[elmnas]

Hello master,

I wonder have you experience in Metasploit etc? Please pm if you have.

Thanks in advantage

Cheers.!

[DARK CP4N3L]

Thanks for opening this thread zelos
my question is why is it that when i get the admin details of a website i sqlied and find the admin panel then try logging in with the admin id and password doesnt work
instead it says username or passwd wrong
but im sure its correct because i injected it myself
a site like
http://c2-europe.eu

the admin panel is
http://c2-europe.eu:2082

for this reason i have not been able to deface because i cant log into any website whch i sqli
the only one i got recently that logged in is in chinese
which i dont understand
thanks zelos
thats my major problem
i have up to four sites like this
thanks once more.

[Dirty Ghetto Kid]

Hey there.

After you scan a site for open ports and vulnerabilities you van search for the exploit but how can u do the exploit? Sometimes it is a large text in md5 where to put it in? Mabey you know a good treath about this?

Cheers!

[noober1001]

Thanks for opening this thread zelos
my question is why is it that when i get the admin details of a website i sqlied and find the admin panel then try logging in with the admin id and password doesnt work
instead it says username or passwd wrong
but im sure its correct because i injected it myself
a site like
http://c2-europe.eu

the admin panel is
http://c2-europe.eu:2082

for this reason i have not been able to deface because i cant log into any website whch i sqli
the only one i got recently that logged in is in chinese
which i dont understand
thanks zelos
thats my major problem
i have up to four sites like this
thanks once more.

Bro, the admin panel, you have found is not the admin panel in reality.. it is control panel. Username and password of control panel are different mostly from the admin panel's username and password.
Just try to find the admin panel of that site, not control panel.

[Alienguy]

Vulnerable Link: chip.in ( search box is vulnerable )
Question/Problem: When I type <h1> i love hf and search it it shows "i love hf " in big letters. But i can't find a way to open alert-box using xss there .

[Alienguy]

Here you are :)

Code

http://THIS SITE/search.php?q=abc%3Cscript%3Ealert%28%2Fhello+world%2F%29%3B%3C%2Fscript%3E&search_list=5&Submit=Go

// maybe change topic name to "Intra help" so we all will can help :D

You are the most awesome hacker I've ever seen , Thanks a million !

[Alienguy]

Here you are :)

Code

This sitE/search.php?q=abc%3Cscript%3Ealert%28%2Fhello+world%2F%29%3B%3C%2Fscript%3E&search_list=5&Submit=Go

// maybe change topic name to "Intra help" so we all will can help :D

Code

abc<script>alert(/hello world/);</script>

Can you please explain why you used "/" and "abc" ?
I mean it even works without "abc" at the beginning.
Also when I change "/hello world/" to "/lol/" it doesn't works , why ?

[Alienguy]

It depend on exploit, most are written in perl/python/C/php

Example on perl:
1.download active perl
2.paste exploit to txt file
3.change extension to .pl
4.To run: cmd-> cd directory where is scipt -> perl scriptname.pl paramets

---

It has to be smth what will be found on site (im not sure, but thats how i see it)
for exaple
<script>alert(/hello chip/);</script> also works
/ / are to prevent filter
You dont have to use abc, i just used it to put some normall text in search bar firstly

But when I change "/hello world/" to "/lol/" it doesn't works , why ?

[Alienguy]

Lets put <script>alert(/lol computer/);</script> then it works :)
There has to be word that is able to be found by search scipt
There is no "lol" on the site, check it by typing only lol in search bar, but there is computer, so it works.
Its because you query is shown, only if results were found

OK , thank you for taking your time to help me 🙂

[DARK CP4N3L]

Thanks a lot zelos am grateful and happy ,
i have learnt something new i love learning
now i understand the admin panel is different from the cpanel okay,thanks
so please what is the admin panel
i tried searching but i got only
the cpanel.

[Ashkwil]

Hi I have made a sepertate thread regarding my problem! I know many people are asking for help hacking but im asking for help from recovering from a hack!

I found a team poison shell had been uploaded on the site (however i dont think it was actually team poison) and it was a WP site so I've updated the WP version and all plugins, is there anything I can do to see if the vulnerability is still there?

Thanks a lot I appreciate it

[Ashkwil]

You can look through the HTTP Access Logs and find out how they got in.

Hi thanks for that but how do i go about doing this?

The access logs folder in my hosting file manager is empty

Thanks again really appreciate it

[Ashkwil]

Should put a link up here from your website, see if anyone can find where the got in ;-).

Haha yeah and let someone do it again! :P

[Teenage Anarchist]

Hi
I need to know: If you can't see table admin it doesn exist or is it just hidden?
Can every hash be cracked?

[Hannibal Lecter]

Vouch for team intra, legit sellers!