Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: November 9, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 160 Members: 0 Total: 160 Full disclosure SEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication Apache Struts2 Tiles Plugin <=7.4.0 and >=6.3.0 Preparer Cache Vulnerabilities unixODBC <=2.3.14 Rude Truncation via Narrowing Conversion Causes Out-of-Bounds `memcpy` unixODBC <=2.3.14 Multiple Races unixODBC <=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Over-Reads Apache Struts2 Core Arbitrary Code Execution via OGNL SandboxEscape Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel Apache Struts2 Spring Plugin Uses a Previously Closed Resource Apache Struts2 Core Integer Overflow Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path Apache Struts2 REST Plugin Fails to Properly Parse ChunkedRequests Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 14 matches Phpbb cookie question Forum:PhpBB Posted: Wed Feb 21, 2007 12:55 pm Subject: Phpbb cookie question darkclaw Replies: 1 Views: 8820 Hello! Does anybody know how phpbb cookie is created on newest versions? I mean, how do they store the password there. I know that it isnt a simple function like md5(password) because everytime I l ... Help with weird cookie Forum:PhpBB Posted: Wed Feb 21, 2007 9:18 am Subject: Help with weird cookie darkclaw Replies: 1 Views: 8626 Hello! Got this cookie using XSS, but I don't understand its format. Its supposed to be from php 2.0.19, but i see a "dot" in the middle of the md5 hash. Take a look: Cookie: phpbb2mysql_dat ... Mkportal Forum:All other software Posted: Mon Nov 07, 2005 2:22 pm Subject: Mkportal darkclaw Replies: 1 Views: 9393 Is MKportal that secure? Haven't seen any exploit for it. For those who don't know, take a look at www.mkportal.it Need some advice Forum:General discussion Posted: Sat Oct 08, 2005 10:13 pm Subject: Need some advice darkclaw Replies: 3 Views: 13894 Sorry Linux but i didn't understand a word you said. I don't have access to the computer that guy is using, I wanted to contact their administrator so they can fix it. I told some guy is using "ghost ... Need some advice Forum:General discussion Posted: Sat Sep 24, 2005 10:08 pm Subject: Need some advice darkclaw Replies: 3 Views: 13894 Hello! There is a guy whois using some shells to DoS my UO server. He is using a BNC on IRC: C4nt1 is ~FullT@yl27hlvL2ak.211.233.12.O How do I contact the owner of that network so they can fix ... PHP Nuke <= 7.8 Multiple SQL Injections Forum:PhpNuke Posted: Sat Sep 17, 2005 1:21 pm Subject: PHP Nuke <= 7.8 Multiple SQL Injections darkclaw Replies: 13 Views: 41121 Exploit available at: http://www.milw0rm.com/id.php?id=1219 PHP Nuke <= 7.8 Multiple SQL Injections Forum:PhpNuke Posted: Tue Sep 13, 2005 4:31 pm Subject: PHP Nuke <= 7.8 Multiple SQL Injections darkclaw Replies: 13 Views: 41121 Check http://www.securityfocus.com/archive/1/410314/30/0/threaded PafileDB Vulnerability Forum:All other software Posted: Sun Aug 28, 2005 1:23 am Subject: PafileDB Vulnerability darkclaw Replies: 0 Views: 8282 http://www.securityfocus.com/archive/1/409047/30/0/threaded Has anyone managed to make it work? I tried but i think I don't know how to craft the cookie successfully Mantis Several Vulnerabilities Forum:All other software Posted: Sat Aug 27, 2005 9:42 pm Subject: Mantis Several Vulnerabilities darkclaw Replies: 0 Views: 7844 Check http://www.securityfocus.com/bid/14604 Any known exploit for these ? Vbulletin 3.0.7 Passwords Forum:Newbies corner Posted: Mon Aug 22, 2005 7:26 pm Subject: Vbulletin 3.0.7 Passwords darkclaw Replies: 1 Views: 11575 OK i found out how to craft a cookie. The password who is stored in a cookie is stored like this: md5('password in the database' . 'vB license id'); So, if you got the hash of the passwor ... Vbulletin 3.0.7 Passwords Forum:Newbies corner Posted: Mon Aug 22, 2005 2:19 am Subject: Vbulletin 3.0.7 Passwords darkclaw Replies: 1 Views: 11575 Hello. I got some vbulletin 3.0.7 md5. I got their salts too. Is there any way to crack them or to craft a cookie so I can login with any account? Thanks. phpBB 2.0.17 and most likely below Forum:PhpBB Posted: Thu Aug 11, 2005 2:43 pm Subject: phpBB 2.0.17 and most likely below darkclaw Replies: 63 Views: 119731 yeah, i would be interesting what kind of malicious code you can insert ----edit: well i tried to insert this script: <? echo 'HOST: '.$dbhost.'<BR>dbNm: '.$dbname.'<BR>USER: '. ... phpBB 2.0.17 and most likely below Forum:PhpBB Posted: Wed Aug 10, 2005 8:06 pm Subject: phpBB 2.0.17 and most likely below darkclaw Replies: 63 Views: 119731 PhpBB - [img]http://theremotehost.com/exploit.jpg[/img] Inside the exploit.jpg folder we would have index.php or index.html with malicious code. phpBB 2.0.16 XSS Remote Cookie Disclosure Exploit Forum:PhpBB Posted: Thu Aug 04, 2005 12:50 am Subject: phpBB 2.0.16 XSS Remote Cookie Disclosure Exploit darkclaw Replies: 108 Views: 211171 Sorry, i dont know if i am doing something wrong, but my cookies.php is like this: <?php $cookie = $_GET I post a reply in the forum with this in the msg: I uploaded cookies.php and cook ... Page 1 of 1 All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.056 Seconds