Waraxe IT Security Portal

AgentJ9 · Active user

I see EVERYONE On here has a way of getting hashes & salts from a forum, so can anyone tell me what exploits/tools you use? would Greatly appreciate it! I use the Remote Deluxe Sql Exploit but it=Trash. Like how do you guys get hashes/salts from a database & stuff? ANY answer is Appreciated! Thanks!

ZiPo · Advanced user

Check google for "vbulletin exploit" you'll find lot of links.

Some of the links even point's back here Smile

AgentJ9 · Active user

Yes, But how do you get hashes/salts from a forum? How do you get this information from a Database? Or Website?

ZiPo · Advanced user

You are using exploit "which is basicly a piece of code" created to take advantage of a specific vulnerabilty in website application.

For example: While browsing website you notice that there is installed and used application for Advertisment managment (something like mamboads for example) and you know that some versions are vulnerable to the SQL injection. So you take advantage of that vulnerability to read directly from website database and read whatever info you need.

Altought there are similar exploits they are all different in some way. Sometimes there is SQL and injections involved, sometimes could be something like directory traversals, RFI, LFI....too many things on this subject. It all depends on the "target" website and applications installed.

There is no universal solution, you will have to research and read a little bit about all this.