Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: November 7, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 943 Members: 0 Total: 943 Full disclosure SEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication Apache Struts2 Tiles Plugin <=7.4.0 and >=6.3.0 Preparer Cache Vulnerabilities unixODBC <=2.3.14 Rude Truncation via Narrowing Conversion Causes Out-of-Bounds `memcpy` unixODBC <=2.3.14 Multiple Races unixODBC <=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Over-Reads Apache Struts2 Core Arbitrary Code Execution via OGNL SandboxEscape Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel Apache Struts2 Spring Plugin Uses a Previously Closed Resource Apache Struts2 Core Integer Overflow Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path Apache Struts2 REST Plugin Fails to Properly Parse ChunkedRequests Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 20 matches .rar.box <<=== decrypt this thing Forum:General discussion Posted: Fri Mar 21, 2008 9:49 pm Subject: .rar.box <<=== decrypt this thing astropi Replies: 4 Views: 12328 From file header: SBLIGHT20 Trademark: Encrypted with Security BOX(R) Freeware - MSI Content-Type: application/x-sbox-file;fmt=asn1;vers=1 ProductVersion: Security BOX( ... .rar.box <<=== decrypt this thing Forum:General discussion Posted: Fri Mar 21, 2008 8:28 pm Subject: .rar.box <<=== decrypt this thing astropi Replies: 4 Views: 12328 interesting waraxe, However when i have tried to open the .box with calypso 3.3, it tolded me that i was made with a newer version of calypso wich is impossible because 3.3 is the lastest. P.S: ... .rar.box <<=== decrypt this thing Forum:General discussion Posted: Fri Mar 21, 2008 6:26 pm Subject: .rar.box <<=== decrypt this thing astropi Replies: 4 Views: 12328 Hi guys, Does someone know what is the .box extensions. I saw on the net that it was an email encryption extensions. I have got a file that is named mau.rar.box. I know that it's supposed to be an ... downlaod .php page Forum:General discussion Posted: Mon Mar 10, 2008 2:57 am Subject: downlaod .php page astropi Replies: 1 Views: 8221 Hi, I have found on my victim directory where she was hidding his .php pages; however, i want to download thoses pages but i don'T know how. Is there a way, or it's simply impossible..... Any h ... MD5 to difficult-to-me Forum:MD5 hashes Posted: Sat Dec 22, 2007 2:16 pm Subject: MD5 to difficult-to-me astropi Replies: 23 Views: 47422 how about this one: 6e596d5a427e11eccc2e9cb3d4208f80 Cutenews 1.4.5 Forum:All other software Posted: Sat Dec 22, 2007 1:30 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 So waraxe, have you released the script to the public.. Cutenews 1.4.5 Forum:All other software Posted: Fri Dec 21, 2007 7:17 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 Script work fine, used on some target, hashed the passwords.. The script is big succes WAraxe, BRAVO. Cutenews 1.4.5 Forum:All other software Posted: Fri Dec 21, 2007 2:13 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 OK, PM sent ... Thank you, once again fast reply, Cutenews 1.4.5 Forum:All other software Posted: Fri Dec 21, 2007 2:03 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 You want testing? And can't wait till exploits public release?? Do you have target's username known? I can send you betaversion of "cutemd5.php", but exact username must be known! hmm, i can do ... Cutenews 1.4.5 Forum:All other software Posted: Fri Dec 21, 2007 1:55 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 Do you have php CLI ready? Because you need it for running these exploits. What platform you use? Windows? Linux? both Window and Linux and yes, i have CLI ready... I also have a webserver.... Cutenews 1.4.5 Forum:All other software Posted: Thu Dec 20, 2007 5:14 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 So i have been testing my exploit scripts against various CuteNews versions and even old 1.3.1 is exploitable. Tests against 1.1 failed. well as long as it work on 1.4.5 this is what matter the mos ... Cutenews 1.4.5 Forum:All other software Posted: Thu Dec 20, 2007 3:05 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 Tomorrow maybe. But you can send me PM with target needed - and therefore i can test if it works. no problem, i have sent you a pm. Cutenews 1.4.5 Forum:All other software Posted: Thu Dec 20, 2007 2:07 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 WOW waraxe you are always my god. If you never finish them don't forget to send them to me. I will be more then happy to be a beta tester... Exploits will be publicly available very soon ... Cutenews 1.4.5 Forum:All other software Posted: Wed Dec 19, 2007 9:07 pm Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 WOW waraxe you are always my god. If you never finish them don't forget to send them to me. I will be more then happy to be a beta tester... Cutenews 1.4.5 Forum:All other software Posted: Tue Dec 18, 2007 2:55 am Subject: Cutenews 1.4.5 astropi Replies: 25 Views: 52084 CuteNews contains very insecure php code. Right now i'm looking at source and see lots of opportunities for attacks. Maybe some security advisory by me will be out in near future, who knows ... ... Page 1 of 2 Goto page 1, 2Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.049 Seconds