|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
I have admin on a IPB |
|
Posted: Tue Oct 26, 2010 5:02 am |
|
|
metaphaze |
Regular user |
|
|
Joined: Oct 21, 2010 |
Posts: 7 |
Location: Cyberspace |
|
|
|
|
|
|
I have admin on a IPB...
I want to back up the SQL database so I can have the complete hash file database locally, is this possible?
Also how can I clear the ACP login logs? I can view it, but don't see an option to maniupulate the log file... |
|
|
|
|
Posted: Tue Oct 26, 2010 5:08 am |
|
|
Chb |
Valuable expert |
|
|
Joined: Jul 23, 2005 |
Posts: 206 |
Location: Germany |
|
|
|
|
|
|
Is there a possibility to execute SQL queries? If so, you could check the table name (e.g. in a fresh and new installation, source code or in the documentation) und do a TRUNCATE on that table. |
|
|
|
|
Posted: Tue Oct 26, 2010 5:12 am |
|
|
metaphaze |
Regular user |
|
|
Joined: Oct 21, 2010 |
Posts: 7 |
Location: Cyberspace |
|
|
|
|
|
|
Chb wrote: | Is there a possibility to execute SQL queries? If so, you could check the table name (e.g. in a fresh and new installation, source code or in the documentation) und do a TRUNCATE on that table. |
Whoa went above my head a bit. I have complete access over the board. I am "Admin (root)". I need to clear the ACP logs, or up to a certain date, and would love to download username/hashed pass/email etc... from db table.
I have these options over SQL
SQL Management
SQL Toolbox
SQL Back Up
SQL Runtime Info
SQL System Vars
SQL Processes |
|
|
|
|
Posted: Tue Oct 26, 2010 1:31 pm |
|
|
vince213333 |
Advanced user |
|
|
Joined: Aug 03, 2009 |
Posts: 737 |
Location: Belgium |
|
|
|
|
|
|
What version of IPB is it? |
|
|
|
|
Posted: Tue Oct 26, 2010 3:28 pm |
|
|
Chb |
Valuable expert |
|
|
Joined: Jul 23, 2005 |
Posts: 206 |
Location: Germany |
|
|
|
|
|
|
My idea was to clear the log table in the database using a database query (in that case MySQL). "TRUNCATE [tablename]" tells the database management system to clear the specific table, e.g. the logs.
So you are looking for a possibility to execute SQL queries. Unfortunately I do not know whether IPB ACP allows that or not. An older version of WBB did so, if I recall that right. |
|
|
|
|
Posted: Tue Oct 26, 2010 5:51 pm |
|
|
metaphaze |
Regular user |
|
|
Joined: Oct 21, 2010 |
Posts: 7 |
Location: Cyberspace |
|
|
|
|
|
|
vince213333 wrote: | What version of IPB is it? |
Looks like a patched 2.3.5 |
|
|
|
|
Posted: Tue Oct 26, 2010 6:58 pm |
|
|
vince213333 |
Advanced user |
|
|
Joined: Aug 03, 2009 |
Posts: 737 |
Location: Belgium |
|
|
|
|
|
|
this might be worth a try? |
|
|
|
|
Posted: Tue Oct 26, 2010 9:45 pm |
|
|
metaphaze |
Regular user |
|
|
Joined: Oct 21, 2010 |
Posts: 7 |
Location: Cyberspace |
|
|
|
|
|
|
I may try the shell later...
I did figure out how to export the member list hashes etc...
Now if I can figure out how to get the format of this file a little easier to work with I'll start cracking 17,643 passwords |
|
|
|
|
Posted: Wed Oct 27, 2010 8:02 am |
|
|
vince213333 |
Advanced user |
|
|
Joined: Aug 03, 2009 |
Posts: 737 |
Location: Belgium |
|
|
|
|
|
|
Perl script might be useful to separate your file in a hash and salt list? Or you can do it with notepad++ macro's too |
|
|
|
|
Posted: Thu Oct 28, 2010 3:08 am |
|
|
capt |
Advanced user |
|
|
Joined: Nov 04, 2008 |
Posts: 232 |
|
|
|
|
|
|
|
also I would get a shell up for password logging ^_^ and even possibly gaining root? |
|
|
|
|
Posted: Wed Nov 17, 2010 3:29 pm |
|
|
Poison |
Advanced user |
|
|
Joined: Jul 30, 2008 |
Posts: 126 |
|
|
|
|
|
|
|
where did you find the table containing the hashes ect im struggling |
|
|
|
|
www.waraxe.us Forum Index -> Invision Power Board
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|