Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: September 22, 2026 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 272 Members: 0 Total: 272 Full disclosure [0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2) [0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8) [0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8) [0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8) [0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (7.2) [0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8) [0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8) [0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8) **Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8) CVE-2026-52307: Stored XSS in 1CMS v5.6 HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 /CVE-2026-12556 Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists O-CMS 1.0.0 Authenticated OS Command Injection viaai_cli_script Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery IT Security and Insecurity Portal www.waraxe.us Forum Index -> Newbies corner -> How to hack FTP View previous topic :: View next topic How to hack FTP Posted: Sun Aug 31, 2008 6:20 am hackingnatt Beginner Joined: Aug 27, 2008 Posts: 3 Hi One, pls tell me how to hack FTP by right way. I hav been used hydra command line. But it wasn't OK. thanks Posted: Sun Aug 31, 2008 12:55 pm lenny Valuable expert Joined: May 15, 2008 Posts: 275 Ok, well first get the type of software used on the target server Once you have that, you can start to look into exploits for the sortware... Posted: Mon Sep 01, 2008 4:39 am hackingnatt Beginner Joined: Aug 27, 2008 Posts: 3 how can i know the software which they are using. I only know the sites. I don;t know the software. thx Posted: Mon Sep 01, 2008 11:30 am lenny Valuable expert Joined: May 15, 2008 Posts: 275 Ok, when you connect via FTP with fake username and password, usually in the header is the server software (and sometimes version). Try connection to the FTP server using fake usernames and passwords and post the entire header of the FTP connection - If we have this we may be able to help you Posted: Wed Feb 04, 2009 7:13 pm KriVa Beginner Joined: Feb 04, 2009 Posts: 2 I'm kinda new here... but if you use a WhoIs site,and you come up with "Server type: Apache", is that actually the server software or not? Posted: Wed Feb 04, 2009 7:19 pm lenny Valuable expert Joined: May 15, 2008 Posts: 275 Apache is a type of web server software that is behind many websites on the internet. It is very "large" in terms of software making it prone to vulnerabilities. If your target is running a vulnerable version of Apache, you could gain entry relatively quickly to the target server in one form or another. Posted: Wed Feb 04, 2009 7:33 pm KriVa Beginner Joined: Feb 04, 2009 Posts: 2 this sounds really tempting. I know a website i'd really love to get access to,can you explain me how? Or show me a topic where it's explained? Anythin that helped you can help me I guess Posted: Wed Feb 04, 2009 8:46 pm lenny Valuable expert Joined: May 15, 2008 Posts: 275 Ok, firstly i'll say that however tempting it is, it probably won't work unfortunately. The first job is to identify possible weak points for attack, eg software. You have already identified that the server runs Apache, the next step would be to get the names and version numbers of as many pieces of software running on the server as possible. Some ideas: The FTP server and version? The version of any forum or CMS software the website is hosting? The Apache version? Is there a remote-accessible MySQL server running? Is there a SSH daemon running? If any of these still confuse you, PM me with the details and i'll do some digging for you Posted: Wed Feb 25, 2009 5:05 am sk8er Advanced user Joined: May 09, 2005 Posts: 64 I need information ... : for , "proftpd 3.1" salu2 Posted: Wed Feb 25, 2009 5:30 pm lenny Valuable expert Joined: May 15, 2008 Posts: 275 Ok, so now look for exploits. Let me google that for you Find a few that look like viable attack vectors and try a few out. Posted: Wed Feb 25, 2009 9:20 pm one23 Advanced user Joined: Dec 12, 2008 Posts: 98 The Last Vuln For ProFTPd : http://www.milw0rm.com/exploits/8037 i guess. Posted: Thu Feb 26, 2009 3:45 am sk8er Advanced user Joined: May 09, 2005 Posts: 64 thank's How to hack FTP www.waraxe.us Forum Index -> Newbies corner You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.049 Seconds