Gegbull: coalburner+SNOCAblog

[Hillel Hartmann]

i want to kms

 

[Apeson]

Glowy glow.

i will try to look more into this shit site tomorrow.
I was trying to sql inject myself into an admin account but nowadays even the shittiest sites are protected against that. The few times they aren't doe it's fucking glorious, in any case this one seems to be protected.

 

[Hillel Hartmann]

Glowy glow.
View attachment 105863
i will try to look more into this shit site tomorrow.
I was trying to sql inject myself into an admin account but nowadays even the shittiest sites are protected against that. The few times they aren't doe it's fucking glorious, in any case this one seems to be.

just ask him for an admin bruh it's easier that way

 

[grimmki]

since noobland isnt hostile i will officially move to noobland all of my posts will be on noobland

 

[Apeson]

since noobland isnt hostile i will officially move to noobland all of my posts will be on noobland

see you

 

[Apeson]

@Hillel
guess what page i am in right now. It's not a regular login in case you were wondering.

 

[[ಒಂಬತ್ತು]]

@Hillel
guess the page i am in right now
View attachment 105866

are you gonna guess the admin password

 

[Apeson]

are you gonna guess the admin password

not really, but the fact that i can access the site's admin panel from any ip without it trying to stop me is hillarious. Literally one step from being able to fuck with the site up to the software.

 

[[ಒಂಬತ್ತು]]

not really, but the fact that i can access the site's admin panel from any ip without it trying to stop me is hillarious.

try brute forcing it

 

[blackops2]

not really, but the fact that i can access the site's admin panel from any ip without it trying to stop me is hillarious. Literally one step from being able to fuck with the site up to the software.

https://soyjak.forum/admin.php

 

[Apeson]

try brute forcing it

I'm pretty much guessing. You can give it a try if you want.

To view the content, you need to Sign In or Register.

 

[[ಒಂಬತ್ತು]]

not really, but the fact that i can access the site's admin panel from any ip without it trying to stop me is hillarious. Literally one step from being able to fuck with the site up to the software.

not really lol I (and anyone else) could also access the schlog admin login page just like the post above me

 

[Apeson]

https://soyjak.forum/admin.php

brootal, they taught me to have a whitelist for shit like this.

 

[blackops2]

brootal, they taught me to have a whitelist for shit like this.

most ips are dynamic anyway

 

[Apeson]

most ips are dynamic anyway

That's why you whitelist a range. So that some random guy can't break into your website's admin panel all the way from lesotho. It's an extra layer of security used in serious businesses where shit like this will be made accessible only if you're connected to the place's internet or around it's general area.

 

[[ಒಂಬತ್ತು]]

it would be easier to go undercover and just become an admin and brick the site from inside

 

[Apeson]

it would be easier to go undercover and just become an admin and brick the site from inside

It would be hilarious to break into the admin panel doe. Look at all this shit.
https://help.forumotion.com/t35185-run-through-of-the-admin-panelIt even has a nuke everything button

 

[[ಒಂಬತ್ತು]]

It would be hilarious to break into the admin panel doe. Look at all this shit.
https://help.forumotion.com/t35185-run-through-of-the-admin-panelIt even has a nuke everything button
View attachment 105868

if you do this SET THE ADMIN ACCOUNT'S EMAIL TO A TEMPMAIL YOU'RE ABLE TO ACCESS

 

[Apeson]

if you do this SET THE ADMIN ACCOUNT'S EMAIL TO A TEMPMAIL YOU'RE ABLE TO ACCESS

I'm just setting it to [email protected]

 

[[ಒಂಬತ್ತು]]

I'm just setting it to [email protected]

no you need to use the email link to confirm the delete