Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: June 16, 2025 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 53 Members: 0 Total: 53 Full disclosure SEC Consult SA-20250604-0 :: Local Privilege Escalation and Default Credentials in INDAMED - MEDICAL OFFICE (Medical practice management) Demo version Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain ? Secure Enclave Key Theft, Wormable RCE, Crypto Theft Defense in depth -- the Microsoft way (part 89): user grouppolicies don't deserve tamper protection CVE-2025-45542: Time-Based Blind SQL Injection in CloudClassroom PHP Project v1.0 ERPNext v15.53.1 Stored XSS in bio Field Allows Arbitrary Script Execution in Profile Page ERPNext v15.53.1 Stored XSS in user_image Field Allows Script Execution via Injected Image Path Local information disclosure in apport and systemd-coredump Stored XSS via File Upload - adaptcmsv3.0.3 IDOR "Change Password" Functionality - adaptcmsv3.0.3 Stored XSS "Send Message" Functionality - adaptcmsv3.0.3 Authenticated File Upload to RCE - adaptcmsv3.0.3 Stored XSS in "Description" Functionality - cubecartv6.5.9 Multiple Vulnerabilities in SAP GuiXT Scripting CVE-2024-47081: Netrc credential leak in PSF requests library Exploit CVE-2019-9978: Remote Code Execution in Social Warfare WordPress Plugin (<= 3.5.2) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 23 matches Getting 2.0.23 vuln to work Forum:PhpBB Posted: Fri Aug 22, 2008 12:53 pm Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 For the people who may be interested, I have written a little C++ app. that checks the apache access_log for SID's every 5 seconds and outputs them the command line and writes them to a file. Need some help... Forum:PhpBB Posted: Fri Aug 22, 2008 12:43 pm Subject: Need some help... ketchup Replies: 9 Views: 18671 Describe as detailed as possible what your problem is, with only relevant information. -Version of phpbb -exploit you are trying to use -whats going wrong -what don't you understand - als ... Getting 2.0.23 vuln to work Forum:PhpBB Posted: Mon Aug 18, 2008 1:59 am Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 Ive tested this, and its better to use a non existing image because it cant be cached by the victims browser, giving you a bigger chance of succeeding Exploit works great, only a little social en ... phpBB2 2.0.23 hack ? Forum:PhpBB Posted: Mon Aug 18, 2008 1:53 am Subject: phpBB2 2.0.23 hack ? ketchup Replies: 3 Views: 13277 http://seclists.org/bugtraq/2008/Mar/0246.html works great Getting 2.0.23 vuln to work Forum:PhpBB Posted: Fri Aug 01, 2008 3:28 pm Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 just one more question: Is there a way to host a picture that doesnt get caches, like a broken or not existing image. Will you still get the referer info? Maybe some other trick? Because if the pi ... Getting 2.0.23 vuln to work Forum:PhpBB Posted: Thu Jul 31, 2008 11:03 pm Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 found how to find the user ID: http://startrekguide.com/community/viewtopic.php?f=62&t=6402 Click on their profile and look at the URL. For example, if you view your profile.. (click your usern ... Getting 2.0.23 vuln to work Forum:PhpBB Posted: Thu Jul 31, 2008 10:44 pm Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 ah found the user ID part a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bs%3A1%3A%222%22%3B%7D admin user ID in this case is 2 I made a new normal user and ... Getting 2.0.23 vuln to work Forum:PhpBB Posted: Thu Jul 31, 2008 10:22 pm Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 jeeeeeeeeeeeej finally werx, thx dude This is gonna be tough to exploit . If I would get the SID from an admin I would have to guess what his/her user ID is or is there a better way? I w ... Getting 2.0.23 vuln to work Forum:PhpBB Posted: Thu Jul 31, 2008 9:33 pm Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 meh can't get it to work I edit the cookie and make it just like it was, when I was logged in as admin and still doesn't work. :/ The session is a few seconds old. I don't get it. Getting 2.0.23 vuln to work Forum:PhpBB Posted: Thu Jul 31, 2008 8:33 pm Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 tested replacing de sid, but that doesnt work :/ can somebody tell me how I should edit the cookie, if e.g. the sid=30c2791137336d65cd8c327f92f2e0fc. http://i33.tinypic.com/10f7ts7.png http://i ... Getting 2.0.23 vuln to work Forum:PhpBB Posted: Thu Jul 31, 2008 11:54 am Subject: Getting 2.0.23 vuln to work ketchup Replies: 12 Views: 18122 Hi all Pls look at http://packetstormsecurity.org/0803-exploits/phpbb2023-hijack.txt I have some questions about this. Say I had a website, so I can find the referal to my image I posted in ... hi Forum:Sql injection Posted: Tue Aug 28, 2007 4:09 pm Subject: hi ketchup Replies: 1 Views: 7231 no u i am not a hacker.. lol Forum:PhpBB Posted: Mon Aug 27, 2007 9:43 pm Subject: i am not a hacker.. lol ketchup Replies: 2 Views: 10374 wow ur funny -think about what you want to learn -ask more specific questions -.. How do you use Exploits? Forum:PhpBB Posted: Sun Mar 25, 2007 12:02 am Subject: How do you use Exploits? ketchup Replies: 1 Views: 10651 for windows: save code as .pl file install active perl (google it) run dos prompt go to dir of file execute file by typing perl nameofexploit.pl follow instructions of exploit XSS method that will work for phpbb2.0.22 fresh install? Forum:Cross-site scripting aka XSS Posted: Sat Mar 24, 2007 11:42 pm Subject: XSS method that will work for phpbb2.0.22 fresh install? ketchup Replies: 0 Views: 11494 Haj dudes! Is this possible? Or is it useless to search for this or try to make this? Say i had a website and a stealer on it, is it possible to steal someones cookie, by adding a link you my w ... Page 1 of 2 Goto page 1, 2Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.040 Seconds