Login or Register :: Home :: Search :: Your Account :: Forums :: Waraxe Advisories :: Tools :: November 17, 2024 Menu Home Logout Discussions Forums Members List IRC chat Tools Base64 coder MD5 hash CRC32 checksum ROT13 coder SHA-1 hash URL-decoder Sql Char Encoder Affiliates y3dips ITsec Md5 Cracker User Manuals AlbumNow Content Content Sections FAQ Top Info Feedback Recommend Us Search Journal Your Account User Info Welcome, Anonymous Nickname Password (Register) Membership: Latest: MichaelSnaRe New Today: 0 New Yesterday: 0 Overall: 9144 People Online: Visitors: 99 Members: 0 Total: 99 Full disclosure SEC Consult SA-20241112-0 :: Multiple vulnerabilities in Siemens Energy Omnivise T3000 (CVE-2024-38876, CVE-2024-38877, CVE-2024-38878, CVE-2024-38879) Security issue in the TX Text Control .NET Server for ASP.NET. SEC Consult SA-20241107-0 :: Multiple Vulnerabilities in HASOMED Elefant and Elefant Software Updater Unsafe eval() in TestRail CLI 4 vulnerabilities in ibmsecurity 32 vulnerabilities in IBM Security Verify Access xlibre Xnest security advisory & bugfix releases APPLE-SA-10-29-2024-1 Safari 18.1 SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600) SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333) APPLE-SA-10-28-2024-8 visionOS 2.1 APPLE-SA-10-28-2024-7 tvOS 18.1 APPLE-SA-10-28-2024-6 watchOS 11.1 APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1 APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1 IT Security and Insecurity Portal www.waraxe.us Forum Index -> Cross-site scripting aka XSS -> uload shell by xss View previous topic :: View next topic uload shell by xss Posted: Sat May 31, 2008 11:18 am siurek22 Regular user Joined: May 31, 2008 Posts: 13 some time ago I've read some article about uploading shell by xss but I don't remeber how do it. How i can do it? sorry for my English Re: uload shell by xss Posted: Sat May 31, 2008 12:29 pm gibbocool Advanced user Joined: Jan 22, 2008 Posts: 208 siurek22 wrote: some time ago I've read some article about uploading shell by xss but I don't remeber how do it. How i can do it? sorry for my English I don't think it's possible, unless used in conjunction with something like php code execution or sql injection. _________________ http://www.gibbocool.com Posted: Sat May 31, 2008 4:06 pm siurek22 Regular user Joined: May 31, 2008 Posts: 13 I don't ask you if this is posible but how do it I know this is posible per 100% (it doesn't work whenever) Posted: Sat May 31, 2008 5:23 pm pexli Valuable expert Joined: May 24, 2007 Posts: 665 Location: Bulgaria This is posible if you steal admin hash and upload shell from admin panel. Re: uload shell by xss Posted: Sat May 31, 2008 8:34 pm waraxe Site admin Joined: May 11, 2004 Posts: 2407 Location: Estonia, Tartu siurek22 wrote: some time ago I've read some article about uploading shell by xss but I don't remeber how do it. How i can do it? sorry for my English XSS and shell uploading to target server are not directly correlated. Maybe you meant this thing: http://www.securiteam.com/tools/6X00120HFO.html Posted: Sat May 31, 2008 8:55 pm siurek22 Regular user Joined: May 31, 2008 Posts: 13 "steal admin hash" very funy... Have you ever seen hash from phpbb3? You are good if you crash it ;] "Maybe you meant this thing: " no i don't think about it. I remeber in this article which I was reading, was very long code of html and when i put them at website i can upload some file Posted: Sun Jun 01, 2008 1:18 am gibbocool Advanced user Joined: Jan 22, 2008 Posts: 208 You don't understand siurek22, XSS is executing a javascript or other script file from one website on the target website. Javascript has no file manipulation or system manipulation capabilities as it is purely client side. _________________ http://www.gibbocool.com Posted: Sun Jun 01, 2008 7:32 am pexli Valuable expert Joined: May 24, 2007 Posts: 665 Location: Bulgaria siurek22 wrote: "steal admin hash" very funy... Have you ever seen hash from phpbb3? You are good if you crash it ;] "Maybe you meant this thing: " no i don't think about it. I remeber in this article which I was reading, was very long code of html and when i put them at website i can upload some file ...and you ever seen passwordspro?I love funny guy's like you dude. Posted: Sun Jun 01, 2008 8:00 am siurek22 Regular user Joined: May 31, 2008 Posts: 13 yes i've seen passwordspro but when i put hash md5 i had to wait 40h i have a database where i have 20000 hashes crypted by phpbb_hash() and i want crash only 10 from 20000 but how many time will be done? Posted: Sun Jun 01, 2008 10:57 am lenny Valuable expert Joined: May 15, 2008 Posts: 275 Surely you could use a remote file include exploit to run a shell - Its not exactly what you wanted, but you get the same effect uload shell by xss www.waraxe.us Forum Index -> Cross-site scripting aka XSS You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum All times are GMT Page 1 of 1 All Posts1 Day7 Days2 Weeks1 Month3 Months6 Months1 YearOldest FirstNewest First Select a forumSecurity Research by waraxe----------------General discussionHow to fixMetasploit relatedHash cracking requests----------------MD5 hashesAll other hashesHash related informationhttp://www.waraxe.us portal----------------SuggestionsCooperation proposalsSecurity bugs and issues in general----------------Newbies cornerSql injectionCross-site scripting aka XSSRemote file inclusionFull path disclosureShell commands injectionPhishing and Social EngineeringAll other security holesVarious software----------------PhpNukePostNukePhpBBXMB forumvBulletin BoardInvision Power Boarde107MamboJoomlaXOOPSM$ WindowsLinux worldAll other softwareCoppermine Photo GalleryProgramming languages----------------PhpMySqlPerlJavaJavascriptC and C++Visual BasicBorland Delphi and PascalPythonHTML and XMLAssemblerReverse engineering----------------Newbies cornerDisassemblingPHP script decode requestsMiscellaneous stuff----------------Future of the ITNanotechnologyFun cornerLinksTry2hack sitesProxy databaseDirect Downloads----------------ToolsTutorialsWordlistsRecycle Bin----------------Removed messagesOutdated posts Powered by phpBB © 2001-2008 phpBB Group

Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.055 Seconds