Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Legion | Arbitrary File Deletion [TUTORIAL]

[img]http://i.minus.com/iv7iO7RQsAHx1.gif[/img]
Hello Sirs!

Today I am going to be teaching you about properly exploiting the Arbitrary File Deletion web vulnerability.

This will not be a very large tutorial as there isn't much to the vulnerability.


Step One
Every Arbitrary File Deletion should start out with you going to google and searching for one of the following google dorks.

Code
inurl:deletefile.php
inurl:delete.php?filename=
inurl:deletefile.php?filename=
inurl:deletefile.php?file=

Not that the useful google dorks are not limited to what is above. If none working for you, feel free to find and use your own.


[align=center][Image: yiYEfJx.png]


Step Two
Once you have found your target website from your google search and clicked on the link to the web page you should see something like this...

You should see a warning in the page which states that there is no such file in the directory.

This means that the site is vulnerable for Arbitrary File Deletion and you may begin to exploit it. If you did not return with something like what is in the above picture, I suggest that you keep looking for a vulnerable site as you should eventually find one. Do not worry.


[Image: yiYEfJx.png]


Step Three
Now that you have completed the first two steps above, you can move on to the third and final step.

You will need to find one of the files in the vulnerable website that you wish to delete.

And, boom! It is gone!
Seems like a nice tutorial. I don't really get step 3 could you be more detailed at this?

Thanks in advance,

Rapist🤝
Why is your tutorial so similar to this existing one?
https://hackforums.net/showthread.php?tid=2895305
https://gyazo.com/6bad1b204b2ae8050fe7ff22af67e7f3
https://gyazo.com/dd7241fb4a9d702d5d5e516fcc2b8435
(Jan 12, 2014 09:17 AM)Vincenzo‎ Wrote:  Why is your tutorial so similar to this existing one?
https://hackforums.net/showthread.php?tid=2895305
https://gyazo.com/6bad1b204b2ae8050fe7ff22af67e7f3
https://gyazo.com/dd7241fb4a9d702d5d5e516fcc2b8435

I used the same image as I was to lazy to take my own screen shot haha.
Good but not a very well explained tutorial.... Specially 3rd step! But i will try it out soon and tell you back the results!
(Jan 12, 2014 09:17 AM)Vincenzo‎ Wrote:  Why is your tutorial so similar to this existing one?
https://hackforums.net/showthread.php?tid=2895305
https://gyazo.com/6bad1b204b2ae8050fe7ff22af67e7f3
https://gyazo.com/dd7241fb4a9d702d5d5e516fcc2b8435

Agreed.

Looks like you just changed some of the wording around.
Now Sl0w, why is this tutorial the EXACT same as the other ones?
wget http://******/ResponsiveTables/deletefile.php?id={0..1000}

trololololol
(Jan 12, 2014 10:09 AM)Niggz Wrote:  I used the same image as I was to lazy to take my own screen shot haha.

Slow being a fucking skid again.

I really hate how you consider yourself a blackhat when you can't even make up your own TuTs 🤦‍♂

Edit: inb4 closes thread
(Jan 12, 2014 06:11 PM)/Jigsaw/ Wrote:  Slow being a fucking skid again.

I really hate how you consider yourself a blackhat when you can't even make up your own TuTs 🤦‍♂

Edit: inb4 closes thread

I can vouch for this users responce.
(Jan 12, 2014 09:17 AM)Vincenzo‎ Wrote:  Why is your tutorial so similar to this existing one?
https://hackforums.net/showthread.php?tid=2895305
https://gyazo.com/6bad1b204b2ae8050fe7ff22af67e7f3
https://gyazo.com/dd7241fb4a9d702d5d5e516fcc2b8435

Yeah sl0w. Why is it exactly the same?

Why can't you be original and stop skidding other posts you leeching cunt bag.

Mostly everyone is tired of your shit.

You are not "Blackhat". You don't exactly deserve it.

You make a bad impression on every group you join.
(Jan 13, 2014 01:16 AM)Ascendon Wrote:  Yeah sl0w. Why is it exactly the same?

Why can't you be original and stop skidding other posts you leeching cunt bag.

Mostly everyone is tired of your shit.

You are not "Blackhat". You don't exactly deserve it.

You make a bad impression on every group you join.

Vouch.
Highest Quality post here!
It's leejun lol? What the hell do you expect? Some rooting tutorial that actually does shit or

wget exploitdb.com/exploit/yolo
gcc -o exploit.c lulz
./lulz
Hiring PHP developers does not contribute to the quota of employees with disabilities.
[Image: lPQX27G.png]

(May 17, 2015 08:27 PM)♕ Pimp ♕ Wrote:  you're a waste of my time and giving me cancer.
Jesus christ, you totally ripped this off. LQ
af
The saddest part is he is in Legion, such a good group but he is making it look bad.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Elite_xApr 13, 2025 04:44 PM 4 571 Apr 13, 2025 04:44 PM
Last Post: SS2580G
by Dread.ReaperJun 2, 2023 12:49 AM 9 376 Jun 2, 2023 12:49 AM
Last Post: Hanzo91
by Dread.ReaperMay 28, 2023 08:30 AM 1 133 May 28, 2023 08:30 AM
Last Post: Dread.Reaper