 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 197
 Members: 0
 Total: 197
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
IT Security and Insecurity Portal |
|
|
|
she = jessica = howdark.com ^^;;
I thought you ment Waraxe because of this:
It's weird, because I had seen waraxe use the %2527 thing, but I don't know if it was before, or after she had used it w ... |
|
|
|
|
Waraxe is a she?  Awesome. 
Jessica found this by looking at the way urldecode() worked in phpBB's code, and how magic_quotes affected it.
Ofcourse urldecode() is necessary to make it work, bu ... |
|
|
|
|
Hey Waraxe,
Could you tell me more about this type of PHP insertion? I'm sure you've seen Howdark.com's latest hack, wich executes PHP just by altering a string, like it was a XSS hack. I have figu ... |
|
|
| Page 1 of 1 |
All times are GMT |
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
