[Quentin™]

How to exploit a vulnerable site

What is this?

This is a tutorial showing you how to exploit vulnerable sites. If you continue to read on, I suggest using this tutorial for educational purposes only.


Lets get started

First you need to find a vulnerable site. You may say how do I find these vulnerable sites, well first off go to google.com and type in

Spoiler:

admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

Once you find a site that looks like this




Where it says Connector change ASP to PHP


Download

Now next, download Horny Monkeys Deface Builder

Spoiler:

HMDB - http://www.mediafire.com/?wozc676q35eoby5

Virus Total - https://www.virustotal.com/file/580f4198...337460492/

Once you have downloaded that Open it up, and Enter what you would like it to do.



Once you have done that, click "Build" then the HTML code to the right Highlight it and press ctrl + c to copy it. Once you have copied it paste it in notepad and save it as "anything.html" to your desktop.

Time To Test Everything Out Now

Go here - www.example.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

Once you get there change ASP to PHP. Click choose file and open the html file that you saved to your desktop. Now click upload. Once it's done, go to the site name then put the name of your file at the end of it

Spoiler:

Example - http://www.example.com/localinjected.html

Now your done

[#Swag_mybb_import6403]

Thanks for the tutorial bruh!

[Quentin™]

No Problem man I try,

[killerOfCode]

This is a great share, however, I don't believe there is an easy way to find websites that have this URL. ;/

[Quentin™]

In my method it shows how, when you type in

admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

look at all of the websites url's that look similar to the code.

[Quentin™]

I just edited this posted

[Dawnc0re]

Awesome Tutorial

[1llusion]

Nice tutorial, however I had to remove the links. Keep up the nice work =)

[HrDe]

This tutorial really nice, g8t job bro!

[Quentin™]

This tutorial really nice, g8t job bro!

Thanks,