Security Research & Engineering Practice

0x00 Basic Shortcuts Sublime Next word: Ctrl+D Bookmarks: Ctrl+F2, F2 Show function: Ctrl+E Select current line: Ctrl+L Matching bracket: Ctrl+M 0x01 Repeated Installation Possible After a normal installation completes, the system can be installed again, because install.lock is never generated. An article on freebuf claims the problem lies at line 158 of install/index.php, where the is_writable function is used incorrectly. However, after verification, I found this function is not what causes the repeated-installation issue. ...

NexusPHP is a resource-sharing CMS used for P2P downloading; the source code download link is https://github.com/ZJUT/NexusPHP Preliminary Analysis [ ](https://github.com/ZJUT/NexusPHP) This CMS has a global SQL-injection filtering function, sqlesc() nexusphp/include/globalfunctions.php #75 Global filtering: SQL injection prevention #1. It escapes input with the MySQL anti-injection function and wraps the statement in single quotes, which makes it impossible to inject quotes or introduce variables ($ inside single quotes is not interpreted as a variable) ...

Information Gathering # 25/tcp open smtp | fingerprint-strings: | Hello: | 220 ubuntu GoldentEye SMTP Electronic-Mail agent |_ Syntax: EHLO hostname |_smtp-commands: ubuntu, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, # 80/tcp open http Apache httpd 2.4.7 ((Ubuntu)) | http-methods: |_ Supported Methods: GET HEAD POST OPTIONS |_http-server-header: Apache/2.4.7 (Ubuntu) |_http-title: GoldenEye Primary Admin Server # 55006/tcp open ssl/pop3 Dovecot pop3d |_pop3-capabilities: RESP-CODES TOP CAPA AUTH-RESP-CODE SASL(PLAIN) USER PIPELINING UIDL | ssl-cert: Subject: commonName=localhost/organizationName=Dovecot mail server | Issuer: commonName=localhost/organizationName=Dovecot mail server | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2018-04-24T03:23:52 | Not valid after: 2028-04-23T03:23:52 | MD5: d039 2e71 c76a 2cb3 e694 ec40 7228 ec63 |_SHA-1: 9d6a 92eb 5f9f e9ba 6cbd dc93 55fa 5754 219b 0b77 |_ssl-date: TLS randomness does not represent time # 55007/tcp open pop3 Dovecot pop3d |_pop3-capabilities: RESP-CODES SASL(PLAIN) TOP PIPELINING STLS CAPA AUTH-RESP-CODE USER UIDL | ssl-cert: Subject: commonName=localhost/organizationName=Dovecot mail server | Issuer: commonName=localhost/organizationName=Dovecot mail server | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2018-04-24T03:23:52 | Not valid after: 2028-04-23T03:23:52 | MD5: d039 2e71 c76a 2cb3 e694 ec40 7228 ec63 |_SHA-1: 9d6a 92eb 5f9f e9ba 6cbd dc93 55fa 5754 219b 0b77 |_ssl-date: TLS randomness does not represent time Two ports were discovered; I tried logging in via SMTP on port 25, but it failed. ...