ROWAREZ
rowarez hacking forum
|
Nu sunteti logat.
Lista Forumurilor Pe Tematici
|
Nou pe simpatie:
Alexandra21 pe Simpatie.ro
 | Femeie
24 ani
Calarasi
cauta Barbat
24 - 53 ani |
|
|
ROWAREZReguliInregistrareLoginPoze
|
| #1 |
hfhunJunior Member
Postari: 79
|
|
cum se uploadeaza un shell prin avatar? stiu ca era un exploit. 
_______________________________________
"Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for." - The Mentor - The hacker's manifesto
|
|
| |
|
| #2 |
 GamerAdministratorDin: Transilvania
Postari: 202
|
|
Pai poti cu null byte.
Dai sa uploadezi la avatar un fisier .php [sau cum e shellu] si mai adaugi acolo %00.jpg
El cand analizeaza sa vada daca e sau nu .jpg, vede ca se termina in .jpg pathul catre imagine si crede ca totul e OK. Dar functia care uploadeaza fisierul, citeste doar pana la %00 [caracterul 0 care semnifica sfarsit de string], deci uploadeaza c:blablablabla.php [tu ai scris c:blablablabla.php%00.jpg]
_______________________________________
Citeşte regulamentul forumului aici.
|
|
| |
|
| #3 |
hfhunJunior Member
Postari: 79
|
|
ms mult set. si merge pe orice versiune de phpBB care nu este securizata? pe phpBB 3.10.21 sau care e ultimul, mai merge?
_______________________________________
"Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for." - The Mentor - The hacker's manifesto
|
|
| |
|
| #4 |
GamerAdministratorDin: Transilvania
Postari: 202
|
|
Asta nu stiu, deoarece nu am incercat niciodata... stiu doar teoria [atat ma intereseaza ]
Anyway... pe noul forum care e 2.0.21 nu merge [am mai facut si eu mici modificari pe la securitate] 
_______________________________________
Citeşte regulamentul forumului aici.
|
|
| |
|