Waraxe IT Security Portal
Login or Register
August 31, 2025
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 113
Members: 0
Total: 113
Full disclosure
Multi-Protocol Traceroute
SEC Consult SA-20250728-0 :: Stored Cross-Site-Scripting in Optimizely Episerver CMS
SEC Consult SA-20250807-0 :: Race Condition in Shopware Voucher Submission
Insufficient Resource Allocation Limits in nopCommerce v4.10 and v4.80.3 Excel Import Functionality
CSV Injection in nopcommerce v4.10 and 4.80.3
Insufficient Session Cookie Invalidation in nopCommerce v4.10and 4.80.3
Session Fixation Vulnerability in iDempiere WebUI v12.0.0.202508171158
CSV Injection in iDempiere WebUI 12.0.0.202508171158
liblcf v0.8.1 liblcf/lcf2xml: Untrusted LCF data triggers uncaught std::length_error via negative vector resize (DoS)
liblcf v0.8.1 Integer Overflow in liblcf `ReadInt()` Leads to Out-of-Bounds Reads and Denial of Service
Piciorgros TMO-100: Unauthorized configuration change via TFTP (CVE-2025-29617)
Piciorgros TMO-100: Unauthorized log data access
[tool] CRSprober
iOS 18.6 - Undocumented TCC Access to Multiple Privacy Domainsvia preflight=yes
Kigen eUICC issue (custom backdoor vs. FW update bug)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index
Search found 64 matches
setup-x86.exe
PostForum:General discussion Posted: Thu Dec 18, 2014 3:22 pm Subject: setup-x86.exe
sk8er
Replies: 1
Views: 13736




you can more especific , for example how ???

cmd SETUP-X86.EXE myProgram.exe ???

i not understand Smile
sql privilege escalation problem
PostForum:Shell commands injection Posted: Thu Dec 18, 2014 3:02 pm Subject: sql privilege escalation problem
sk8er
Replies: 1
Views: 16658




I sugges :

http://resources.infosecinstitute.com/anatomy-of-an-attack-gaining-reverse-shell-from-sql-injection/

Saludos
waraxe pls help me in complex blind SQL injection
PostForum:Sql injection Posted: Thu Dec 18, 2014 2:58 pm Subject: waraxe pls help me in complex blind SQL injection
sk8er
Replies: 2
Views: 18547




hey men Very Happy

you can see this video for help :

https://www.youtube.com/watch?v=_qxvJY6Zyac
Exploiting MYSQL Database driven by ASP?
PostForum:Newbies corner Posted: Sun Oct 06, 2013 6:14 pm Subject: Exploiting MYSQL Database driven by ASP?
sk8er
Replies: 3
Views: 14031




In this case, you can see :

http://nibblesec.org/files/MSAccessSQLi/MSAccessSQLi.html

its good.
Cracking Windows 7 NTLM
PostForum:Newbies corner Posted: Sat Oct 05, 2013 8:10 am Subject: Cracking Windows 7 NTLM
sk8er
Replies: 2
Views: 12314




or you can use :

https://crackstation.net/

saludos Smile
Bypassing \' MySQL- [help] WAF Evasion
PostForum:Sql injection Posted: Sat Sep 24, 2011 4:33 am Subject: Bypassing \' MySQL- [help] WAF Evasion
sk8er
Replies: 4
Views: 15825




one good option when bloking with internal errors, is use inference (BLIND SQL) for example, SQLiX available on :

https://www.owasp.org/index.php/Category:OWASP_SQLiX_Project

working with these ...
Bypassing \' MySQL- [help] WAF Evasion
PostForum:Sql injection Posted: Thu Sep 22, 2011 6:13 pm Subject: Bypassing \' MySQL- [help] WAF Evasion
sk8er
Replies: 4
Views: 15825




if you want to avoid a firewall, I recommend you use a encoded string for you query's, is only one idea Smile
Help- Extracting Data from Columns
PostForum:Sql injection Posted: Tue Sep 20, 2011 3:10 pm Subject: Help- Extracting Data from Columns
sk8er
Replies: 1
Views: 11174




you tried Blind Sql Injection ?, maybe with these tecnique you get a bit information.

in other hand you tried reading files and show in the UNION's comand

in this site show a one example :

...
Access in phpmyadmin
PostForum:Newbies corner Posted: Sun Sep 18, 2011 6:52 am Subject: Access in phpmyadmin
sk8er
Replies: 5
Views: 13950




one resource :

http://www.openwall.com/john/

it's useful en these cases
Access in phpmyadmin
PostForum:Newbies corner Posted: Sat Sep 17, 2011 10:36 pm Subject: Access in phpmyadmin
sk8er
Replies: 5
Views: 13950




in the "owned by uid 512" you should find the root user, or scaling the privilegies
Someone can find the admin DIrectory
PostForum:Newbies corner Posted: Sat Sep 17, 2011 5:54 am Subject: Someone can find the admin DIrectory
sk8er
Replies: 1
Views: 11308




I guess, a Web Scanning for the listed the directories.
Which programing language should I choose?
PostForum:Newbies corner Posted: Thu Sep 15, 2011 5:31 pm Subject: Which programing language should I choose?
sk8er
Replies: 4
Views: 15000




I guess phyton Smile
Exploiting MYSQL Database driven by ASP?
PostForum:Newbies corner Posted: Thu Sep 15, 2011 5:30 pm Subject: Exploiting MYSQL Database driven by ASP?
sk8er
Replies: 3
Views: 14031




"Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'fldUserLogin='admin ' or '1'='1'/*''.

...
Problem SQLi
PostForum:Sql injection Posted: Thu Sep 15, 2011 5:23 pm Subject: Problem SQLi
sk8er
Replies: 4
Views: 15769




you should trie with clausule "HAVING" form more results Very Happy
help me !!! sqli hard...
PostForum:Sql injection Posted: Thu Sep 15, 2011 5:21 pm Subject: help me !!! sqli hard...
sk8er
Replies: 1
Views: 10065




te sugiero que intentes con BLIND SQL.

I tried with the single cuote :

http://www.pampling.com/ficha_producto.php?id_producto=%27

Warning: mysql_fetch_assoc(): supplied argument is not a vali ...
Page 1 of 5 Goto page 1, 2, 3, 4, 5Next
All times are GMT


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.038 Seconds