Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: November 5, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 154 Members: 0 Total: 154 Full disclosure SEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication Apache Struts2 Tiles Plugin <=7.4.0 and >=6.3.0 Preparer Cache Vulnerabilities unixODBC <=2.3.14 Rude Truncation via Narrowing Conversion Causes Out-of-Bounds `memcpy` unixODBC <=2.3.14 Multiple Races unixODBC <=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Over-Reads Apache Struts2 Core Arbitrary Code Execution via OGNL SandboxEscape Apache Struts2 Core TokenHelper Token Cryptographic Timing Side-Channel Apache Struts2 Spring Plugin Uses a Previously Closed Resource Apache Struts2 Core Integer Overflow Apache Struts2 Core Cross-Origin Protection Exemption Miskeyed to a Deployment-Wide Path Apache Struts2 REST Plugin Fails to Properly Parse ChunkedRequests Apache Struts2 REST Plugin Untrimmed `Accept` Header Tokens Break Content Negation Fallback Apache Struts2 JSON Plugin Insecure Deserialisation -- Object Deserialisation Element-Count Limit Bypass [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure) [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8) IT Security and Insecurity Portal www.waraxe.us Forum Index Search found 64 matches setup-x86.exe Forum:General discussion Posted: Thu Dec 18, 2014 3:22 pm Subject: setup-x86.exe sk8er Replies: 1 Views: 15189 you can more especific , for example how ??? cmd SETUP-X86.EXE myProgram.exe ??? i not understand sql privilege escalation problem Forum:Shell commands injection Posted: Thu Dec 18, 2014 3:02 pm Subject: sql privilege escalation problem sk8er Replies: 1 Views: 18471 I sugges : http://resources.infosecinstitute.com/anatomy-of-an-attack-gaining-reverse-shell-from-sql-injection/ Saludos waraxe pls help me in complex blind SQL injection Forum:Sql injection Posted: Thu Dec 18, 2014 2:58 pm Subject: waraxe pls help me in complex blind SQL injection sk8er Replies: 2 Views: 20501 hey men you can see this video for help : https://www.youtube.com/watch?v=_qxvJY6Zyac Exploiting MYSQL Database driven by ASP? Forum:Newbies corner Posted: Sun Oct 06, 2013 6:14 pm Subject: Exploiting MYSQL Database driven by ASP? sk8er Replies: 3 Views: 15747 In this case, you can see : http://nibblesec.org/files/MSAccessSQLi/MSAccessSQLi.html its good. Cracking Windows 7 NTLM Forum:Newbies corner Posted: Sat Oct 05, 2013 8:10 am Subject: Cracking Windows 7 NTLM sk8er Replies: 2 Views: 13844 or you can use : https://crackstation.net/ saludos Bypassing \' MySQL- [help] WAF Evasion Forum:Sql injection Posted: Sat Sep 24, 2011 4:33 am Subject: Bypassing \' MySQL- [help] WAF Evasion sk8er Replies: 4 Views: 17792 one good option when bloking with internal errors, is use inference (BLIND SQL) for example, SQLiX available on : https://www.owasp.org/index.php/Category:OWASP_SQLiX_Project working with these ... Bypassing \' MySQL- [help] WAF Evasion Forum:Sql injection Posted: Thu Sep 22, 2011 6:13 pm Subject: Bypassing \' MySQL- [help] WAF Evasion sk8er Replies: 4 Views: 17792 if you want to avoid a firewall, I recommend you use a encoded string for you query's, is only one idea Help- Extracting Data from Columns Forum:Sql injection Posted: Tue Sep 20, 2011 3:10 pm Subject: Help- Extracting Data from Columns sk8er Replies: 1 Views: 12484 you tried Blind Sql Injection ?, maybe with these tecnique you get a bit information. in other hand you tried reading files and show in the UNION's comand in this site show a one example : ... Access in phpmyadmin Forum:Newbies corner Posted: Sun Sep 18, 2011 6:52 am Subject: Access in phpmyadmin sk8er Replies: 5 Views: 15765 one resource : http://www.openwall.com/john/ it's useful en these cases Access in phpmyadmin Forum:Newbies corner Posted: Sat Sep 17, 2011 10:36 pm Subject: Access in phpmyadmin sk8er Replies: 5 Views: 15765 in the "owned by uid 512" you should find the root user, or scaling the privilegies Someone can find the admin DIrectory Forum:Newbies corner Posted: Sat Sep 17, 2011 5:54 am Subject: Someone can find the admin DIrectory sk8er Replies: 1 Views: 12600 I guess, a Web Scanning for the listed the directories. Which programing language should I choose? Forum:Newbies corner Posted: Thu Sep 15, 2011 5:31 pm Subject: Which programing language should I choose? sk8er Replies: 4 Views: 17075 I guess phyton Exploiting MYSQL Database driven by ASP? Forum:Newbies corner Posted: Thu Sep 15, 2011 5:30 pm Subject: Exploiting MYSQL Database driven by ASP? sk8er Replies: 3 Views: 15747 "Microsoft OLE DB Provider for ODBC Drivers error '80040e14' [Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression 'fldUserLogin='admin ' or '1'='1'/*''. ... Problem SQLi Forum:Sql injection Posted: Thu Sep 15, 2011 5:23 pm Subject: Problem SQLi sk8er Replies: 4 Views: 17726 you should trie with clausule "HAVING" form more results help me !!! sqli hard... Forum:Sql injection Posted: Thu Sep 15, 2011 5:21 pm Subject: help me !!! sqli hard... sk8er Replies: 1 Views: 11182 te sugiero que intentes con BLIND SQL. I tried with the single cuote : http://www.pampling.com/ficha_producto.php?id_producto=%27 Warning: mysql_fetch_assoc(): supplied argument is not a vali ... Page 1 of 5 Goto page 1, 2, 3, 4, 5Next All times are GMT Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.069 Seconds