Forum with upload vulnerability needed

zomgwtfbbq · 09-13-2013, 03:12 PM

I'm in need of some (old) forum or cms that can be exploited with a file upload. Reason for this is that I want to make a video on how to exploit it with the hacksuite. For that I want to create a real life scenario:
1- get version of the forum/cms
2- find exploit
3- exploit it using THC_HF and Medusa
4- find info on admin
5- use THC_PG to create the wordlist for Medusa
6- own the forum

Sadly most outdated software isn't available anymore and the new versions usually just contain xss or sqli.

Help would be appreciated.

Anima Templi · 09-13-2013, 03:19 PM

Why not just set up your own on a local host? That's at least what I would have done.

zomgwtfbbq · 09-13-2013, 03:22 PM

(09-13-2013, 03:19 PM)Anima Templi Wrote: Why not just set up your own on a local host? That's at least what I would have done.

That's exactly what I want to do. But I can't find popular forum/cms software that still has a file upload vulnerability. They are patched or older versions can't be downloaded anymore.