 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 892
 Members: 0
 Total: 892
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
How to hack this forum: |
|
 Posted: Fri Nov 23, 2007 11:38 pm |
 |
|
| brandon99919 |
| Beginner |
 |
|
| Joined: Nov 24, 2007 |
| Posts: 3 |
| Location: Hyrule |
|
|
 |
|
 |
|
|
|
|
|
|
Re: How to hack this forum: |
|
| Posted: Sat Nov 24, 2007 3:51 am |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| brandon99919 wrote: | http://www.target.com/phpbb/?mforum=victim
Can anybody explain to me how to hack this type of Phpbb forums?
http://www.target.com/phpbb/?mforum=victim
I can't figure out the version or anything. I'm trying to hack it for admin access.
I don't think it's even possible to hack this kind of forums though. |
Please don't post real URL-s next time!
Still ... they are using old and unpatched version of Multi-Forum.
Look here:
http://www.securityfocus.com/bid/26213/exploit
 |
|
|
|
|
| Posted: Sat Nov 24, 2007 4:35 pm |
|
|
| brandon99919 |
| Beginner |
|
|
| Joined: Nov 24, 2007 |
| Posts: 3 |
| Location: Hyrule |
|
|
|
|
|
|
| Ok, but I don't understand how to hack it. |
|
|
|
|
| Posted: Sat Nov 24, 2007 6:29 pm |
|
|
| astropi |
| Regular user |
|
|
| Joined: Nov 21, 2007 |
| Posts: 20 |
|
|
|
|
|
|
|
| It's can't be more clear than that. You have to work your brain a little or learn some http basics. |
|
|
|
|
| Posted: Sat Nov 24, 2007 6:36 pm |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| brandon99919 wrote: | | Ok, but I don't understand how to hack it. |
Use sql injection to steal needed data from database, this can finally give you admin credentials to phpbb installation. |
|
|
|
|
| Posted: Mon Nov 26, 2007 2:30 am |
|
|
| brandon99919 |
| Beginner |
|
|
| Joined: Nov 24, 2007 |
| Posts: 3 |
| Location: Hyrule |
|
|
|
|
|
|
| waraxe wrote: | | brandon99919 wrote: | | Ok, but I don't understand how to hack it. |
Use sql injection to steal needed data from database, this can finally give you admin credentials to phpbb installation. |
Ok, can you show me how to do sql injection for that site? |
|
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
