+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: FTP Editor Admin Password Login; Hack (/showthread.php?tid=5198873)
FTP Editor Admin Password Login; Hack - Froggen - Mar 10, 2016
thecoolclass. com/editor/index.php?mwh=3
Any ideas on how to crack this password ?
I've tried using Brutus, and SqlInjection, it seems to be vulnerable, but not sql vuln...
Any help on cracking this FTP editor ?
🤝
After doing some more vulnerability scans, This site seems to have multiple XSS vulnerabilities. I can list a full detailed scan result if that will help anyone else? I'm a begginer, and only know SQLI so far.. Maybe someone knows what to do with these XSS, Same site scripting , Bruteforce, vulnerabilities ?
Update: I think I dabbled upon something !
with some snooping around this vulnerabilty scanner, it let me into some site structure ?
I have found my win into a "parent directory" of the website ?
Index of /editor/mwftp5
Parent Directory
_hclib/
_sessions/
common/
ftp/
hoster/
web_dir.php
Apache Server at thecoolclass. com Port 80
( is this anything important ) will any of this help deface the website? or lead me to the Password Crack ?
XSS Vuln Location - /editor/index.php