+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: FTP Hack (/showthread.php?tid=5963895)
FTP Hack - sitdown1 - Apr 25, 2019
Okay guys,
soo i need some help here!
I bought some software a while back and to use it you get a command prompt.exe written in C++, VS. you need to enter a token / licence. Once you have you can then select the software, it will download from a FTP into temp folder, inject and then auto delete.
I managed to find out what server it is talking to (i now have the IP)
and i have also found the dir where some of the files are kept (on the desktop).
Is there anyway to download these files so i can "run" or create a C++ program that does the same as the current one but without the need to use a token / licence every 24 hours!?
I would be greatful if someone could help me.
i dont know if it is allowed but my discord is: Slappy #2564
Willing to pay for services / help!
RE: FTP Hack - Coooool - Apr 25, 2019
I have no idea how you would ACTUALLY approach this as I am a simple man which your words humble me, but I would try to scan it looking for any outdated software and if it does have a look on exploit databases. If I find one that includes login or shell I would implement it into a shell/python script, or I would be a skid and look for an already built script.
RE: FTP Hack - sitdown1 - Apr 25, 2019
(Apr 25, 2019 10:11 AM)Coooool Wrote: I have no idea how you would ACTUALLY approach this as I am a simple man which your words humble me, but I would try to scan it looking for any outdated software and if it does have a look on exploit databases. If I find one that includes login or shell I would implement it into a shell/python script, or I would be a skid and look for an already built script.I know port 80 is open. These files it downloads, must be public as they download to over 100 computers a day (if they have a valid licence). I've tried FTP brute force but i just cant get it working. by the looks of it, its in a data server according to whois
If someone is willing to help, i would even pay for it