+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: SSL 2.0 Deprecated Protocol (/showthread.php?tid=3709557)
SSL 2.0 Deprecated Protocol - ExaNet - Aug 22, 2013
I recently found a BTC gambling site that uses SSL 2.0 which I know is vulnerable. But I am not familiar at all to this type of exploit. How could I use this to my advantage?
* - 3 Kings - Aug 22, 2013
http://www.rapid7.com/db/vulnerabilities/sslv2-and-up-enabled
* - Dr41DeY - Aug 22, 2013
Hello, ExaNet! :D
If you're not familiar with those things.
You can learn SQL Injection: SQL Injection Attacks
Hope, you enjoy! ;)
* - ExaNet - Aug 22, 2013
(Aug 22, 2013 05:19 PM)Dr41DeY Wrote: Hello, ExaNet! :DSSL, not SQL. I know SQL injection.
If you're not familiar with those things.
You can learn SQL Injection: SQL Injection Attacks
Hope, you enjoy! ;)
* - Krieg - Aug 22, 2013
(Aug 22, 2013 05:19 PM)Dr41DeY Wrote: Hello, ExaNet! :D
If you're not familiar with those things.
You can learn SQL Injection: SQL Injection Attacks
Hope, you enjoy! ;)
Please kill yourself.
You post nothing but SQLi and defacements.
OP, what exactly are you trying to do, knowing that it's using a vulnerable SSL implementation? Sniff traffic, or actually get execution?
* - ExaNet - Aug 22, 2013
(Aug 22, 2013 10:27 PM)Krieg Wrote: Please kill yourself.Well, it's a bitcoin exchange site. So I'm trying to get bitcoins somehow. I don't know what this is capable of. So I don't know what to do.
You post nothing but SQLi and defacements.
OP, what exactly are you trying to do, knowing that it's using a vulnerable SSL implementation? Sniff traffic, or actually get execution?
* - Krieg - Aug 22, 2013
(Aug 22, 2013 10:30 PM)ExaNet Wrote: Well, it's a bitcoin exchange site. So I'm trying to get bitcoins somehow. I don't know what this is capable of. So I don't know what to do.
Well really all you can do with SSL2 is sniff traffic...
* - Ergo - Aug 23, 2013
(Aug 22, 2013 05:19 PM)Dr41DeY Wrote: Hello, ExaNet! :D
If you're not familiar with those things.
You can learn SQL Injection: SQL Injection Attacks
Hope, you enjoy! ;)
all h4x r sqli.
This is why the human race will never progress.