+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: IPB Forums - Hacking IPB Forums For You! Any Version! (/showthread.php?tid=4529955)
IPB Forums - Hacking IPB Forums For You! Any Version! - outlaw - Nov 9, 2014
That's right. I'm going to try and hack any IPB site possible that you guys post here. Any version doesn't matter just post the URL!
Saves me Google dorking for noobie websites, when you guys can provide them for me. Win win! :3
If you'd prefer to, PM me the website so the owners know that it has nothing to do with you.
GOGOGO!
Spoiler (Click to View)
* - Tony S - Nov 9, 2014
Guessing you're going to try and use http://seclists.org/fulldisclosure/2014/Nov/20 against it?
* - outlaw - Nov 9, 2014
(Nov 9, 2014 04:31 PM)Tony Spilotro Wrote: Guessing you're going to try and use http://seclists.org/fulldisclosure/2014/Nov/20 against it?
You mean that script that works in like 1/100 times? Haha.
* - Ðepression - Nov 9, 2014
PM me your method? SQLi works way more than 1% though ....
* - outlaw - Nov 9, 2014
(Nov 9, 2014 05:59 PM)ѴأƦʊᎦ Wrote: PM me your method? SQLi works way more than 1% though ....
Erm, no. Lol. [img]http://x.hackforums.net/images/smilies/blink.gif[/img]
* - Tony S - Nov 10, 2014
(Nov 9, 2014 05:39 PM)Blue Cheese Wrote: You mean that script that works in like 1/100 times? Haha.
At the time of its disclosure (aka yesterday), the exploit was considered a 0-day. The exploit script itself is pretty terrible and might fail because of various reasons, however way more than "1/100" sites (nice misuse of statistics, by the way) were vulnerable.
* - coffee cup - Nov 10, 2014
(Nov 10, 2014 08:31 AM)Tony Spilotro Wrote: At the time of its disclosure (aka yesterday), the exploit was considered a 0-day. The exploit script itself is pretty terrible and might fail because of various reasons, however way more than "1/100" sites (nice misuse of statistics, by the way) were vulnerable.
he says script works 1/100 not the vuln