Waraxe IT Security Portal

is0t0pe · Regular user

I am having a bit of trouble when it comes to exploiting, I can sucessfully exploit 2.0.11 very well, in fact I've nailed many sites witgh it, and am still learning, thing is, I'm trying to expand and learn other sploits, but when somone mkaes a post like this with the code, I have NO idea what to do with it, do i complile it and put it in a cretain dir somewhere? like this for example
http://www.waraxe.us/ftopict-869.html
ppl say "it works" or whatever, but I have no idea what to do with the code, do I compile it? If so, what compiler should I use? So pretty much I have no idea what to do with code like this, I'm jus tying to learn other versions to sploit other than 2.0.11 or 2.0.12 which I can already do fairly easily..
Thanks for the help.

is0t0pe.

syntax9 · Active user

is0t0pe · Regular user

Thanks, but nnow the next step is where to put my compiled exe...i guess the sploit already tells me, but then again maybe I'm just stupid...

syntax9 · Active user

it doesnt matter where you run it from. if its an exe its more than likely like a script where u add in the paramaters. If its something like a perl script you will either need to add it to path or run the script though the local path. For example.

If exploit.exe run from anywhere .... C:\exploit.exe
If perl and path set. C:\perl exploit.pl
If path not set. (find perl dir) ex. C:\perl\bin\perl C:\exploit.pl

These are pretty damn basic, if you cant even do command line, maybe should learn the basic 5 old dos shell command lines to get you started then move to exploits.

most exe and pl pre made scripts will just ask you for paramaters. Ex.
C:\perl\bin\perl exploit.pl C:\expolit_dir\exploit.pl www.exploitsite.com /home/www/phpbb/

Gl hope this answered your question.

shai-tan · Valuable expert

I suggest instead of using Native Windows apps use Cygwin or a Linux distro for exploits and security research.
Windows is not made really for development and is really crap when it comes to security (all angles of security). If you consider yourself a power user and/or "Hacker" (the wikipedia definition of hacker) then get a Linux distro.
You can order free Ubuntu Linux CD's from https://shipit.ubuntu.com

Shai-tan

is0t0pe · Regular user

Quick question....

WHen copying and pasting a script into a text file to compile when does the script begin? Do I paste */ this and everything after? how do I know where to begin copying.. also, when I try compiling it, it cant find the include files, where do I get them?

thanks