Traffic service & campaign optimization ◆ Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆ ZexoCard: no-KYC virtual crypto cards ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › Exploiting FCKEditor tutorial. (Noob friendly).

New Reply 

Exploiting FCKEditor tutorial. (Noob friendly).
HaxOr❤
HaxOr❤ Offline
INTRA
***
HF Ub3r
Posts:
4,952
Threads:
209
Credibility:
000
Popularity:
955
βytes:
β 100.5
Game XP:
0
Jan 19, 2013 01:12 PM
Yes i can vouch for this exploit. It is legit.

Execpt you need to find vulnerable version which is a pain in the ass.
Apple J4ck.
Apple J4ck. Offline
Fuck.
***
HF Ub3r
Posts:
1,725
Threads:
48
Credibility:
000
Popularity:
48
βytes:
β 0
Game XP:
0
Jan 19, 2013 01:41 PM
Very nice tut Vince ;)
This is new to me, thanks!
I do not condone illegal activities.
VipVince
VipVince Offline
UID 0
****
HF Ub3r
Posts:
6,874
Threads:
967
Credibility:
000
Popularity:
34
βytes:
β 0
Game XP:
0
Jan 19, 2013 05:51 PM
(Jan 19, 2013 01:12 PM)HaxOr❤ Wrote:  Yes i can vouch for this exploit. It is legit.

Execpt you need to find vulnerable version which is a pain in the ass.

True words. Can be frustrating at times.
ademin
Guest
 
Jan 20, 2013 01:37 PM
yeee i'm frustating now -,-

(Jan 19, 2013 07:41 AM)VipVince Wrote:  May simply be not vulnerable, check the version.

how do i check the version of fckeditor?
VipVince
VipVince Offline
UID 0
****
HF Ub3r
Posts:
6,874
Threads:
967
Credibility:
000
Popularity:
34
βytes:
β 0
Game XP:
0
Jan 20, 2013 01:46 PM (This post was last modified: Jan 20, 2013 01:46 PM by VipVince.)
(Jan 20, 2013 01:37 PM)ademin Wrote:  yeee i'm frustating now -,-

how do i check the version of fckeditor?

Sometimes you will not know for sure unless you just try the exploit against it, if your lucky you will find FCKeditor prototype Version in the fckeditor.js file.
ademin
Guest
 
Jan 20, 2013 01:48 PM
(Jan 20, 2013 01:46 PM)VipVince Wrote:  Sometimes you will not know for sure unless you just try the exploit against it, if your lucky you will find FCKeditor prototype Version in the fckeditor.js file.

ah i see.
i think it in readme.txt XD
thanks
zikmik
zikmik Offline
[closed@HF:]
Posts:
323
Threads:
58
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 3, 2013 07:56 AM
(Jan 20, 2013 01:46 PM)VipVince Wrote:  Sometimes you will not know for sure unless you just try the exploit against it, if your lucky you will find FCKeditor prototype Version in the fckeditor.js file.

site.com/admin/fckeditor/editor/_source/fckeditorapi.js

find line: 'Version : "

....
'window.FCKeditorAPI = {' +
'Version : "2.6.4",' +
'VersionBuild : "21629",' +
'Instances : window.FCKeditorAPI && window.FCKeditorAPI.Instances || {},' +
....
rfpd
rfpd Offline
[bin@HF:]
*
Registered
Posts:
525
Threads:
38
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 3, 2013 09:34 AM
You are telling me you discovered a one page uploader, interesting... Later I will try some vulnerabilities using that code, thanks for the tutorial!
zombiehacker
Guest
 
Feb 3, 2013 09:36 AM
Quite good tutorial my friend.

see you again soon!
Light Yagami.
Guest
 
Feb 3, 2013 10:46 AM
Nice tut nigga i learned something new
laterain
Guest
 
Feb 3, 2013 07:26 PM
At first
FCK's version must <=2.6.4
Php's versionuse must <=5.3.4
eZd0ezIT
Guest
 
Feb 3, 2013 07:41 PM
Write a python exploit to automate it :)
Th3PonyWizard
Guest
 
Feb 4, 2013 03:18 PM
>complains about skids
>creates skid friendly tutorials
Welp.
Cyber Criminal
Guest
 
Feb 5, 2013 02:14 AM
VipVince, can you change the shout-out from my old name Acid Burntm to my new one Divine Legacy? thanks.
VipVince
VipVince Offline
UID 0
****
HF Ub3r
Posts:
6,874
Threads:
967
Credibility:
000
Popularity:
34
βytes:
β 0
Game XP:
0
Apr 4, 2013 02:52 AM (This post was last modified: Apr 4, 2013 02:52 AM by VipVince.)
Just thought I would B.U.M.P this, cause why the fuck not?
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by spirited_wolf™Aug 8, 2021 12:47 AM 11 1,094 Aug 8, 2021 12:47 AM
Last Post: savetree
by OfficeInboxerMar 28, 2021 05:23 AM 3 243 Mar 28, 2021 05:23 AM
Last Post: goratberom
by webbJan 5, 2017 12:31 AM 43 4,200 Jan 5, 2017 12:31 AM
Last Post: Maxs