Hack Forums
acunetix - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat β€’ Purple Team β€’ Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: acunetix (/showthread.php?tid=4036183)



acunetix - MpOwEr - Feb 2, 2014

Hello dear sirs and welcome,

I am here today to ask if anyone is willing to guide me in the right directions for taking further steps.
I have a website that i scanned with acunetix (manually is better if you now howto and im not here to discuss that)
i have some results but i don't have a clue in how to proceed
with this info or i don't know if i can already retreive some info with these results?
😠I AM NOT ASKING THAT SOMEONE DOES IT FOR ME😠
πŸ˜‰I AM ASKING FOR GUIDANCE,KNOWLEDGE AND A WILL/TIME to help
or a direction for help.πŸ˜‰

Here are some of "results":
[IMG]http://img15.hostingpics.net/thumbs/mini_706186vuln.png[/IMG]

🀝


* - felicixus - Feb 2, 2014

Prepare a page that can steal cookie and send link to the admin or users...
Then use admin cookie to look for file upload in webpanel and upload a shell.
Then you can go for root if there is an old kernel.
Once you are root you can do what the f**k you want :D

BTW It's not so easy...


* - 21redallday12 - Feb 2, 2014

(Feb 2, 2014 04:11 AM)felicixus Wrote:  Prepare a page that can steal cookie and send link to the admin or users...
Then use admin cookie to look for file upload in webpanel and upload a shell.
Then you can go for root if there is an old kernel.
Once you are root you can do what the f**k you want :D

BTW It's not so easy...

He cleary does not understand XSS,
ps i hope you fail, you do not deserve to exploit this


* - MpOwEr - Feb 2, 2014

(Feb 2, 2014 05:15 AM)21redallday12 Wrote:  He cleary does not understand XSS,
ps i hope you fail, you do not deserve to exploit this

Offcourse i don't understand thats what i am saying myself
so no need for this behavior thank you!
Meaning that i don't now,doesn't mean i can't now,
since i am here i wanna know,with the help i ask,(that felicixus is given thnk you btw!✌)i can look up into that, in fact 21redallday12 if you could understand
better what i wroted,you would have noticed that that was EXATELLY WHAT
I WAS ASKING SO YOUR "OWN OPINION" KEEP IT NEXT TIME PLEASE!

Since you are clearly an superintellectual being,you "deserve" everything,
what must i do your greatness to "DESERVE" to exploit this?🀣
Everybody deserves any chance if taken the proper attention to it,
and with your easy critic,i must now suceed with this and sent you a PM with my "victory" that you sir,did not wish at all for me,not even in you
own advantage but just as an free egocentric act...

If anyone has the "same"opinion,you may have it for sure,
but please keep it to yourself,thank you for that!

If anyone can help me on any kind of way,ill really appreciate your help!

🀝


* - 21redallday12 - Feb 2, 2014

(Feb 2, 2014 05:46 AM)MpOwEr Wrote:  Offcourse i don't understand thats what i am saying myself
so no need for this behavior thank you!
Meaning that i don't now,doesn't mean i can't now,
since i am here i wanna know,with the help i ask,(that felicixus is given thnk you btw!✌)i can look up into that, in fact 21redallday12 if you could understand
better what i wroted,you would have noticed that that was EXATELLY WHAT
I WAS ASKING SO YOUR "OWN OPINION" KEEP IT NEXT TIME PLEASE!

Since you are clearly an superintellectual being,you "deserve" everything,
what must i do your greatness to "DESERVE" to exploit this?🀣
Everybody deserves any chance if taken the proper attention to it,
and with your easy critic,i must now suceed with this and sent you a PM with my "victory" that you sir,did not wish at all for me,not even in you

own advantage but just as an free egocentric act...

If anyone has the "same"opinion,you may have it for sure,
but please keep it to yourself,thank you for that!

If anyone can help me on any kind of way,ill really appreciate your help!

🀝

Just google XSS, and the other 'vulns.


* - MpOwEr - Feb 2, 2014

Thank you that was what i was entended to do but since i don't know about it i
prefered to ask first.
Thank you both for replying !
🀝