Waraxe IT Security Portal
Login or Register
April 28, 2025
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 105
Members: 0
Total: 105
Full disclosure
[IWCC 2025] CfP: 14th International Workshop on Cyber Crime -Ghent, Belgium, Aug 11-14, 2025
Inedo ProGet Insecure Reflection and CSRF Vulnerabilities
Ruby on Rails Cross-Site Request Forgery
Microsoft ".library-ms" File / NTLM Information Disclosure (Resurrected 2025)
HNS-2025-10 - HN Security Advisory - Local privilege escalation in Zyxel uOS
APPLE-SA-04-16-2025-4 visionOS 2.4.1
APPLE-SA-04-16-2025-3 tvOS 18.4.1
APPLE-SA-04-16-2025-2 macOS Sequoia 15.4.1
APPLE-SA-04-16-2025-1 iOS 18.4.1 and iPadOS 18.4.1
Business Logic Flaw: Price Manipulation - AlegroCartv1.2.9
Stored XSS in "Message" Functionality - AlegroCartv1.2.9
XSS via SVG Image Upload - AlegroCartv1.2.9
BBOT 2.1.0 - Local Privilege Escalation via Malicious ModuleExecution
83 vulnerabilities in Vasion Print / PrinterLogic
[CVE-2025-32102, CVE-2025-32103] SSRF and Directory Traversal in CrushFTP 10.7.1 and 11.1.0 (as well as legacy 9.x)
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PhpBB -> PHPBB noob, not total noob, needs help
Post new topicReply to topic View previous topic :: View next topic
PHPBB noob, not total noob, needs help
PostPosted: Tue Feb 19, 2008 11:18 am Reply with quote
RustedEarth
Beginner
Beginner
Joined: Feb 19, 2008
Posts: 1




I'm trying to gain admin access to, or shut down, or even deface, a phpbb forum, and I can't even judge the version because the changelog page doesnt exist, or the name has been changed.

The forum is (just read I cant post that)

I've had a long time gripe with the owner and I'd like to, say, edit, a few things if I could.

If I can even just mildly deface it as a "I was here" sort of thing, would be fantastic.

Any help of any kind would be greatly appreciated.

Thanks in advance. I'll be around daily.

I tried the cookie-admin-hack but it appears it did not work, unless I did it incorrectly. :\

So, can you tell me how to figure out the version, so that I can more accuratly look for exploits for that version?

-Rusted
View user's profile Send private message
PostPosted: Wed Feb 20, 2008 5:43 am Reply with quote
gibbocool
Advanced user
Advanced user
Joined: Jan 22, 2008
Posts: 208




if the changelog.html file isn't there chances are the admin knows about phpbb exploits and will keep his site up to date.
Only thing you could do is try some <= 2.0.20 exploits as far as i can tell.

Otherwise find out if the site is on a system that hosts other sites and try get in through other sites.
View user's profile Send private message Visit poster's website
PHPBB noob, not total noob, needs help
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.045 Seconds