https://blog.mauzy.net/tags/oscommerce/ Recent content in OsCommerce on Hugo en-us Fri, 21 Jun 2024 07:07:07 +0100 https://blog.mauzy.net/puzzles/blueprint/ Fri, 21 Jun 2024 07:07:07 +0100 https://blog.mauzy.net/puzzles/blueprint/ <h1 id="new-vocabulary">New Vocabulary</h1> <ul> <li>LM hash (LanMan Hash) <ul> <li>a compromised password hashing function that was the primary hash that Microsoft LAN manager and Windows used to store passwords</li> </ul> </li> <li>NTLM (New Technology LAN Manager) <ul> <li>a suite of Microsoft security protocols intended to provide authentication, integrity, and confidentiality to users. NTLM is a challenge-response authentication protocol used to authenticate a client to a resource on an Active Directory domain or a server running a stand-alone Windows computer.</li> </ul> </li> </ul> <h1 id="accessing-mariadb-unauthorized">Accessing MariaDB (unauthorized)</h1> <ul> <li><code>mysql -h 10.10.120.20 -u root</code> <ul> <li>Not allowed to connect to this MariaDB server from IP</li> </ul> </li> </ul> <h1 id="exploit-oscommerce-234">Exploit osCommerce 2.3.4</h1> <p><a href="https://www.exploit-db.com/exploits/44374" target="_blank">https://www.exploit-db.com/exploits/44374</a></p>