Waraxe IT Security Portal

b0ilz · Replies: 3

It seems someone has trojaned alot of phpnuke scripts about 6 months ago. It seems these trojans are still in the wild today. It seems like all you fuckers running phpnuke are fucking gimps. fish i ...

b0ilz · Replies: 11

btw, these a-squad.com guys are retards. rm them with no remorse.

b0ilz · Replies: 11

This is from <!--
# PROGRAM: cpanel.php
# AUTHORS: Rob Brown (rob@asquad.com)
# PURPOSE: Detect possible vulnerabilities
#
# DISCLAIMER:
# THIS PROGRAM IS FOR EDUCATIO ...

b0ilz · Replies: 5

Dont forget that you dont need to put any real javascript on the website. You can use remote scripts by using the src= attribute in many different methods. Also, javascript is not the only language ...

b0ilz · Replies: 11

There was a remote root vuln in cpanel. And I saw over 5 exploits for it in under a day. Many boxes were rooted that week. Cpanel has a simple to use update feature, which saved alot of admin's ass ...

b0ilz · Replies: 5

Of all the xss papers out there you decide to link mine. Thanks I guess.

But this paper is very outdated. It was written in I think 2001, when xss was very new. XSS came out in 2000 I believe, i ...

b0ilz · Replies: 4

/**/UN/**/ION will only work with some databases to evade this. mySQL treats /**/ as a field seporator. So this will not work.

as for the check. it is flawed as waraxe stated. Also, checking fo ...

b0ilz · Replies: 7

here is post from text avaliable at There are almost unlimited ways javascript can be used to make an attack. For more ways look at the thread in bugtraq started on Mar 16 2002 by zeroboy@arrakis.es ...

b0ilz · Replies: 1

Olaf Kirch came up with the term "poison null byte". RFP just used this term in his article.

b0ilz · Replies: 5

I think most hackers care more for shell access than admin access. Once they have this they might touch files which hold login, network, and command logs. They will probably also try to download exp ...