SignupHide Sidebar
Username: 
Password: 
Restrict session to IP 
Statistics
44 Sites
197 Challs
9899 Posts
73485 Users
52 Donations
1 Shop
44 Active Sites
World of Wargame
WeChall
TheBlackSheep
Rankk
Electrica
NewbieContest
BrainQuest
Net-Force
HackThisSite
elhacker.net
TryThis0ne
TDHack
+Ma's Reversing
Hacker.org
HackBBS
Root-Me
SPOJ
Revolution Elite
W3Challs
Gekko
Webhacking.kr
Reversing.Kr
SuNiNaTaS
Yoire
Hacking-Challenges
OverTheWire.org
RedTigers Hackit
ae27ff
pwnable.kr
RingZer0 Team Online CTF
pwnable.tw
Hack The Box
try to decrypt
MysteryTwister
Énigmes À Thématiques
247CTF
CryptoHack
PyDéfis
PromptRiddle
pwn.college
HackMyVM
Hack The Web
GemForgeLabs
mrradio.kr
Top 10 Players
rayaseiren
dloser
jusb3
ytbjplh
tehron
Caesum
tenflo
sisyang
Xaav
noother
Last 20 Activities
ms_nobody
DevilDog
j_m
Jinx
mm301
ossa
boiled_pickles
Jinx
mozaa
yehuju
yehuju
raikoug
peterkodo
jexi
yugandhar
raikoug
sambo
xen-ops
Celcious
benito255
Online within 1d
1 Users
andthewinneris
WeChall->WeChall

security hole in the site

CSAW CTFChallenge Idea : Fun Factor?
Global Rank: 566
Totalscore: 46996
Posts: 37
Thanks: 21
UpVotes: 24
Registered: 14y 25d
stormsurfer`s Avatar



Last Seen: 9y 135d
The User is Offline
security hole in the site
Oct 11, 2012 - 20:39:12 (14y 21d) Google/translate2Thank You!2Good Post!0Bad Post! link
I think I found a security hole in the site. Can any admin PM me?
Global Rank: 374
Totalscore: 66437
Posts: 274
Thanks: 258
UpVotes: 278
Registered: 15y 320d
space`s Avatar
The User is Offline
1
RE: security hole in the site
Oct 11, 2012 - 20:39:56 (14y 21d) Google/translate0Thank You!0Good Post!0Bad Post! link
yep, space@wechall.net or PM
Contact only via c3BhY2VAd2VjaGFsbC5uZXQ= or PM...
Windows can be secure... but only if you don't use it Happy
Global Rank: 566
Totalscore: 46996
Posts: 37
Thanks: 21
UpVotes: 24
Registered: 14y 25d
stormsurfer`s Avatar



Last Seen: 9y 135d
The User is Offline
RE: security hole in the site
Oct 11, 2012 - 20:41:51 (14y 21d) Google/translate0Thank You!0Good Post!0Bad Post! link
How can I tell you're an admin? Smile
Global Rank: 374
Totalscore: 66437
Posts: 274
Thanks: 258
UpVotes: 278
Registered: 15y 320d
space`s Avatar
The User is Offline
1
RE: security hole in the site
Oct 11, 2012 - 20:42:40 (14y 21d) Google/translate0Thank You!0Good Post!0Bad Post! link
gizmore will tell you ;)
Contact only via c3BhY2VAd2VjaGFsbC5uZXQ= or PM...
Windows can be secure... but only if you don't use it Happy
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d




Last Seen: 64d 20h
The User is Offline
Send EMail to gizmore
RE: security hole in the site
Oct 11, 2012 - 20:54:40 (14y 21d) Google/translate0Thank You!0Good Post!0Bad Post! link
Luckily false alert Smile

The reported problem was the public part of the challenges code from SVN, EDIT: found on warchall/opt/php/gwf3

Thanks for the report anyway!
gizmore
The geeks shall inherit the properties and methods of object earth.
Last edited by gizmore - Oct 11, 2012 - 20:56:07
Global Rank: 566
Totalscore: 46996
Posts: 37
Thanks: 21
UpVotes: 24
Registered: 14y 25d
stormsurfer`s Avatar



Last Seen: 9y 135d
The User is Offline
RE: security hole in the site
Oct 11, 2012 - 20:56:29 (14y 21d) Google/translate0Thank You!0Good Post!0Bad Post! link
ok, talked to gizmore, the www code on the warchall server is just svn, not the real stuff Smile
Totalscore: 314983
Posts: 98
Thanks: 107
UpVotes: 106
Registered: 17y 106d







Last Seen: 304d 23h
The User is Offline
RE: security hole in the site
Oct 18, 2012 - 17:42:13 (14y 15d) Google/translate0Thank You!0Good Post!0Bad Post! link
Quote from stormsurfer
Oct 11, 2012 - 20:41:51

How can I tell you're an admin? Smile


This is a good point giz. I mean the regulars know space is an admin also but the new users (sorry to throw you in that category StormSurfer) not so.
Perhaps a 'meet the team' section?

As I do it on RevEl: http://sabrefilms.co.uk/revolutionelite/admin.php


sabre
https://www.revolutionelite.co.uk/
Last edited by sabretooth - Oct 18, 2012 - 17:42:59
Global Rank: 198
Totalscore: 110647
Posts: 1795
Thanks: 1390
UpVotes: 961
Registered: 18y 258d




Last Seen: 64d 20h
The User is Offline
Send EMail to gizmore
RE: security hole in the site
Oct 18, 2012 - 19:07:11 (14y 14d) Google/translate0Thank You!0Good Post!0Bad Post! link
I didn't even know space is an admin Drool

But yes ... it seems to be an issue Smile
The geeks shall inherit the properties and methods of object earth.
Global Rank: 374
Totalscore: 66437
Posts: 274
Thanks: 258
UpVotes: 278
Registered: 15y 320d
space`s Avatar
The User is Offline
1
RE: security hole in the site
Oct 18, 2012 - 19:53:54 (14y 14d) Google/translate0Thank You!0Good Post!0Bad Post! link
http://www.wechall.net/contact
http://www.wechall.net/about_wechall

there you can watch it…

now i know sabre''s 'student' HappyHappy
Contact only via c3BhY2VAd2VjaGFsbC5uZXQ= or PM...
Windows can be secure... but only if you don't use it Happy
stormsurfer, quangntenemy, TheHiveMind, Z, balicocat, Ge0, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, fpombal, csuquvq have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 3895 times. 
PHP Fatal Error(1): Constant E_STRICT is deprecated since 8.4, the error level was removed in www/protected/config.php line 6


Backtrace starts in [unknown file] line ?.
GWF_Debug::shutdown_function() core/inc/util/GWF_Debug.php line 109.
GWF_Debug::error_handler().... core/inc/util/GWF_Debug.php line 180.