 17, 2008 1:22 pm Subject: sql hash
Panic_Mode
Replies: 0
Views: 5261




6e5b05db3a6facba

how about that? Smile
Get deeper into sql injection...
PostForum:Sql injection Posted: Sat May 17, 2008 1:20 pm Subject: Get deeper into sql injection...
Panic_Mode
Replies: 3
Views: 8113




so, seeing that in order to update a table I need an sql injetion in update querry, how can I search for update querries?

Having a form on the website which creates a user and after that you have t ...
any help with this?
PostForum:MD5 hashes Posted: Sat May 17, 2008 12:29 pm Subject: any help with this?
Panic_Mode
Replies: 2
Views: 6460




love ya waraxe Very Happy
any help with this?
PostForum:MD5 hashes Posted: Fri May 16, 2008 9:04 pm Subject: any help with this?
Panic_Mode
Replies: 2
Views: 6460




9e73490afb325c6856aa19589ca1a627

tnx Smile
Get deeper into sql injection...
PostForum:Sql injection Posted: Fri May 16, 2008 8:17 pm Subject: Get deeper into sql injection...
Panic_Mode
Replies: 3
Views: 8113




y with the information schema i got all the table names for that db.

2 more questions.

i there a way to modify (insert) data to a table?

and can you give me a bit more help for load file and ...
Get deeper into sql injection...
PostForum:Sql injection Posted: Fri May 16, 2008 7:06 pm Subject: Get deeper into sql injection...
Panic_Mode
Replies: 3
Views: 8113




Once more I want your hep.

First of all we got an sql injectable site where passwords can be retrieved because they are in plaintext and information schema command can be used.

Now to get deeper ...
Injection, command running level
PostForum:Sql injection Posted: Tue Mar 04, 2008 12:11 pm Subject: Injection, command running level
Panic_Mode
Replies: 0
Views: 5969




Is there any good tutorial (based on php and mysql) or maybe you can help me out, in getting to a command running level after finding an sql injection exploit and how injections can be combined with R ...
list directory contents and download them
PostForum:Newbies corner Posted: Fri Feb 29, 2008 9:47 pm Subject: list directory contents and download them
Panic_Mode
Replies: 4
Views: 8446




Ah I see.

Tnx for the reply.

So there is not a way of listing the contents of directory...

This is how webserver works ... If someone finds a way to index arbitrary Apache directory, then it ...
Page 1 of 3 Goto page 1, 2, 3Next
All times are GMT


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.064 Seconds