+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Legion | Arbitrary File Deletion [TUTORIAL] (/showthread.php?tid=3992025)
Pages: Pages
1
2
Legion | Arbitrary File Deletion [TUTORIAL] - Niggz - Jan 12, 2014
[img]http://i.minus.com/iv7iO7RQsAHx1.gif[/img]
Hello Sirs!
Today I am going to be teaching you about properly exploiting the Arbitrary File Deletion web vulnerability.
This will not be a very large tutorial as there isn't much to the vulnerability.
Step One
Every Arbitrary File Deletion should start out with you going to google and searching for one of the following google dorks.
Not that the useful google dorks are not limited to what is above. If none working for you, feel free to find and use your own.
[align=center]![[Image: yiYEfJx.png]](https://i.imgur.com/yiYEfJx.png)
Hello Sirs!
Today I am going to be teaching you about properly exploiting the Arbitrary File Deletion web vulnerability.
This will not be a very large tutorial as there isn't much to the vulnerability.
Step One
Every Arbitrary File Deletion should start out with you going to google and searching for one of the following google dorks.
Code
inurl:deletefile.php
inurl:delete.php?filename=
inurl:deletefile.php?filename=
inurl:deletefile.php?file=Not that the useful google dorks are not limited to what is above. If none working for you, feel free to find and use your own.
[align=center]
Step Two
Once you have found your target website from your google search and clicked on the link to the web page you should see something like this...
You should see a warning in the page which states that there is no such file in the directory.
This means that the site is vulnerable for Arbitrary File Deletion and you may begin to exploit it. If you did not return with something like what is in the above picture, I suggest that you keep looking for a vulnerable site as you should eventually find one. Do not worry.
Step Three
Now that you have completed the first two steps above, you can move on to the third and final step.
You will need to find one of the files in the vulnerable website that you wish to delete.
And, boom! It is gone!
* - Rap!st - Jan 12, 2014
Seems like a nice tutorial. I don't really get step 3 could you be more detailed at this?
Thanks in advance,
Rapist🤝
* - Vincenzo - Jan 12, 2014
Why is your tutorial so similar to this existing one?
https://hackforums.net/showthread.php?tid=2895305
https://gyazo.com/6bad1b204b2ae8050fe7ff22af67e7f3
https://gyazo.com/dd7241fb4a9d702d5d5e516fcc2b8435
* - Niggz - Jan 12, 2014
(Jan 12, 2014 09:17 AM)CodeEcho Wrote: Why is your tutorial so similar to this existing one?
https://hackforums.net/showthread.php?tid=2895305
https://gyazo.com/6bad1b204b2ae8050fe7ff22af67e7f3
https://gyazo.com/dd7241fb4a9d702d5d5e516fcc2b8435
I used the same image as I was to lazy to take my own screen shot haha.
* - hackersallin - Jan 12, 2014
Good but not a very well explained tutorial.... Specially 3rd step! But i will try it out soon and tell you back the results!
* - Lucifer - Jan 12, 2014
(Jan 12, 2014 09:17 AM)CodeEcho Wrote: Why is your tutorial so similar to this existing one?
https://hackforums.net/showthread.php?tid=2895305
https://gyazo.com/6bad1b204b2ae8050fe7ff22af67e7f3
https://gyazo.com/dd7241fb4a9d702d5d5e516fcc2b8435
Agreed.
Looks like you just changed some of the wording around.
* - Acroz - Jan 12, 2014
Now Sl0w, why is this tutorial the EXACT same as the other ones?
* - ASLR - Jan 12, 2014
wget http://******/ResponsiveTables/deletefile.php?id={0..1000}
trololololol
* - /Jigsaw/ - Jan 12, 2014
(Jan 12, 2014 10:09 AM)Sl0w Wrote: I used the same image as I was to lazy to take my own screen shot haha.
Slow being a fucking skid again.
I really hate how you consider yourself a blackhat when you can't even make up your own TuTs 🤦♂
Edit: inb4 closes thread
* - Lucifer - Jan 12, 2014
(Jan 12, 2014 06:11 PM)Duck Dynasty Wrote: Slow being a fucking skid again.
I really hate how you consider yourself a blackhat when you can't even make up your own TuTs 🤦♂
Edit: inb4 closes thread
I can vouch for this users responce.
* - Ascendon - Jan 13, 2014
(Jan 12, 2014 09:17 AM)CodeEcho Wrote: Why is your tutorial so similar to this existing one?
https://hackforums.net/showthread.php?tid=2895305
https://gyazo.com/6bad1b204b2ae8050fe7ff22af67e7f3
https://gyazo.com/dd7241fb4a9d702d5d5e516fcc2b8435
Yeah sl0w. Why is it exactly the same?
Why can't you be original and stop skidding other posts you leeching cunt bag.
Mostly everyone is tired of your shit.
You are not "Blackhat". You don't exactly deserve it.
You make a bad impression on every group you join.
* - /Jigsaw/ - Jan 13, 2014
(Jan 13, 2014 01:16 AM)Ascendon Wrote: Yeah sl0w. Why is it exactly the same?
Why can't you be original and stop skidding other posts you leeching cunt bag.
Mostly everyone is tired of your shit.
You are not "Blackhat". You don't exactly deserve it.
You make a bad impression on every group you join.
Vouch.
Highest Quality post here!
* - Sʜᴀᴅᴏᴡ Rᴇᴀʟᴍ - Jan 13, 2014
It's leejun lol? What the hell do you expect? Some rooting tutorial that actually does shit or
wget exploitdb.com/exploit/yolo
gcc -o exploit.c lulz
./lulz
* - Im gone brah - Jan 13, 2014
Jesus christ, you totally ripped this off. LQ
* - Lucifer - Jan 13, 2014
The saddest part is he is in Legion, such a good group but he is making it look bad.