+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: <NEW> Website Vulnerable! Hack it! (/showthread.php?tid=5841992)
<NEW> Website Vulnerable! Hack it! - Nolann - May 28, 2018
Not that anyone cares or anything, but this password recovery page has a vulnerability.
http s :// bradford. focusschoolsoftware. com/fo cus/auth/index.php?action=recovery (remove spaces in link!! I'm under 50 posts :c)
If you type
Code
">So yes, this is vulnerable. It has been for a while I'm assuming.
If anyone wants to try and hack it, and present the bug to the company "Focus" to gain
some kind of bounty, then good luck!
I'd love to see progress posted here in the thread :)
RE: <NEW> Website Vulnerable! Hack it! - BlindIntruder - Jun 12, 2018
Very likely to be nothing more than a POTENTIAL XSS vector. You won't exploit directly the server with this.
RE: <NEW> Website Vulnerable! Hack it! - DEEPSS - Jun 12, 2018
Hell you couldn’t exploit it with sql, it is https most injection tools can’t get past https
RE: <NEW> Website Vulnerable! Hack it! - int - Jun 12, 2018
(Jun 12, 2018 05:00 PM)DEEPSS Wrote: Hell you couldn’t exploit it with sql, it is https most injection tools can’t get past https
Stop spewing bs
RE: <NEW> Website Vulnerable! Hack it! - the princess - Jun 12, 2018
Playing around with it, i can't seem to get it to run javascript.
prnt.sc /ju9xbq
Anybody have any ideas?
RE: <NEW> Website Vulnerable! Hack it! - DEEPSS - Jun 12, 2018
(Jun 12, 2018 05:28 PM)Jukeboxhook Wrote: Stop spewing bs
Dear script kiddie, when you learn about sql and it’s protection vectors, come to the big boy table. Most sql tools except for 2 that’s I know of can get past https, learn some shit kid. What are you 12?
RE: <NEW> Website Vulnerable! Hack it! - the princess - Jun 13, 2018
(Jun 12, 2018 09:10 PM)DEEPSS Wrote: Dear script kiddie, when you learn about sql and it’s protection vectors, come to the big boy table. Most sql tools except for 2 that’s I know of can get past https, learn some shit kid. What are you 12?
LOL.
Dear script kiddie,
1) SQLI has nothing to do with the security of the connection (SSL)
2) It's SSL, not https
3) The vulnerability is XSS, not SQLI so it's irrelevant to even discuss it
RE: <NEW> Website Vulnerable! Hack it! - int - Jun 13, 2018
(Jun 12, 2018 09:10 PM)DEEPSS Wrote: Dear script kiddie, when you learn about sql and it’s protection vectors, come to the big boy table. Most sql tools except for 2 that’s I know of can get past https, learn some shit kid. What are you 12?
Ok Mr Topp Mirai Rename 24k BotNet Owner
RE: <NEW> Website Vulnerable! Hack it! - BlindIntruder - Jun 13, 2018
(Jun 12, 2018 05:00 PM)DEEPSS Wrote: Hell you couldn’t exploit it with sql, it is https most injection tools can’t get past https
(Jun 12, 2018 09:10 PM)DEEPSS Wrote: Dear script kiddie, when you learn about sql and it’s protection vectors, come to the big boy table. Most sql tools except for 2 that’s I know of can get past https, learn some shit kid. What are you 12?
A lot of LOLs have been given here.
RE: <NEW> Website Vulnerable! Hack it! - 7teen20nine - Jun 14, 2018
Seems fun enough, the other comments are quite carcinogenic, I'll try my best, no promises tho :)
RE: <NEW> Website Vulnerable! Hack it! - XXXTenacion - Jun 14, 2018
Eh it's a school link so im not even touching that.