hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

n.n.p
EDIT: the title should read Finding the login portal

OK, using the new phpbb 2.0.15 hole (I swore i'd never hack forums again rolleyes.gif ) i've managed to get a database login name and password. Thats cool and all but there is one little thing, the username isnt one of a registered user so im assuming its a unique one purely for use to login to their CMS. My problem now is this, I have no idea how to locate the link to the CMS, i've tried the usual ones such as targetsite.com/cpanel etc but no luck. If anyone else has any suggestions as to how I would go about logging into the database it would be appreciated.

this is the output from the exploit:
CODE

[+] Database Host:  localhost
[+] Database Name:  phpbbforum
[+] Username:       forum
[+] Password:       klnn1524

(mm smells like skiddie wink.gif)


Thanks, nnp
Necrocide
As far as I know phpbb is based on mysql.

So if you want to access mysql database, you might have to search for phpmyadmin or something similair, if they have that installed.

More like hxxp://phpmyadmin.yourwebsite.c0m or hxxp://www.yourwebsite.c0m/phpmyadmin

Other possible is like "myadmin" "mysql"

...its not nesseracy cPanel.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.