+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Tutorial ColdFusion Exploit - Hack Big Sites With Ease! - High Detail (/Thread-Tutorial-ColdFusion-Exploit-Hack-Big-Sites-With-Ease-High-Detail)
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Reiko - 03-08-2014
HTP vs CF... good times, good times.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Alan Turing - 03-08-2014
(03-08-2014, 09:41 PM)Starfall Wrote: HTP vs CF... good times, good times.
When is Zine6 coming out? I couldn't even find 1,2,3,4, only 5 on exploit.db
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Reiko - 03-08-2014
(03-08-2014, 09:59 PM)VolPlus Wrote: When is Zine6 coming out? I couldn't even find 1,2,3,4, only 5 on exploit.dbHTP1: Disabled Google site... https://sites.google.com/site/lolanonopsdead/
HTP2: http://seclists.org/fulldisclosure/2011/Aug/127
HTP3: http://pastebin.com/mDJrP1Nk
HTP4: http://download.adamas.ai/dlbase/ezines/HTP/HTP-4.txt
There will never be an HTP6. HTP is disbanded for many reasons.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Alan Turing - 03-08-2014
(03-08-2014, 10:16 PM)Starfall Wrote: HTP1: Disabled Google site... https://sites.google.com/site/lolanonopsdead/
HTP2: http://seclists.org/fulldisclosure/2011/Aug/127
HTP3: http://pastebin.com/mDJrP1Nk
HTP4: http://download.adamas.ai/dlbase/ezines/HTP/HTP-4.txt
There will never be an HTP6. HTP is disbanded for many reasons.
Oh, never knew that. Huh, that's certainly news.
And thanks for the links, Zine 5 was a good read, so I'm sure these will be too.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Adorapuff - 03-11-2014
(03-08-2014, 10:16 PM)Starfall Wrote: HTP1: Disabled Google site... https://sites.google.com/site/lolanonopsdead/HTP 3 & 5 are my favorites lol. 3 because you pwn gAnonOps and 5 because you pwn firef0x.
HTP2: http://seclists.org/fulldisclosure/2011/Aug/127
HTP3: http://pastebin.com/mDJrP1Nk
HTP4: http://download.adamas.ai/dlbase/ezines/HTP/HTP-4.txt
There will never be an HTP6. HTP is disbanded for many reasons.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Spartan - 03-14-2014
Nice dude very nice tutorial
You have written there.
You really went into depth on it.
I wonder, are there still many webservers
Vulnerable to this exploit?
And are there more d0rks to scan
Vulnerable servers with.
Thanks
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - BreShiE - 03-14-2014
(03-14-2014, 02:38 AM)ProblemSolva Wrote: Nice dude very nice tutorial
You have written there.
You really went into depth on it.
I wonder, are there still many webservers
Vulnerable to this exploit?
And are there more d0rks to scan
Vulnerable servers with.
Thanks
Yes there are still loads of vulnerable sites that can be exploited through this way. Sure, dorks too! You just have to know about Google dorks to be able to combine different dorks into giving you different outputs and more vulnerable sites.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - sykerz - 03-14-2014
Spoiler:
http://www.geekswhodrink.com/index.cfm plz burn this crap down
Well I tried but didn`t find any vulrenable site.. Maybe I wasn`t seeking well enough. Thanks for guide tho
ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - benjaminvr - 03-31-2014
Cool i didnt know about this
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - G0d - 03-31-2014
Well that works insanely well. Thanks, hope to get some good shells from this.