[outlaw]

That's right. I'm going to try and hack any IPB site possible that you guys post here. Any version doesn't matter just post the URL!

Saves me Google dorking for noobie websites, when you guys can provide them for me. Win win! :3

If you'd prefer to, PM me the website so the owners know that it has nothing to do with you.

GOGOGO!

Spoiler (Click to View)
Baring in mind, this highly depends on the enabled security features on the website (and htaccess). Not every website is vulnerable.

[Tony S]

Guessing you're going to try and use http://seclists.org/fulldisclosure/2014/Nov/20 against it?

[outlaw]

Guessing you're going to try and use http://seclists.org/fulldisclosure/2014/Nov/20 against it?

You mean that script that works in like 1/100 times? Haha.

[Ðepression]

PM me your method? SQLi works way more than 1% though ....

[outlaw]

PM me your method? SQLi works way more than 1% though ....

Erm, no. Lol. [img]http://x.hackforums.net/images/smilies/blink.gif[/img]

[Tony S]

You mean that script that works in like 1/100 times? Haha.

At the time of its disclosure (aka yesterday), the exploit was considered a 0-day. The exploit script itself is pretty terrible and might fail because of various reasons, however way more than "1/100" sites (nice misuse of statistics, by the way) were vulnerable.

[coffee cup]

At the time of its disclosure (aka yesterday), the exploit was considered a 0-day. The exploit script itself is pretty terrible and might fail because of various reasons, however way more than "1/100" sites (nice misuse of statistics, by the way) were vulnerable.

he says script works 1/100 not the vuln