Waraxe IT Security Portal
Login or Register
November 6, 2024
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 66
Members: 0
Total: 66
Full disclosure
4 vulnerabilities in ibmsecurity
32 vulnerabilities in IBM Security Verify Access
xlibre Xnest security advisory & bugfix releases
APPLE-SA-10-29-2024-1 Safari 18.1
SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600)
SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333)
APPLE-SA-10-28-2024-8 visionOS 2.1
APPLE-SA-10-28-2024-7 tvOS 18.1
APPLE-SA-10-28-2024-6 watchOS 11.1
APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1
APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1
APPLE-SA-10-28-2024-3 macOS Sequoia 15.1
APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1
APPLE-SA-10-28-2024-1 iOS 18.1 and iPadOS 18.1
Open Redirect / Reflected XSS - booked-schedulerv2.8.5
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> General discussion -> hi, i am new to the forum and need help.
Post new topicReply to topic View previous topic :: View next topic
hi, i am new to the forum and need help.
PostPosted: Tue Apr 14, 2009 1:56 am Reply with quote
madjemas03
Regular user
Regular user
Joined: Apr 14, 2009
Posts: 6




well, i am already experienced in computer forensic, but do not know anything about how phpbb forum runs. all i want is the forum amdin's password because he is racist to every muslims that joins his forum and bans them for no reasons.
here is the forum's link:
http://www.wyrdysm.com/phpBB2/index.php

and some background data:
phpBB Group : 2002
admins: th15 and arcalane.
i am eager to have an answer, but all i want is to scare them, and access to their admin account (th15 if possible) to put them back in place. please help me, they do need a lesson.
View user's profile Send private message
PostPosted: Tue Apr 14, 2009 2:38 am Reply with quote
madjemas03
Regular user
Regular user
Joined: Apr 14, 2009
Posts: 6




will be very fond if you can get the password for me. please respond.
View user's profile Send private message
PostPosted: Tue Apr 14, 2009 1:52 pm Reply with quote
Chb
Valuable expert
Valuable expert
Joined: Jul 23, 2005
Posts: 206
Location: Germany




We do not like cracking-requests with links here. Please remove it.

_________________
www.der-chb.de
View user's profile Send private message Visit poster's website ICQ Number
PostPosted: Tue Apr 14, 2009 3:09 pm Reply with quote
madjemas03
Regular user
Regular user
Joined: Apr 14, 2009
Posts: 6




what do u like then? i guess no one's gonna help me here =/
View user's profile Send private message
PostPosted: Tue Apr 14, 2009 11:47 pm Reply with quote
Chb
Valuable expert
Valuable expert
Joined: Jul 23, 2005
Posts: 206
Location: Germany




We definitely will not crack something for you. And threads about phpBB boards are enough here, I think. Moreover you did not post the version of the board (no, "phpBB Group 2002" is not the version...), so it is really hard for us to help you.

If you are able to get some more details about the forum (version or so), we might help you.

_________________
www.der-chb.de
View user's profile Send private message Visit poster's website ICQ Number
PostPosted: Wed Apr 15, 2009 8:15 am Reply with quote
waraxe
Site admin
Site admin
Joined: May 11, 2004
Posts: 2407
Location: Estonia, Tartu




It's 2.0.22:

http://****/phpBB2/docs/CHANGELOG.html

Direct attack @ phpbb is probably not possible, because there is no known effective exploits for this version.

But I did found serious security hole in uploading functionality in that website.
Basically you can upload files with specific extension and if you use
filename like "test.php.shp", then Apache will treat this as php script.
So you have remote php code execution possibilities as result.
View user's profile Send private message Send e-mail Visit poster's website
PostPosted: Wed Apr 15, 2009 11:14 am Reply with quote
madjemas03
Regular user
Regular user
Joined: Apr 14, 2009
Posts: 6




thanks a lot man, i'll look at that. Very Happy
edit: omfg, it's true xD.
what kind of script could i put?i mean, will html work? i know c++ and html and actionscript, but it's my first time with phpbb, so it won't be as easy as messing up a website hosted on a cheap network xDedit: sorry for my stupidity, only phpbb script works.... Rolling Eyes
View user's profile Send private message
hi, i am new to the forum and need help.
www.waraxe.us Forum Index -> General discussion
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



Space Raider game for Android, free download - Space Raider gameplay video - Zone Raider mobile games
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.046 Seconds