Mar 10, 2016 12:19 PM
(This post was last modified: Mar 10, 2016 10:27 PM by Froggen.)
thecoolclass. com/editor/index.php?mwh=3
Any ideas on how to crack this password ?
I've tried using Brutus, and SqlInjection, it seems to be vulnerable, but not sql vuln...
Any help on cracking this FTP editor ?
🤝
After doing some more vulnerability scans, This site seems to have multiple XSS vulnerabilities. I can list a full detailed scan result if that will help anyone else? I'm a begginer, and only know SQLI so far.. Maybe someone knows what to do with these XSS, Same site scripting , Bruteforce, vulnerabilities ?
Update: I think I dabbled upon something !
with some snooping around this vulnerabilty scanner, it let me into some site structure ?
I have found my win into a "parent directory" of the website ?
Index of /editor/mwftp5
Parent Directory
_hclib/
_sessions/
common/
ftp/
hoster/
web_dir.php
Apache Server at thecoolclass. com Port 80
( is this anything important ) will any of this help deface the website? or lead me to the Password Crack ?
XSS Vuln Location - /editor/index.php
Any ideas on how to crack this password ?
I've tried using Brutus, and SqlInjection, it seems to be vulnerable, but not sql vuln...
Any help on cracking this FTP editor ?
🤝
After doing some more vulnerability scans, This site seems to have multiple XSS vulnerabilities. I can list a full detailed scan result if that will help anyone else? I'm a begginer, and only know SQLI so far.. Maybe someone knows what to do with these XSS, Same site scripting , Bruteforce, vulnerabilities ?
Update: I think I dabbled upon something !
with some snooping around this vulnerabilty scanner, it let me into some site structure ?
I have found my win into a "parent directory" of the website ?
Index of /editor/mwftp5
Parent Directory
_hclib/
_sessions/
common/
ftp/
hoster/
web_dir.php
Apache Server at thecoolclass. com Port 80
( is this anything important ) will any of this help deface the website? or lead me to the Password Crack ?
XSS Vuln Location - /editor/index.php

