For free time that I don’t have

Hi , the tutorial clip around cracking the passwords of cPanel has recently been published , the method is mainly focused on trying different passwords within a user name ( brute force ) . you might ask me about the protection installed in cPanels that commonly controls authentication against brute force attacks Read more…

Bypassing, Hacking, PHP Bypass PHP 5.2.9 safe mode, cPanel brute forcer, cPanel password cracker, open basedir Bypass PHP 5.2.9, php cPanel brute forcer, php cpanel password cracker, safe mode Bypass PHP 5.2.9

Today my words are linked to my previous publications around MySQL injection attack , I examine the structure of URL used to attack .  as known each database has exclusive language ( query ) and the developing coding language handling dynamic queries makes no difference … Read more…

Bypassing, Mysql injection, PHP, Security bypass magic_quote, bypass mysql_real_escape_string, escaping by mysql_real_escape_string(), information schema, information schema mysql, local database, magic_quote, Mysql injection, order by, TABLE_SCHEMA, union select, union select table_name, unsafe dynamic mysql query

In the previous publication I had pointed to the passwd file , a few days ago , I saw a person discussing about secluding the users from the binary file indicated . you might know the structure of passwd file :

AAAAAA:x:1156:1156::/home/AAAA:/usr/local/cpanel/bin/noshell
BBBBBB:x:1157:1157::/home/BBBB:/usr/local/cpanel/bin/noshell
CCCCCC:x:1158:1158::/home/CCCC:/usr/local/cpanel/bin/noshell

Read more…

PHP explode(), list(), passwd, split()