Waraxe IT Security Portal

RustedEarth · Beginner

I'm trying to gain admin access to, or shut down, or even deface, a phpbb forum, and I can't even judge the version because the changelog page doesnt exist, or the name has been changed.

The forum is (just read I cant post that)

I've had a long time gripe with the owner and I'd like to, say, edit, a few things if I could.

If I can even just mildly deface it as a "I was here" sort of thing, would be fantastic.

Any help of any kind would be greatly appreciated.

Thanks in advance. I'll be around daily.

I tried the cookie-admin-hack but it appears it did not work, unless I did it incorrectly. :\

So, can you tell me how to figure out the version, so that I can more accuratly look for exploits for that version?

-Rusted

gibbocool · Advanced user

if the changelog.html file isn't there chances are the admin knows about phpbb exploits and will keep his site up to date.
Only thing you could do is try some <= 2.0.20 exploits as far as i can tell.

Otherwise find out if the site is on a system that hosts other sites and try get in through other sites.