Skip to main content

hacksannio.it (... other websites) | path disclosure, system compromise




by simply using the theme url
http://www.hacksannio.it/wp-content/themes/betheme/

we can raise an error

Fatal error: Uncaught Error: Call to undefined function get_header() in /web/htdocs/www.hacksannio.it/home/wp-content/themes/betheme/index.php:10 Stack trace: #0 {main} thrown in /web/htdocs/www.hacksannio.it/home/wp-content/themes/betheme/index.php on line 10




_______________
Update:
after getting the possibility to execute code it's possible to locally escalate root privileges (expl. openrestinpeace) and local DoS.

There are several other websites on the server:


9plus.it
abgdhs.com
academyhoreca.it
acquagia.com
agropolibooking.it
albertogalantini.com
alcacomunicazione.it
alexandramatveeva.com
alkemicaproject.it
allianceagainstcancer.org
anelli.info
angolodeidesideri.it
antonelladambrosio.com
apicolturavallicupe.com
appcreative.it
arredostil.it
aspveneto.org
avvocatovitali.com
bbqcombi.com
belsiana7central.com
beneventocalcio.it
bestravelsintheworld.com
bevolution-torino.com
bng-69.com
brunellivini.com
buonanotteitalia.it
caffeedintornimanfredonia.it
caffetteriadonnafugata.com
campaniabynight.it
casadinosaurobaratti.com
cbdoilitalia.com
cbdoilitalia.it
centro-assistenza-riscaldamento-caldaia.it
centroippicolacastellana.com
cercarime.it
cerimoniacivile.it
championspost.com
cogg.it
colorificiobergamogmr.com
colosseoguesthouse.com
comitesecuador.com
consiliumhaus.com
consorzionauticoeurope.eu
cremonesigsc.it
crispi10.com
cruise-ship-padding-protections.com
dabetlemmeagerusalemme.it
damaadv.it
damascenafilm.com
dapperholdings.net
diegoromano.com
doodleit.info
ducciobarbieri.it
ecotecnoitalia.com
elabora.com
elisagiordano.it
esabase.it
escursioniambientali.it
ethicintent.com
farmastorecelano.com
fasac.net
fatticonilcuore.it
feelsassello.it
fieraesteticabfs.com
fikatelo.com
firebarcable.it
fitbyalena.com
formazioneinviaggio.com
fundaciontopuc.com
gabrieleciolino.com
galileisrl.it
gamper.info
gbracademy.it
glassjourney.eu
good-byte.it
gretatulipani.com
growupgroup.com
gruppocinquesrl.com
happyvegan.it
idraulico-dettofatto.com
ilcicloturista.com
ilgrifo.org
ilmionutrizionista.eu
immobilmedia.com
impresalcentro.it
incofar-sanitario.it
infissitech.it
infive2001.com
infovax.it
inmyfantasiart.com
irillipostermurali.com
italiadidattica.it
ixchel.it
just-fab.org
keybeach.it
kingliontoursandsafaris.com
laboutiquedelcaffe.eu
lacasadelcellulare.it
lasergild.org
laterrazzapalace.com
latteriapievevergonte.it
lazzerinispa.com
lignohouse.com
logiform.org
lorenzoceci.com
luggagestorageflorence.com
luisrecensione.com
luomoedizioni.com
luxuryrelaisgroup.com
mabelleroma.it
maffiolettiserramenti.com
maglificiocanto.it
marisacalisti.it
minoxdyeing.it
mit-industries.biz
mommorecords.com
mondello.it
mostrobirraio.it
mst-tutorial.it
museostoricopompieri.it
mutapietra.it
newparagraphsrl.it
nonprofitcoaching.it
nordictrailitalia.it
npsolution.eu
npsolution.it
nutrirsi.eu
officineferretti.it
officinezuccherine.it
osinformatica.it
ottoselezioni.com
owhub.com
p2psrl.com
paisart.com
palazzonaclerio.com
palermoairportbus.com
palermoculture.net
palermotrapaniairportbus.com
panciadartista.com
papeleriasierranorte.com
parchipertutti.com
pastaedolci.com
personalityontwitter.com
personalityontwitter.it
pierogalloproject.com
pjpen.it
podavinicarni.com
poggioallefonti.com
pontevetero.com
ppmitaly.com
priscagoldoni.com
radio105stereo.it
radthedealer.com
rcimpiantinstallazionievendite.com
reaelettrica.com
realfoodbuyers.com
recuperolegale.it
reflexonekft.com
relaispiazzavittoria.com
rialzatimolise.com
riccardopirani.com
rich24.it
riparticonnoi.it
romashop24.it
romasportexperience.com
romecabtransfer.com
runzonesport.com
safety-padding-protections.com
sanluvicorporation.com
sardegnarobotica.eu
scuolaarcobalenofaenza.com
seabrothers.eu
sereninvest.com
serietvmagazine.it
sfrishy.com
sitoprova.info
sl-engineering.net
smed3.com
sofistikada.com
sosrazzismo.com
sovieroenergia.com
stefanogiommini.com
storieincorso.com
studiodentisticotrebbi.it
studioderoia.com
studiofenicchiaodontoiatria.it
studiolegalecartelli.com
studiostanza.it
supersneakershop.com
teambuilding-evolution.it
teambuildingevolution.it
tecnologienews.com
tizianoguerra.com
tonydee.it
tradinglabcapital.com
tuckershoes.com
tueiltuopatrimonio.it
unamammaperguida.com
ungran-casino.it
vandog.it
vast-east.com
venetacucinepalermo.it
veneto-piu.com
visalusitaly.com
visalusitaly.it
volucello.it
webdesignervarese.it
weddingintuscany.net
zegalianews.it
zerogravityferrara.it

