ProxiesFood: Unlimited Residential Proxy ◆ Spoof Call and Spoof SMS set any caller ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › Dork to find Radio Station Websites

New Reply 

Dork to find Radio Station Websites
SiStemiC
SiStemiC Offline
[bin@HF:]
***
HF l33t
Posts:
1,031
Threads:
38
Credibility:
000
Popularity:
35
βytes:
β 0
Game XP:
0
May 15, 2015 07:09 AM
I just found this. By searching:
PHP Code

<?php 
"fm:/.php?id=" 
You get Radio Station Websites. I did a small vulnerability test on one site:
Code
9XXbigfm.com/city.php?id=2
XX= 16 + 11
And it was vulenable.
Anyway, the site has 1 collumn(!) and theres a table called User_login. However I stopped there and thought about sharing it here in case someone is interested...

-SiStemiC
Any help appreciated BTC ~
1JiBi7CjHuFqcJXyceXWKPBBQHjGn2JMKu
bass booster
Guest
 
May 15, 2015 08:22 AM
Hmm seems interesting. I'll take your research further iff possible
iHacker-n00b
iHacker-n00b Offline
[user@HF:]
*
Registered
Posts:
361
Threads:
16
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 15, 2015 08:49 AM
[img]http://s9.postimg.org/jaz5ukxcv/owned.png[/img] Its Old !
SiStemiC
SiStemiC Offline
[bin@HF:]
***
HF l33t
Posts:
1,031
Threads:
38
Credibility:
000
Popularity:
35
βytes:
β 0
Game XP:
0
May 15, 2015 11:54 AM
(May 15, 2015 08:49 AM)iHacker-n00b Wrote:  [img]http://s9.postimg.org/jaz5ukxcv/owned.png[/img] Its Old !

Did you upload shell to the site?
Any help appreciated BTC ~
1JiBi7CjHuFqcJXyceXWKPBBQHjGn2JMKu
andy1994
Guest
 
May 16, 2015 03:11 AM
Thanks man good find for sure :)
qusai.alhaddad
qusai.alhaddad Offline
[n00b@HF:]
*
Registered
Posts:
46
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
May 16, 2015 03:35 AM (This post was last modified: May 16, 2015 03:38 AM by qusai.alhaddad.)
I cannot post pictures now , but you know what is "hue".
bass booster
Guest
 
May 17, 2015 08:16 AM
(May 15, 2015 08:49 AM)iHacker-n00b Wrote:  
Code
[img]http://s9.postimg.org/jaz5ukxcv/owned.png[/img]
Its Old !

I can't even get the admin page to load. It just gives me a 403 Forbidden.

Anyway to get past that?
iHacker-n00b
iHacker-n00b Offline
[user@HF:]
*
Registered
Posts:
361
Threads:
16
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 17, 2015 08:18 AM
(May 17, 2015 08:16 AM)bass booster Wrote:  I can't even get the admin page to load. It just gives me a 403 Forbidden.

Anyway to get past that?
lol :3 its not working xD Now... I hacked it earlier btw I did it Without Cracking The hash...
bass booster
Guest
 
May 17, 2015 09:35 AM
(May 17, 2015 08:18 AM)iHacker-n00b Wrote:  lol :3 its not working xD Now... I hacked it earlier btw I did it Without Cracking The hash...

They must have deny all in htaccess :D

The password was easy to get. it was huehuehuehue Or maybe only 3 I do't remember :3
iHacker-n00b
iHacker-n00b Offline
[user@HF:]
*
Registered
Posts:
361
Threads:
16
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 17, 2015 09:38 AM (This post was last modified: May 17, 2015 09:38 AM by iHacker-n00b.)
(May 17, 2015 09:35 AM)bass booster Wrote:  They must have deny all in htaccess :D

The password was easy to get. it was huehuehuehue Or maybe only 3 I do't remember :3
shit :_: IT was me who did it :3 i thought its not xD Available on Google lol shit!
SiStemiC
SiStemiC Offline
[bin@HF:]
***
HF l33t
Posts:
1,031
Threads:
38
Credibility:
000
Popularity:
35
βytes:
β 0
Game XP:
0
May 17, 2015 10:26 AM
(May 17, 2015 09:38 AM)iHacker-n00b Wrote:  shit :_: IT was me who did it :3 i thought its not xD Available on Google lol shit!

Lol that's why I put XX in the URL I don't want that shit indexed with my name on it :P
Any help appreciated BTC ~
1JiBi7CjHuFqcJXyceXWKPBBQHjGn2JMKu
bass booster
Guest
 
May 17, 2015 11:11 AM
(May 17, 2015 10:26 AM)SiStemiC Wrote:  Lol that's why I put XX in the URL I don't want that shit indexed with my name on it :P

Lol so does that mean they patched the admin folder so only authorized people can access it now? I'm not real smart with web files :P but I have an understanding for most of it
iHacker-n00b
iHacker-n00b Offline
[user@HF:]
*
Registered
Posts:
361
Threads:
16
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
May 17, 2015 11:32 AM
(May 17, 2015 11:11 AM)bass booster Wrote:  Lol so does that mean they patched the admin folder so only authorized people can access it now? I'm not real smart with web files :P but I have an understanding for most of it

May be some one who Got the access :3 Have deleted it ... but not his backdoor 👹
SiStemiC
SiStemiC Offline
[bin@HF:]
***
HF l33t
Posts:
1,031
Threads:
38
Credibility:
000
Popularity:
35
βytes:
β 0
Game XP:
0
Jul 1, 2015 06:50 AM
After some investigation the admin page seems to be
Code
http://9XXbigfm.com/siiya/login.php
XX=16+11
Any help appreciated BTC ~
1JiBi7CjHuFqcJXyceXWKPBBQHjGn2JMKu
sysadmn
sysadmn Offline
[n00b@HF:]
*
Registered
Posts:
22
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Jul 12, 2015 04:09 PM
epic ... leme try this one
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Walkerz1356Sep 29, 2018 04:10 AM 5 425 Sep 29, 2018 04:10 AM
Last Post: MonetizeMaster
by wongJul 17, 2016 07:29 PM 0 301 Jul 17, 2016 07:29 PM
Last Post: wong
by ｍＯｂｉＩｅApr 29, 2013 08:39 AM 11 745 Apr 29, 2013 08:39 AM
Last Post: ๖ۣۜAlexander