Sinisterly
Forum with upload vulnerability needed - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Forum with upload vulnerability needed (/Thread-Forum-with-upload-vulnerability-needed)



Forum with upload vulnerability needed - zomgwtfbbq - 09-13-2013

I'm in need of some (old) forum or cms that can be exploited with a file upload. Reason for this is that I want to make a video on how to exploit it with the hacksuite. For that I want to create a real life scenario:
1- get version of the forum/cms
2- find exploit
3- exploit it using THC_HF and Medusa
4- find info on admin
5- use THC_PG to create the wordlist for Medusa
6- own the forum

Sadly most outdated software isn't available anymore and the new versions usually just contain xss or sqli.

Help would be appreciated.


RE: Forum with upload vulnerability needed - Anima Templi - 09-13-2013

Why not just set up your own on a local host? That's at least what I would have done.


RE: Forum with upload vulnerability needed - zomgwtfbbq - 09-13-2013

(09-13-2013, 03:19 PM)Anima Templi Wrote: Why not just set up your own on a local host? That's at least what I would have done.
That's exactly what I want to do. But I can't find popular forum/cms software that still has a file upload vulnerability. They are patched or older versions can't be downloaded anymore.