Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Tutorial ColdFusion Exploit - Hack Big Sites With Ease! - High Detail filter_list
Author
Message
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #11
HTP vs CF... good times, good times.
PGP
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47

Reply

RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #12
(03-08-2014, 09:41 PM)Starfall Wrote: HTP vs CF... good times, good times.

When is Zine6 coming out? I couldn't even find 1,2,3,4, only 5 on exploit.db
Unleash the lead from my pistol into my head bumpin' crystal

Reply

RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #13
(03-08-2014, 09:59 PM)VolPlus Wrote: When is Zine6 coming out? I couldn't even find 1,2,3,4, only 5 on exploit.db
HTP1: Disabled Google site... https://sites.google.com/site/lolanonopsdead/
HTP2: http://seclists.org/fulldisclosure/2011/Aug/127
HTP3: http://pastebin.com/mDJrP1Nk
HTP4: http://download.adamas.ai/dlbase/ezines/HTP/HTP-4.txt

There will never be an HTP6. HTP is disbanded for many reasons.
PGP
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47

Reply

RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #14
(03-08-2014, 10:16 PM)Starfall Wrote: HTP1: Disabled Google site... https://sites.google.com/site/lolanonopsdead/
HTP2: http://seclists.org/fulldisclosure/2011/Aug/127
HTP3: http://pastebin.com/mDJrP1Nk
HTP4: http://download.adamas.ai/dlbase/ezines/HTP/HTP-4.txt

There will never be an HTP6. HTP is disbanded for many reasons.

Oh, never knew that. Huh, that's certainly news.

And thanks for the links, Zine 5 was a good read, so I'm sure these will be too.
Unleash the lead from my pistol into my head bumpin' crystal

Reply

RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #15
(03-08-2014, 10:16 PM)Starfall Wrote: HTP1: Disabled Google site... https://sites.google.com/site/lolanonopsdead/
HTP2: http://seclists.org/fulldisclosure/2011/Aug/127
HTP3: http://pastebin.com/mDJrP1Nk
HTP4: http://download.adamas.ai/dlbase/ezines/HTP/HTP-4.txt

There will never be an HTP6. HTP is disbanded for many reasons.
HTP 3 & 5 are my favorites lol. 3 because you pwn gAnonOps and 5 because you pwn firef0x.
#MakeSinisterlySexyAgain

Reply

RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #16
Nice dude very nice tutorial
You have written there.
You really went into depth on it.

I wonder, are there still many webservers
Vulnerable to this exploit?

And are there more d0rks to scan
Vulnerable servers with.

Thanks

Reply

RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #17
(03-14-2014, 02:38 AM)ProblemSolva Wrote: Nice dude very nice tutorial
You have written there.
You really went into depth on it.

I wonder, are there still many webservers
Vulnerable to this exploit?

And are there more d0rks to scan
Vulnerable servers with.

Thanks

Yes there are still loads of vulnerable sites that can be exploited through this way. Sure, dorks too! You just have to know about Google dorks to be able to combine different dorks into giving you different outputs and more vulnerable sites.
[Image: F4Z9Dqw.png]

Reply

RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #18
Spoiler:
http://www.geekswhodrink.com/index.cfm plz burn this crap down


Well I tried but didn`t find any vulrenable site.. Maybe I wasn`t seeking well enough. Thanks for guide tho

Reply

ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #19
Cool i didnt know about this

Reply

RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail #20
Well that works insanely well. Thanks, hope to get some good shells from this.

Reply