Comments

Popular posts from this blog

iPod Shuffle reset Utility for 64bit windows 10 (xp and above)

iPod Shuffle reset Utility (if iTunes fails)

Download the uncompressed "iPodResetUtilitySetup.exe" from one of the following links (mirrors):

Download from Onedrive
Mirror -  Tinyupload
Mirror -  Filesharing1
Mirror -  Exoshare
Mirror - EmbedUpload
Mirror - Multiup
Install iTunes for drivers etc (needed on Windows 64bit)Make sure that iTunes is fully installed (the services are running).Check if the iPod can be detected and sync by iTunes.Close iTunes.Run "iPodResetUtility.exe" with Windows XP compatibility mode and "Run as Administrator".If the reset fails try to run  with Windows XP SP2 compatibility mode and "Run as Administrator".

Should work to:
reset iPod Shuffle on Windows XP 32 bit
reset iPod Shuffle on Windows Vista 32 bit
reset iPod Shuffle on Windows 7 32 bit
reset iPod Shuffle on Windows 8 32 bit
reset iPod Shuffle on Windows 8.1 32 bit
reset iPod Shuffle on Windows 10 32 bit

reset iPod Shuffle on Windows XP 64 bit
reset iPod Shuffle on Win…

Force Unmount and Clean up of a Wim Image using DISM

Force Unmount and Clean up of a Wim Image using DISM


When you use RT7 (+ AIK) sometimes an error occurs stating that there's a mounted wim (ex.  boot.wim).
To solve the problem you should run, as administrator, the command:

dism /cleanup-wim
If it doesn't work I've found another solution by editing the registry and deleting all the (necessary) entries within:

"HKLM\SOFTWARE\Microsoft\WIMMount\mounted images\"

It should work as long as you are an administrator.


Hashes Algorithms used in different web applications

Hashes Algorithms used in different web applications.
I've done this list by hand. Not all the hashes algos are correct (I've generically added md5 or ??? where is unkwnown).
If you are interested send corrections and I will update it.
I will publish also a better version with tabs.
You can reproduce it without problems. It's part of the project mdcrack gui on sourceforge.
Use the | as data separator.

-----------------------------------------------------------------------------------------------------------------------------------------------------
| Title | Hash Algorithm | TablePrefix | Table Name | Website |
-----------------------------------------------------------------------------------------------------------------------------------------------------
| 1C Битрикс | md5($pass) | | |http://www.1c-bitrix.ru/
| 1024cms | md5($pass) | | |http://www.1024cms.org/
| 4images | md5($pass) | | |http://www.4homepage…