full-disclosure - Security of phpBB

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <814b9d5050621090368df8201@mail.gmail.com>
Date: Tue Jun 21 17:05:40 2005
From: milw0rm at gmail.com (milw0rm Inc.)
Subject: Security of phpBB

Nick,

Its in the development stages right now.  I am currently waiting on 24
machines to finish up the rainbow tables and then I will kick start
it.  There will only be 160 people waiting at a time (first come first
serve without a 30 day waiting list).  The mod updates the password
fields the second they are cracked to open up more room for others.

Should be finished by the middle of next week.

/str0ke  

On 6/21/05, nick johnson <ch0pstik@...il.com> wrote:
> Offtopic: str0ke, I just noticed that md5 cracker on your page, does
> that just wait for 40 hashes and do them all at once?
> 
> On 6/20/05, milw0rm Inc. <milw0rm@...il.com> wrote:
> > How goes it Tom.
> >
> > The link below will show you the exploits that are out in the wild for phpbb.
> >
> > http://www.milw0rm.com/remotephp.php?it=phpBB
> >
> > Regards,
> > /str0ke
> >
> > On 6/20/05, Tom Edwards <topbeachwear@...mail.de> wrote:
> > > Hi,
> > >
> > > I am new to this list and to security in general so please excuse my
> > > question. A friend told me that our forum software phpBB is not very secure
> > > and told me about this. Where can I get information on that? What must I do
> > > to make it secure?
> > >
> > > Thank you.
> > >
> > > Kind regards,
> > > Tom Edwards, Manager
> > >
> > > _________________________________________________________________
> > > MSN Hotmail. Anmelden und gewinnen! http://www.msn.de/email/webbased/ Ihre
> > > Chance, eines von 10 T-Mobile MDA II zu gewinnen!
> > >
> > > _______________________________________________
> > > Full-Disclosure - We believe in it.
> > > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > > Hosted and sponsored by Secunia - http://secunia.com/
> > >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
>