Waraxe IT Security Portal

tekcap · Beginner

There is this particular forum I visit where members make posts with links to download music releases. The only problem is they use a system that only allows you see the link if you have a certain amount of posts. This is pretty frustrating considering they put such high post requirements to get anything half decent. Now I didn't sign up here to say please hack this site for me because its pathetic to do that. I did a bit of work and found out some things... first by opening the source file on the website I found out they use this "Cascading Style Sheet(CSS 467), for Invision Power Board 2.2.0". Now I searched Invision Power Board and came up with a link and found this very nice piece of information... "The application is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data to the 'name' parameter before using it in an SQL query." They also listed "Invision Power Services Invision Power Board 2.2.0 " on there list of versions that can be exploited! All this is good news but now I have no idea what to do heh. My ultimate goal is to somehow change my post count and download away Smile

. Could someone point me in the right direction from here? Maybe tell me if its way out of my league? I have Network+ certification if that helps?

waraxe · Site admin

Try suggested test from this thread:

http://www.waraxe.us/ftopict-3293.html

If you get error message, then probably sql injection is possible. There are more exploits for such old IPB version (if it's not patched allready), so just search for exploits (milw0rm and other places) and try them against target.

If you can successfully exploit sql injection vulnerability, then it's possible to fetch admin and user password hashes. In case of successful hash cracking you can log in as admin and do whatever you want, or as alternative you can impersonate some other user, who has more points Smile

tekcap · Beginner

Thank you for such a quick response! Very cool Cool

I got this message

Routing Error

No route matches "/forums/index.php" with {:method=>:get}

Good or bad news?

Also just checked the milw0rm site and found nothing for version 2.2
Do you mind sharing some of these other places?

waraxe · Site admin

You probably used wrong url. So first open target forum's main page - this is base url. Example:

tekcap · Beginner

The site has been patched Sad

Thanks for the little lesson though Idea