🌐 This is an automatic translation of a topic from Underc0de, the largest Spanish-speaking hacking and IT community. Read the original (Spanish) and reply →
[T]Killer ·
Hellooo!<br /><br />Well, first of all, I've read quite a bit, but I don't know where to start, so what better than to discuss it, I love it. Second, I don't know or at least didn't know anything about this, until I read a little, but it's still not enough.<br /><br />The thing is I know a forum that's created in myBB that has lots of open ports and several vulnerabilities. I found out about the ports using nmap and this is the result:<br /><br />2222/tcp open ssh OpenSSH 5.3 (protocol 2.0)<br />3306/tcp open mysql MySQL 5.5.23-55<br />995/tcp open ssl/pop3 Dovecot pop3d<br />993/tcp open ssl/imap Dovecot imapd<br />587/tcp open smtp Exim smtpd 4.77<br />465/tcp open ssl/smtp Exim smtpd 4.77<br />443/tcp open http Apache httpd<br />143/tcp open imap Dovecot imapd<br />110/tcp open pop3 Dovecot pop3d<br />80/tcp open http Apache httpd<br />53/tcp open domain<br />26/tcp open smtp Exim smtpd 4.77<br />21/tcp open ftp Pure-FTPd<br />25/tcp open smtp Exim smtpd 4.77<br /><br />It also gives me these but no idea:<br /><br />Código: text
<br /><br />The vulnerabilities are:<br /><br />Código: text
DNS Server Cache Snooping Remote Information Disclosure<br />SMTP Server Non-Standart Port Detection<br />DNS Server Spoofed Request Amplification DDoS
<br /><br />The thing is.. I'm not posting the website because someone might come and use it to exploit it or whatever, and I'm putting effort into finding things, I wouldn't find it funny..<br /><br />So, is there anything to do once you know these open ports and these 3 vulnerabilities? I found the vulns with Nessus. I've been looking for info and such but I don't see what to do, in fact I also have metasploit installed, you know?<br /><br />But of course, all that with the white hat as they say, you know :P leaving a notice about the hole and so on, understand?<br /><br />Let's see if you can help me, thanks!!<br />
k0ws ·
Search in some exploit-database, there are a ton on google ;)<br /><br />-Regards-
[C]orrupted[B]yte ·
Código: text
-So, is there anything to do once you know these open ports and these 3 vulnerabilities?
<br /><br /><br /><br />What else is there to do once you find a vulnerability? obviously exploit them, although they're not very useful.<br /><br /><br /><br /><br />Also you only ran nessus on it, what exactly do you want to do? there you have 2 things to play with, the server and the application, on the server side analyze the services running on the ports, you might be able to exploit them, and on the application side look for the version of the forum it has, search for vulns (not just with nessus), also it must have plugins installed or some other application and not just the forum.
oh, Look, right now I feel like defacing :/ but I can't find anything that inspires me, maybe your lack of knowledge but too much interest is the trigger, look, let's do something if you want, send me a private message with an irc server, and channel and I'll instruct you a bit.<br /><br />Is it a VPS?<br /><br /><br />If it's not a VPS I'll give you a hand. I don't want to do such a direct attack, rather a reverse ip and try to upload a webshell to the server, then symlinks or root it depending :/.<br /><br />Although I see you've only run scanners on it to find vulnerabilities, haven't you checked if the version or some version of MyBB is vulnerable to any attack?<br /><br /><br /><br />Regards.
[T]Killer ·
No idea ketzal, honestly I'm very very newbie at this, I'm just learning that's why I'm trying it by putting into practice the little I know, but there's no way.. and believe me I'm making an effort, it's 1 in the morning here in Spain and I should be sleeping because I'm getting up early tomorrow hahaha, but no, here I am hitting this hard :P<br /><br />Mmmm, I have no idea about IRC servers, plus I quit Windows recently, since there you can't do much compared to Linux and I'm on Ubuntu which I haven't used in a long time so even less.. I'm complicating everything a lot right? hahah sorry TT <br />
