+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Team Intra] Official Help Thread [Ask us a question] (/showthread.php?tid=1835848)
[Team Intra] Official Help Thread [Ask us a question] - No - Oct 19, 2011
[img]http://i1178.photobucket.com/albums/x362/JupiiterDesigns/try2-1.png[/img]
Team Intra - Official WebApp Security Help Thread
Welcome to our official help thread, if you have a problem or question regarding Web Application security, just post below in the following format and one of our members will help you out.
Rules: Strictly no full blackhat stuff or specific website hack requests. Also, no DDoS questions, I don't consider it hacking. Also, DO NOT PM ME.
Post Template:
Code
[b][color=#32CD32]Vulnerable Link:[/color][/b]
[b][color=#32CD32]Question/Problem:[/color][/b]* - HaxOr❤ - Oct 19, 2011
Vouch for this guy...He will help you alot!
* - No - Oct 19, 2011
(Oct 19, 2011 04:48 AM)๖ۣۜΗ α x O r ♥ Wrote: Vouch for thiS guy...He will help you alot!
Thanks for the vouch mate, thread disappeared. :P
* - The Ion - Oct 19, 2011
What is appache tomcat 5.2.25 vulnerablity how can i exploit it potentially mind explaining me ?
* - Pirate - Oct 19, 2011
Sorry , I just need an info and I don't have the vulnerable link.
How can we prevent our website from SQLi attackers ? Is there a method to block SQL queries.. Web Application Firewall gets tricked if we use words like this /*!uNiOn*/ so what is the exact way ? Please and thank you!
* - Killuminatii - Oct 19, 2011
(Oct 19, 2011 07:06 AM)damienomen Wrote: Sorry , I just need an info and I don't have the vulnerable link.
How can we prevent our website from SQLi attackers ? Is there a method to block SQL queries.. Web Application Firewall gets tricked if we use words like this /*!uNiOn*/ so what is the exact way ? Please and thank you!
Thats also what I need to know, but I dont have a vulnerable link either, but hope you can answer my question.
* - elmnas - Oct 19, 2011
Hello master,
I wonder have you experience in Metasploit etc? Please pm if you have.
Thanks in advantage
Cheers.!
* - DARK CP4N3L - Oct 19, 2011
Thanks for opening this thread zelos
my question is why is it that when i get the admin details of a website i sqlied and find the admin panel then try logging in with the admin id and password doesnt work
instead it says username or passwd wrong
but im sure its correct because i injected it myself
a site like
http://c2-europe.eu
the admin panel is
http://c2-europe.eu:2082
for this reason i have not been able to deface because i cant log into any website whch i sqli
the only one i got recently that logged in is in chinese
which i dont understand
thanks zelos
thats my major problem
i have up to four sites like this
thanks once more.
* - Dirty Ghetto Kid - Oct 19, 2011
Hey there.
After you scan a site for open ports and vulnerabilities you van search for the exploit but how can u do the exploit? Sometimes it is a large text in md5 where to put it in? Mabey you know a good treath about this?
Cheers!
* - AnGrY Bo - Oct 19, 2011
How can I symlink if the server Perl was inactive?
* - noober1001 - Oct 19, 2011
(Oct 19, 2011 07:26 AM)DARK CP4N3L Wrote: Thanks for opening this thread zelosBro, the admin panel, you have found is not the admin panel in reality.. it is control panel. Username and password of control panel are different mostly from the admin panel's username and password.
my question is why is it that when i get the admin details of a website i sqlied and find the admin panel then try logging in with the admin id and password doesnt work
instead it says username or passwd wrong
but im sure its correct because i injected it myself
a site like
http://c2-europe.eu
the admin panel is
http://c2-europe.eu:2082
for this reason i have not been able to deface because i cant log into any website whch i sqli
the only one i got recently that logged in is in chinese
which i dont understand
thanks zelos
thats my major problem
i have up to four sites like this
thanks once more.
Just try to find the admin panel of that site, not control panel.
* - Alienguy - Oct 19, 2011
Vulnerable Link: chip.in ( search box is vulnerable )
Question/Problem: When I type <h1> i love hf and search it it shows "i love hf " in big letters. But i can't find a way to open alert-box using xss there .
* - dumar - Oct 19, 2011
(Oct 19, 2011 07:59 AM)Alienguy Wrote: Vulnerable Link: chip.in ( search box is vulnerable )
Question/Problem: When I type <h1> i love hf and search it it shows "i love hf " in big letters. But i can't find a way to open alert-box using xss there .
Here you are :)
Code
This sitE/search.php?q=abc%3Cscript%3Ealert%28%2Fhello+world%2F%29%3B%3C%2Fscript%3E&search_list=5&Submit=Go// maybe change topic name to "Intra help" so we all will can help :D
* - Alienguy - Oct 19, 2011
(Oct 19, 2011 08:10 AM)dumar Wrote: Here you are :)You are the most awesome hacker I've ever seen , Thanks a million !
Codehttp://THIS SITE/search.php?q=abc%3Cscript%3Ealert%28%2Fhello+world%2F%29%3B%3C%2Fscript%3E&search_list=5&Submit=Go
// maybe change topic name to "Intra help" so we all will can help :D
* - Prominent - Oct 19, 2011
Vouch for my team Intra mate, I'm sure he will help you all.