[Alienguy]

Here you are :)

Code

This sitE/search.php?q=abc%3Cscript%3Ealert%28%2Fhello+world%2F%29%3B%3C%2Fscript%3E&search_list=5&Submit=Go

// maybe change topic name to "Intra help" so we all will can help :D

Code

abc<script>alert(/hello world/);</script>

Can you please explain why you used "/" and "abc" ?
I mean it even works without "abc" at the beginning.
Also when I change "/hello world/" to "/lol/" it doesn't works , why ?

[dumar]

Hey there.

After you scan a site for open ports and vulnerabilities you van search for the exploit but how can u do the exploit? Sometimes it is a large text in md5 where to put it in? Mabey you know a good treath about this?

Cheers!

It depends on exploit, most are written in perl/python/C/php

Example on perl for windows:
1.download active perl
2.paste exploit to txt file
3.change extension to .pl
4.run: cmd-> cd directory where is scipt -> perl scriptname.pl paramets

If the script is local, you have to run it from server, so you have to have access (shell/back connect script )

---

Code

abc<script>alert(/hello world/);</script>

Can you please explain why you used "/" and "abc" ?
I mean it even works without "abc" at the beginning.
Also when I change "/hello world/" to "/lol/" it doesn't works , why ?

there has to be smth what will be found on site
for exaple
<script>alert(/hello chip/);</script> also works
/ / are to prevent filter
You dont have to use abc, i just used it to put some normall text in search bar firstly

[Alienguy]

It depend on exploit, most are written in perl/python/C/php

Example on perl:
1.download active perl
2.paste exploit to txt file
3.change extension to .pl
4.To run: cmd-> cd directory where is scipt -> perl scriptname.pl paramets

---

It has to be smth what will be found on site (im not sure, but thats how i see it)
for exaple
<script>alert(/hello chip/);</script> also works
/ / are to prevent filter
You dont have to use abc, i just used it to put some normall text in search bar firstly

But when I change "/hello world/" to "/lol/" it doesn't works , why ?

[dumar]

But when I change "/hello world/" to "/lol/" it doesn't works , why ?

Lets put <script>alert(/lol computer/);</script> then it works :)
There has to be word that is able to be found by search scipt
There is no "lol" on the site, check it by typing only "lol" in search bar, but there is "computer", so results are shown, with you query.
Its because query is shown, only if results were found

[Alienguy]

Lets put <script>alert(/lol computer/);</script> then it works :)
There has to be word that is able to be found by search scipt
There is no "lol" on the site, check it by typing only lol in search bar, but there is computer, so it works.
Its because you query is shown, only if results were found

OK , thank you for taking your time to help me 🙂

[No‌‌‌‌‌‌]

Ok guys, I have updated the thread. All Intra members, feel free to answer. :)

---

What is appache tomcat 5.2.25 vulnerablity how can i exploit it potentially mind explaining me ?

It depends on the vulnerability, try reading how the vulnerability works.

---

Sorry , I just need an info and I don't have the vulnerable link.
How can we prevent our website from SQLi attackers ? Is there a method to block SQL queries.. Web Application Firewall gets tricked if we use words like this /*!uNiOn*/ so what is the exact way ? Please and thank you!

Blacklist those characters in your WAF rules or get a better WAF because that one sounds outdated.

---

Hello master,

I wonder have you experience in Metasploit etc? Please pm if you have.

Thanks in advantage

Cheers.!

I have a fair bit of experience, what is your problem?

---

Thanks for opening this thread zelos
my question is why is it that when i get the admin details of a website i sqlied and find the admin panel then try logging in with the admin id and password doesnt work
instead it says username or passwd wrong
but im sure its correct because i injected it myself
a site like
http://c2-europe.eu

the admin panel is
http://c2-europe.eu:2082

for this reason i have not been able to deface because i cant log into any website whch i sqli
the only one i got recently that logged in is in chinese
which i dont understand
thanks zelos
thats my major problem
i have up to four sites like this
thanks once more.

They don't work because you have found the login credentials for their websites admin panel, :2082 is used for the cPanel. The cPanel password is NEVER stored in the sites database.

---

Hey there.

After you scan a site for open ports and vulnerabilities you van search for the exploit but how can u do the exploit? Sometimes it is a large text in md5 where to put it in? Mabey you know a good treath about this?

Cheers!

I'm not entirely sure what you're referring to here. What did you use to scan the website?

---

How can I symlink if the server Perl was inactive?

Not sure what your question is exactly, Perl is not required to create a symbolic link.

[DARK CP4N3L]

Thanks a lot zelos am grateful and happy ,
i have learnt something new i love learning
now i understand the admin panel is different from the cpanel okay,thanks
so please what is the admin panel
i tried searching but i got only
the cpanel.

[Ashkwil]

Hi I have made a sepertate thread regarding my problem! I know many people are asking for help hacking but im asking for help from recovering from a hack!

I found a team poison shell had been uploaded on the site (however i dont think it was actually team poison) and it was a WP site so I've updated the WP version and all plugins, is there anything I can do to see if the vulnerability is still there?

Thanks a lot I appreciate it

[No‌‌‌‌‌‌]

Hi I have made a sepertate thread regarding my problem! I know many people are asking for help hacking but im asking for help from recovering from a hack!

I found a team poison shell had been uploaded on the site (however i dont think it was actually team poison) and it was a WP site so I've updated the WP version and all plugins, is there anything I can do to see if the vulnerability is still there?

Thanks a lot I appreciate it

You can look through the HTTP Access Logs and find out how they got in.

[Ashkwil]

You can look through the HTTP Access Logs and find out how they got in.

Hi thanks for that but how do i go about doing this?

The access logs folder in my hosting file manager is empty

Thanks again really appreciate it

[Mx.]

Hi I have made a sepertate thread regarding my problem! I know many people are asking for help hacking but im asking for help from recovering from a hack!

I found a team poison shell had been uploaded on the site (however i dont think it was actually team poison) and it was a WP site so I've updated the WP version and all plugins, is there anything I can do to see if the vulnerability is still there?

Thanks a lot I appreciate it

Should put a link up here from your website, see if anyone can find where the got in ;-).

[Ashkwil]

Should put a link up here from your website, see if anyone can find where the got in ;-).

Haha yeah and let someone do it again! :P

[zer0pwn]

Enormous vouch for ๖ۣۜZєlσs™, he knows his stuff :)

[Teenage Anarchist]

Hi
I need to know: If you can't see table admin it doesn exist or is it just hidden?
Can every hash be cracked?

[HaxOr❤]

Hi
I need to know: If you can't see table admin it doesn exist or is it just hidden?
Can every hash be cracked?

1) I think it's hidden...Some sites don't have admin panel...
2) If password is like admin123456789 then it's crackable if it's aAdDmmInNn123456789 then it's harder and maybe it wont be decrypted.
So it depends how strong is password.