[rootaccess]

awesome but like the other guy in this
thread i also got the problem with

illegal characters

and yes i removed the javascript: part

i managed to fix it :

javascript:alert(hex_hmac_sha1(document.loginform.salt.value,document.loginform.​cfadminPassword.value))

i removed the . after loginform
and it gave me the hash, and i did then tamper the login button.
and it still said wrong password, and i did it really fast, so i dont think thats the problem.

do you have any solution for this ?
other then that great tutorial.

[Civil]

nice tutorial, still works on vuln sites.

[Snowl]

This is a beautiful tutorial man! Thanks a ton!

[Dyme]

My favorite part is when you teach us how to run a python script

Spoiler:

nuu ban pls it was j0ke pls mercy

[leku]

Never shelled a coldfusion before. Thx for the tutorial

[Nyanners]

Very well explained tut. Thanks, might try this sometime.

[BreShiE]

You're welcome guys. I'm currently not able to give help to those of you having problems as I'm very busy. Once I get a a chance I'll try to help.

[rootaccess]

You're welcome guys. I'm currently not able to give help to those of you having problems as I'm very busy. Once I get a a chance I'll try to help.

thats ok man, we can understand u have to sometimes be busy in life
whenever u have time, if u could explain to me,
why it didnt worked for me, that would be awesome.

thanks

[BreShiE]

This thread leads me to believe that I am a hacker. Fear me.

[Nebulous]

This thread leads me to believe that I am a hacker. Fear me.

One of the various ways to hack ColdFusion was used to root the Bell Canada ISP around March I think it was.