+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: Tutorial ColdFusion Exploit - Hack Big Sites With Ease! - High Detail (/Thread-Tutorial-ColdFusion-Exploit-Hack-Big-Sites-With-Ease-High-Detail)
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - rootaccess - 04-12-2014
awesome but like the other guy in this
thread i also got the problem with
illegal characters
and yes i removed the javascript: part
i managed to fix it :
javascript:alert(hex_hmac_sha1(document.loginform.salt.value,document.loginform.​cfadminPassword.value))
i removed the . after loginform
and it gave me the hash, and i did then tamper the login button.
and it still said wrong password, and i did it really fast, so i dont think thats the problem.
do you have any solution for this ?
other then that great tutorial.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Civil - 04-19-2014
nice tutorial, still works on vuln sites.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Snowl - 04-19-2014
This is a beautiful tutorial man! Thanks a ton!
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Dyme - 04-19-2014
My favorite part is when you teach us how to run a python script
Spoiler:
nuu ban pls it was j0ke pls mercy
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - leku - 04-27-2014
Never shelled a coldfusion before. Thx for the tutorial
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Nyanners - 04-27-2014
Very well explained tut. Thanks, might try this sometime.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - BreShiE - 04-30-2014
You're welcome guys. I'm currently not able to give help to those of you having problems as I'm very busy. Once I get a a chance I'll try to help.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - rootaccess - 05-01-2014
(04-30-2014, 07:49 PM)BreShiE Wrote: You're welcome guys. I'm currently not able to give help to those of you having problems as I'm very busy. Once I get a a chance I'll try to help.
thats ok man, we can understand u have to sometimes be busy in life
whenever u have time, if u could explain to me,
why it didnt worked for me, that would be awesome.
thanks
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - BreShiE - 12-03-2014
This thread leads me to believe that I am a hacker. Fear me.
RE: ColdFusion Exploit - Hack Big Sites With Ease! - High Detail - Nebulous - 12-03-2014
(12-03-2014, 08:12 AM)BreShiE Wrote: This thread leads me to believe that I am a hacker. Fear me.
One of the various ways to hack ColdFusion was used to root the Bell Canada ISP around March I think it was.