Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: December 22, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 158 Members: 0 Total: 158 Full disclosure CyberDanube Security Research 20241219-0 | Authenticated Remote Code Execution in Ewon Flexy 205 Stored XSS with Filter Bypass - blogenginev3.3.8 [SYSS-2024-085]: Broadcom CA Client Automation - Improper Privilege Management (CWE-269) [KIS-2024-07] GFI Kerio Control <= 9.4.5 Multiple HTTP Response Splitting Vulnerabilities RansomLordNG - anti-ransomware exploit tool APPLE-SA-12-11-2024-9 Safari 18.2 APPLE-SA-12-11-2024-8 visionOS 2.2 APPLE-SA-12-11-2024-7 tvOS 18.2 APPLE-SA-12-11-2024-6 watchOS 11.2 APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 APPLE-SA-12-11-2024-4 macOS Sonoma 14.7.2 APPLE-SA-12-11-2024-3 macOS Sequoia 15.2 APPLE-SA-12-11-2024-2 iPadOS 17.7.3 APPLE-SA-12-11-2024-1 iOS 18.2 and iPadOS 18.2 SEC Consult SA-20241211-0 :: Reflected Cross-Site Scripting in Numerix License Server Administration System Login IT Security and Insecurity Portal www.waraxe.us Forum Index -> PhpNuke -> hashes in table authors and users change bug or what? help! Goto page 1, 2Next View previous topic :: View next topic hashes in table authors and users change bug or what? help! Posted: Mon May 28, 2007 1:29 am diegocure15 Active user Joined: Sep 22, 2004 Posts: 27 ok, this is whats going on, last weekend i was about to log in into my user account wich is the same as the admin?s account i was not able to log into the user one but i dod loged into the admins one, weird huh? well i went into my db and found out that the hash for my user account was different then the admin account so i went on and copy the hash from the admin and paste into the users and i did loged in ok and evrything went back to normal, i have no idea what happend, then the next day i was going to log into the user account and guess what? i was not able to loged into it again because hash was different again, so i did the same, log into my db and now it is even weird, now both accounts have the same hash and i cant loged into my users one but i can log into my admins account. is there any new bugs or something that i am not aware of? Last edited by diegocure15 on Mon May 28, 2007 3:05 pm; edited 1 time in total Posted: Mon May 28, 2007 9:56 am Chb Valuable expert Joined: Jul 23, 2005 Posts: 206 Location: Germany Maybe there is some kind of ban on your user account. _________________ www.der-chb.de Posted: Mon May 28, 2007 2:59 pm diegocure15 Active user Joined: Sep 22, 2004 Posts: 27 ban? what do you mean? Posted: Mon May 28, 2007 4:43 pm Chb Valuable expert Joined: Jul 23, 2005 Posts: 206 Location: Germany Maybe your account has been deactivated or something like this. _________________ www.der-chb.de Posted: Mon May 28, 2007 5:39 pm pexli Valuable expert Joined: May 24, 2007 Posts: 665 Location: Bulgaria diegocure15 your site has been haXored.Stop your site and check all scripts for eval code.Change password for db and admin panel.Maybe you need to change the host if your host sucksssss. P.S.My engl.sucks some time Posted: Mon May 28, 2007 6:46 pm diegocure15 Active user Joined: Sep 22, 2004 Posts: 27 koko wrote: diegocure15 your site has been haXored.Stop your site and check all scripts for eval code.Change password for db and admin panel.Maybe you need to change the host if your host sucksssss. P.S.My engl.sucks some time but how i have been on this server for a while and they are allways making sure the server is updated and secure any ideas how? can you send me your email so we can talk over msn messenger? Posted: Mon May 28, 2007 7:21 pm Chb Valuable expert Joined: Jul 23, 2005 Posts: 206 Location: Germany The server may be secure. But what about your website? Is it updated? And even if, there can be some vulnerabilities. Check Google or SecurityFocus or something for more information... _________________ www.der-chb.de Posted: Mon May 28, 2007 8:14 pm diegocure15 Active user Joined: Sep 22, 2004 Posts: 27 did that already thats why i came here for help, there is nothing anywhere about any new bugs or anythig Posted: Tue May 29, 2007 2:32 am Sm0ke Moderator Joined: Nov 25, 2006 Posts: 141 Location: Finland Your site sure is vulnerable.. 60855e2cf8000122000************* update your phpnuke version to latest version.. Posted: Tue May 29, 2007 5:32 am pexli Valuable expert Joined: May 24, 2007 Posts: 665 Location: Bulgaria Sm0ke wrote: Your site sure is vulnerable.. 60855e2cf8000122000************* update your phpnuke version to latest version.. Very very nice sm0ke. Posted: Tue May 29, 2007 5:21 pm diegocure15 Active user Joined: Sep 22, 2004 Posts: 27 Sm0ke wrote: Your site sure is vulnerable.. 60855e2cf8000122000************* update your phpnuke version to latest version.. how do you know my site? and i will update but can you tell me why and how did you came to that conclusion? thanks for your help. Posted: Tue May 29, 2007 6:13 pm Chb Valuable expert Joined: Jul 23, 2005 Posts: 206 Location: Germany This is not really difficult. When you search for your nickname in Google, you will find a post at the phpBB forums. There you have posted a path. With this path you can find out the directory or site name. When you google for this site name, you will find your website. And yup, it is down for maintence. But a look into Google's cache tells me "PHP Nuke". ) _________________ www.der-chb.de Posted: Tue May 29, 2007 7:20 pm Sm0ke Moderator Joined: Nov 25, 2006 Posts: 141 Location: Finland just like Chb wrote Posted: Tue May 29, 2007 9:41 pm diegocure15 Active user Joined: Sep 22, 2004 Posts: 27 Chb wrote: This is not really difficult. When you search for your nickname in Google, you will find a post at the phpBB forums. There you have posted a path. With this path you can find out the directory or site name. When you google for this site name, you will find your website. And yup, it is down for maintence. But a look into Google's cache tells me "PHP Nuke". ) that i knew what i meant was whats the vulnebirality or where is the problem "bug" i have try to allways look for new bugs or anything like it so i can keep my site updated, and thats what i really like to know, thanks guys for your time and help. and also i have 7.6 is there a pack that i can apply to my version so i dont have to update one by one? exe: 7.6 update to 7.7 , 7.7 update to .7.8 so on and so on ? a packege that i can use to update from 7.6 up to the latest one? thanks Posted: Wed May 30, 2007 2:27 pm waraxe Site admin Joined: May 11, 2004 Posts: 2407 Location: Estonia, Tartu I suggest to use latest patched nuke version: http://www.nukescripts.net/ Next, use Sentinel for extra protection. And I suggest strongly to use some random sql table prefix. Default is "nuke_", better is "h8Pfq7Vbe3x_" for example. In this way, even if attacker will find sql injection hole and manages somehow to bypass Sentinel filters, then he/she cant steal admin credentials in easy way hashes in table authors and users change bug or what? help! www.waraxe.us Forum Index -> PhpNuke You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 2 Goto page 1, 2Next All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.039 Seconds