 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
 Posted: Mon Nov 17, 2008 3:19 am |
 |
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
 |
|
 |
|
|
|
|
|
| Posted: Mon Nov 17, 2008 3:35 am |
|
|
| revenant |
| Regular user |
 |
|
| Joined: Nov 15, 2008 |
| Posts: 24 |
|
|
|
|
|
|
|
Allright, thanks for helping me. Can we use IRC so I can get a little help while I do this? This is my hacking virginity, so it would help. If you want, this is (kind of) my own personal channel. The only other person using it is my friend.
irc.gamesurge.net #toobin
My darwine is broken (gdi32.dll failed to initialize, happens even when i reinstall, so i cant use windows stuff)
Nice. I got Bars working on wine (CLI mode). Its taking a SHITLOAD of CPU. As in 175% of the User CPU (91% of total). How long will this take? |
|
|
|
|
| Posted: Mon Nov 17, 2008 3:59 am |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
|
|
|
|
| Posted: Mon Nov 17, 2008 4:03 am |
|
|
| revenant |
| Regular user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 24 |
|
|
|
|
|
|
|
| Thats not right. It gets rejected. That can't be right... its the right pw for the hash. Where is the login form? Im just trying ftp. |
|
|
|
|
| Posted: Mon Nov 17, 2008 4:17 am |
|
|
| revenant |
| Regular user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 24 |
|
|
|
|
|
|
|
| Ah, never mind. Im in the admin control panel. Now what? |
|
|
|
|
| Posted: Mon Nov 17, 2008 4:23 am |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
|
|
|
|
| Posted: Mon Nov 17, 2008 4:25 am |
|
|
| revenant |
| Regular user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 24 |
|
|
|
|
|
|
|
| Nice. So if i keep this clandestine, i can use this site as something of a base of operations to execute code on this server! |
|
|
|
|
| Posted: Mon Nov 17, 2008 4:31 am |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
Yes, so it seems  |
|
|
|
|
| Posted: Mon Nov 17, 2008 4:33 am |
|
|
| revenant |
| Regular user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 24 |
|
|
|
|
|
|
|
Eh! Here's a problem.
Warning: phpinfo() has been disabled for security reasons in /home/***/public_html/cutenews/data/Default.tpl on line 64
Could a shell be used to save a copy of this tpl file, edit it and reupload it? Or will the shell most likely be blocked also.
Another problem. When I tried to get the basic shell you linked me too into it:
Forbidden
You don't have permission to access /cutenews/index.php on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache/1.3.41 Server at *** Port 80
[[No sensitive data !!]] |
|
|
|
|
|
 |
|
 |
| Posted: Mon Nov 17, 2008 4:44 am |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| It's obvious, that server admins are implementing various security measures. Right now you have to get as much information about server software as possible. Start with phpversion(), if it's not disabled. |
|
|
|
|
| Posted: Mon Nov 17, 2008 4:46 am |
|
|
| revenant |
| Regular user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 24 |
|
|
|
|
|
|
|
oh shit. I misstyped phpversion and now i get...
Parse error: syntax error, unexpected T_STRING in /home/i***/public_html/cutenews/data/Default.tpl on line 64
every time i try to get into the template editor. im fucked. This happens in the WHOLE SITE, except the rest of the admin panel. Oh fuck fuck fuck.
Now all his news articles are gone too. Wow. Fuck. |
|
|
|
|
| Posted: Mon Nov 17, 2008 4:55 am |
|
|
| waraxe |
| Site admin |
|
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
Bad luck .... you must be more careful and not hurry things up. Best choice is to inject backdoor to the styles and then make all tests through it.
Example if(isset()...eval(base64_decode())... |
|
|
|
|
| Posted: Mon Nov 17, 2008 5:04 am |
|
|
| revenant |
| Regular user |
|
|
| Joined: Nov 15, 2008 |
| Posts: 24 |
|
|
|
|
|
|
|
| Is there anything you can do to repair the tpl file? If all the news things are gone, it might be possible to just leave that and dissapear afterwards, but i need the tpl fixed. |
|
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 2 of 2
Goto page Previous1, 2
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 118
Members: 0
Total: 118
