RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail 03-08-2014, 03:03 PM
#9
(03-08-2014, 02:59 PM)stepollo Wrote: javascript:alert(hex_hmac_sha1(document.loginform.salt.value,document.loginform.cfadminPassword.value))
I had some problems here, if i copy past this and run it, firefox tells: /*
Exception: illegal character
*/
Are you running this in scratch pad? The Firefox script console?
EDIT: Try it without the j at the front.















![[Image: F4Z9Dqw.png]](https://i.imgur.com/F4Z9Dqw.png)
![[+]](https://sinister.li/images/modern/collapse_collapsed.png)