Jump to content

Punika

Members+
 View Profile  See their activity

  • Posts

    59

  • Joined

  • Last visited

 Content Type 

Posts posted by Punika

    AN ALARM CALL TO THE COMUNITY!

    in XBOX Hacks [/xbox]

    Posted

    it´s up on you :rolleyes:

     

     

    =======================================================================
=================                  
| # Title    : Simple Machines Forum 1.1.11 Mullti Vulnerability   
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.sec-war.com                                                                     
| # Web Site : [url="http://www.simplemachines.org/"]http://www.simplemachines.org/[/url]                                                   
| # Dork     : Powered by SMF 1.1.11 | SMF � 2006-2009, Simple Machines LLC                                                                                                              
| # Tested on: windows SP2 Fran�ais V.(Pnx2 2.0) + Lunix Fran�ais v.(9.4 Ubuntu)       
| # Bug      : Mullti                                                                     
======================      Exploit By indoushka       =================================
# Exploit  :  

1- Mail List information : 

After Register go to : [url="http://127.0.0.1/smf/index.php?action=mlist"]http://127.0.0.1/smf/index.php?action=mlist[/url]

2- PHPSESSID session fixation:
Vulnerability description
This script is vulnerable to PHPSESSID session fixation attacks.

By injecting a custom PHPSESSID is possible to alter the PHP session cookie. Attackers will normally manipulate cookie values to fraudulently authenticate themselves on a web site.
This vulnerability affects /smf. 
The impact of this vulnerability
By exploiting this vulnerability, an attacker may conduct a session fixation attack. In a session fixation attack, the attacker fixes the user's session ID before the user even logs into the target server, thereby eliminating the need to obtain the user's session ID afterwards.

Attack details :

GET /smf/?PHPSESSID=smfssionfixation 

How to fix this vulnerability
Set session.use_only_cookies = 1 from php.ini. This option enables administrators to make their users invulnerable to attacks which involve passing session ids in URLs; defaults to 0.

Web references :

[url="http://www.acros.si/papers/session_fixation.pdf"]http://www.acros.si/papers/session_fixation.pdf[/url]

[url="http://www.php.net/session"]http://www.php.net/session[/url]

[url="http://www.owasp.org/index.php/PHP_Top_5"]http://www.owasp.org/index.php/PHP_Top_5[/url] 


Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * n2n ==========================================
Not : Please I need financial assistance in order I make a tax to the 
state treasury before the ruling, final and unconditional access 
my release by mail and transportation Algerian approximately 500 U.S. dollars
ccp:0013791941 Salah Eddine Nekaa
--------------------------------------------------------------------------------------------------------

    The Ressurection has begun....

    in XBOX Hacks [/xbox]

    Posted

    ..... same here, that genesis torrent ruins my ratio and no chance for seeding. i got current a ratio from 0.5. can u give us some information when are the snes, mastersystem and other files be uploaded and the important thing when are the xport updates will follow?

     

    thx

    The Ressurection has begun....

    in XBOX Hacks [/xbox]

    Posted

    yep, i seed to. the only one i found is the nes that you´ve said. but is it also allowed to share this on other 2 big known private trackers because that other one is located in germany and that´s not realy good. im from there and its realy dangerous for hosting there.

    Xbox to xbox ftp help

    in XBOX Hacks [/xbox]

    Posted

    2late but try this next one, start on both boxes xbmc, setup network correctly on both boxes that match to the other gateway box1/2, connect via crossover cabel and select in setup find other consoles in network. a few seconds later u will get a popup that console xyz (with your selected name in settings) was found and you can copy in the filexplorer whatever u want. it´s important that you plugin the video cable in the second box or she will not boot.

×
×
  • Create New...