You found a login page? Congrats /sarcasm
O'boy look at dis beautiful .gov coldfusion vuln! |
(Jun 17, 2013 02:03 PM)Cognitive Wrote: Never said I didn't understand the vulnerability. I'm saying how come you don't exploit it yourself, and show you did it? It's one thing to find vulnerabilities, but another to exploit them. He didn't exploit it and "gave it away" because it's patched. He can't exploit it. Adobe has released patches for everything < CF9 regarding the LFD in the login panel. (Jun 17, 2013 02:13 PM)Andrew Downsend Wrote: Thanks for the vuln, exploited with no issues. Good job OP. Are you sure? I mean... are you really sure? Seems like it's not vuln to RFD (Jun 17, 2013 02:11 PM)lordsql Wrote: Wow this forum post turned into idiocy. .gov websites are not anything to be proud of on Hf these days nor do people get any props for finding them, so i just posted the vuln. It isn't vulnerable, that's the problem. (Jun 17, 2013 02:13 PM)Andrew Downsend Wrote: Thanks for the vuln, exploited with no issues. Good job OP. Lie. (Jun 17, 2013 02:30 PM)The Fail Collective Wrote: Are you sure? I mean... are you really sure? I hope you're trolling.
".gov websites are not anything to be proud of on Hf these days nor do people get any props for finding them"
so if you know people get no props for finding them then why would you post it here, move on -.- also @ versace , did I say he should impress me? no i said, then i would be impressed. dont be such a mentresual dick
If you say that this is actually vulnerable, and extremely easy to exploit, why not provide a PoC to prove us all wrong? Something like this would suffice: http://turf.unl.edu/CFIDE/skad.txt
(Jun 17, 2013 01:53 PM)MiRP_Anon Wrote: You found a login page? Congrats /sarcasm yes, a login page that is, well running a patched version but unpatched is obvs, vuln to an old exploit - it shows it is CF v8 aka one of the vuln versions. (Jun 17, 2013 01:57 PM)Vitanis Mate Wrote: Then do it? It's not impressive unless you actually exploit it. it still wouldnt be impressive even if he exploited it. (Jun 17, 2013 02:01 PM)Flaaffy Wrote: Thanks for the vuln .gov! okay. have an unrefined google dork for a lot of govs that run CF either patched or already hacked by kids, like yourself: inurl:.gov ext:cfm (Jun 17, 2013 03:05 PM)lordsql Wrote: Nice, I've been trying to find a good tutorial on CF9, can't find one. 0dayz. big hecks, no whammies, amus3d. (Jun 17, 2013 04:26 PM)amus3d Wrote: yes, a login page that is, well running a patched version but unpatched is obvs, vuln to an old exploit - it shows it is CF v8 aka one of the vuln versions. Mmm becuase in my post I blatantly said that in a non sarcastic tone, quote the rest of my post asshole. I don't even hack that much nowdays, to busy |
|
|