[No‌‌‌‌‌‌]

[img]http://i1178.photobucket.com/albums/x362/JupiiterDesigns/try2-1.png[/img]

Team Intra - Official WebApp Security Help Thread

Welcome to our official help thread, if you have a problem or question regarding Web Application security, just post below in the following format and one of our members will help you out.

Rules: Strictly no full blackhat stuff or specific website hack requests. Also, no DDoS questions, I don't consider it hacking. Also, DO NOT PM ME.

Post Template:

Code

[b][color=#32CD32]Vulnerable Link:[/color][/b]
[b][color=#32CD32]Question/Problem:[/color][/b]

[HaxOr❤]

Vouch for this guy...He will help you alot!

[No‌‌‌‌‌‌]

Vouch for thiS guy...He will help you alot!

Thanks for the vouch mate, thread disappeared. :P

[The Ion]

What is appache tomcat 5.2.25 vulnerablity how can i exploit it potentially mind explaining me ?

[Pirate]

Sorry , I just need an info and I don't have the vulnerable link.
How can we prevent our website from SQLi attackers ? Is there a method to block SQL queries.. Web Application Firewall gets tricked if we use words like this /*!uNiOn*/ so what is the exact way ? Please and thank you!

[Killuminatii]

Sorry , I just need an info and I don't have the vulnerable link.
How can we prevent our website from SQLi attackers ? Is there a method to block SQL queries.. Web Application Firewall gets tricked if we use words like this /*!uNiOn*/ so what is the exact way ? Please and thank you!

Thats also what I need to know, but I dont have a vulnerable link either, but hope you can answer my question.

[elmnas]

Hello master,

I wonder have you experience in Metasploit etc? Please pm if you have.

Thanks in advantage

Cheers.!

[DARK CP4N3L]

Thanks for opening this thread zelos
my question is why is it that when i get the admin details of a website i sqlied and find the admin panel then try logging in with the admin id and password doesnt work
instead it says username or passwd wrong
but im sure its correct because i injected it myself
a site like
http://c2-europe.eu

the admin panel is
http://c2-europe.eu:2082

for this reason i have not been able to deface because i cant log into any website whch i sqli
the only one i got recently that logged in is in chinese
which i dont understand
thanks zelos
thats my major problem
i have up to four sites like this
thanks once more.

[Dirty Ghetto Kid]

Hey there.

After you scan a site for open ports and vulnerabilities you van search for the exploit but how can u do the exploit? Sometimes it is a large text in md5 where to put it in? Mabey you know a good treath about this?

Cheers!

[AnGrY Bo]

How can I symlink if the server Perl was inactive?

[noober1001]

Thanks for opening this thread zelos
my question is why is it that when i get the admin details of a website i sqlied and find the admin panel then try logging in with the admin id and password doesnt work
instead it says username or passwd wrong
but im sure its correct because i injected it myself
a site like
http://c2-europe.eu

the admin panel is
http://c2-europe.eu:2082

for this reason i have not been able to deface because i cant log into any website whch i sqli
the only one i got recently that logged in is in chinese
which i dont understand
thanks zelos
thats my major problem
i have up to four sites like this
thanks once more.

Bro, the admin panel, you have found is not the admin panel in reality.. it is control panel. Username and password of control panel are different mostly from the admin panel's username and password.
Just try to find the admin panel of that site, not control panel.

[Alienguy]

Vulnerable Link: chip.in ( search box is vulnerable )
Question/Problem: When I type <h1> i love hf and search it it shows "i love hf " in big letters. But i can't find a way to open alert-box using xss there .

[dumar]

Vulnerable Link: chip.in ( search box is vulnerable )
Question/Problem: When I type <h1> i love hf and search it it shows "i love hf " in big letters. But i can't find a way to open alert-box using xss there .

Here you are :)

Code

This sitE/search.php?q=abc%3Cscript%3Ealert%28%2Fhello+world%2F%29%3B%3C%2Fscript%3E&search_list=5&Submit=Go

// maybe change topic name to "Intra help" so we all will can help :D

[Alienguy]

Here you are :)

Code

http://THIS SITE/search.php?q=abc%3Cscript%3Ealert%28%2Fhello+world%2F%29%3B%3C%2Fscript%3E&search_list=5&Submit=Go

// maybe change topic name to "Intra help" so we all will can help :D

You are the most awesome hacker I've ever seen , Thanks a million !

[Prominent]

Vouch for my team Intra mate, I'm sure he will help you all.